This week, we found a slew of scams to watch out for, including those related to Instagram, the IRS, Tinder, LinkedIn, MetaMask, T-Mobile, and Amazon. Could you have spotted all the scams?
Phishing scams are one of the most common tactics used by scammers. Typically, while impersonating famous brands, they send fake text messages and emails containing phishing links and try to trick you into opening them with various lies.
In such phishing schemes, the links will take you to fake login pages that appear to belong to various brands. These pages ask you to provide login credentials to download a software update, change account settings, or any other task the crooks ask you to perform.
Instagram “is that you?” Scam
Have you ever received a message from your Instagram friend saying, “I think you are in this video, is that you? Be careful not to click on the link, even if it appears to be from your friend. It’s a scam!
Last month we wrote about a similar scam circulating via Facebook, and the tactic is the same.
First the scammers compromise your friend’s account and then they send you the phishing link. The link will take you to a fake site where you will be asked to enter your Instagram login information. If you do, scammers can take over your Instagram account and commit identity theft.
Worse still, they can spam your contacts with the same fraudulent messages, creating more victims!
Browse the web safely with Trend Micro Verification (it’s free!)
Trend Micro Verification is an all-in-one browser extension and mobile app to detect scams, phishing attacks, malware and dangerous links – and it’s FREE!
After pinning the Trend Micro Check extension, it will automatically block dangerous sites! (Available on Safari, Google Chrome and Microsoft Edge).
You can also download the Trend Micro Check mobile app to automatically detect and filter scams and spam 24/7. (Available for Android and iOS).
Visit this page for more information about Trend Micro Check.
monday april 18and is Tax Day, the deadline for filing taxes this year. Beware if you haven’t filed your taxes yet – we’re still watching tens of thousands of fake IRS websites! Scammers use fake text messages to spread these malicious links, falsely claiming that you need to review your tax return or fix other tax-related issues:
- (irs): After trying to send you letters regarding your recent tax statement, we’ve decided to let you view your new tax statement at hxxps://irs-tixxxx[.]com
Links like those in the sample post above lead to IRS impersonator websites that look like legitimate websites. On these bogus websites, you run the risk of exposing personal information such as your home address, date of birth, and individual tax identification number (ITIN). Don’t get scammed!
Here is another example of a fake tax website. Remember that the official web address of the IRS site is irs.gov!
Besides SMS scams, this week we have detected many fake MetaMask security alert emails that falsely claim that you need to verify your MetaMask wallet due to their KYC regulations:
Again, the button will take you to a fake MetaMask website. If you submit credentials like your recovery phrase, scammers can hack into your wallet and transfer all your crypto! Worse still, cryptocurrencies being decentralized, it would be almost impossible to get your money back! Be careful!
Adult website scam (Tinder/LinkedIn)
Recently, we discovered that scammers were spreading links to fraudulent adult websites with emails impersonating famous brands, including Tinder and LinkedIn. Yes, you read that right – it’s a fake LinkedIn email that leads to an adult scam page!
#1 Fake Tinder Email
“Someone matched you on Tinder! »
#2 Fake LinkedIn Email
“You appeared in 5 searches this week”
Scammers try their best to trick you into clicking the embedded button. This will take you to a fake adult website where you might end up exposing your credentials. Don’t get scammed!
Email account termination scam
We have seen many fake support emails that lead to fake login pages. Now there is a new version:
As we’ve pointed out so many times before, don’t fall for the trap!
In addition to directing you to fake login pages, the links often lead to online survey pages this state, you can claim a gift by completing a questionnaire. After completing the questionnaire, you are asked to enter your credit card details before your “gift” can be delivered.
Again, the goal of scammers is to steal your personal information — they will record everything you enter on their fake pages and use it to commit cybercrimes: for example, hacking into your bank account or stealing your identity! Here are some examples:
T-Mobile Scam Text Messages
We’ve previously reported “self-texting scams” targeting Verizon customers; now, scammers have targeted T-Mobile customers and started delivering similar scam text messages to them. Have you received any?
- Free Msg: Your bill is paid for the month of March. Thank you, here is a little gift for you:
Promising you a gift, the scammers will direct you to an online survey page:
As we all know that the page is designed to steal your personal information. Do not fall into the trap !
Amazon gift card survey scam
We’ve reported Amazon gift card scams multiple times and this week they’re still circulating:
- Congratulations on winning an Amazon Gift Card from us Shannen RAW! It’s more than a gift, it’s a mission to make our services even better for you! Check the amount you receive:
Falsely claiming you’ve won an Amazon gift card, scammers trick you into clicking the phishing link that leads to a fake online survey page:
As we explained, you might end up exposing your credentials like your credit card details on the fake site. Be careful!
How to protect yourself
- Check the sender’s mobile number/email address again.
- Beware of free gifts and prizes.
- Always go to the official website/app instead of using links from unknown sources.
- Never click on links or attachments from unknown sources. Utilize Trend Micro Verification to surf the web safely (it’s free!).
- Add an extra layer of protection to your device with Trend Micro Maximum security. Its web threat protection, ransomware protection, anti-phishing, and spam protection can help you fight scams and cyberattacks. Click the button below to try it out: