Overview of How the Scam Works
This is a highly sophisticated scam that involved multiple stages:
- Initial Hook: Victim orders something online from what they believe is a legitimate website.
- Malware Infection: Victim receives an email, which appears to be from a legitimate tracking service, that contains a malicious link. When clicked, this link installs malware on the computer and displays a false message claiming the computer is infected.
- Fake Tech Support: Victim is tricked into calling a phone number that appears to be Microsoft’s technical support, where they are further deceived into installing software that supposedly “scans” their computer but actually enables the scammer to access it.
- Bank Scare: The “Microsoft” agent says the victim’s bank account could be compromised and directs them to call their bank using a number that is also controlled by the scammers.
- Bank Impersonation: The scammer, posing as a bank representative, claims that the victim’s account is under threat and suggests transferring money to a “safe” location.
- Federal Impersonation: Another fake representative, supposedly from a “federal banking service,” is introduced to lend more credence to the scam and to guide the victim in transferring money, often through untraceable means like cryptocurrency.
- Fake Liquidation: The scammers claim to have liquidated assets for the victim but have actually manipulated the accounts to make it appear as if money has been moved.
- Escalation: The scammers get more audacious, trying to get the victim to liquidate even more assets, like business accounts or CD accounts.
Scam Advisory: Sophisticated Multi-Stage Scams
What Happened?
Individuals are falling victim to a highly organized, multi-stage scam involving fraudulent online shops, fake tech support, bank impersonation, and fictitious federal agencies. The scam targets not only individual but also business accounts, leading to significant financial losses.
What You Should Watch For:
- Suspicious Emails: Be cautious with unsolicited tracking information emails. Always hover over the links to see if they direct to legitimate websites before clicking.
- Tech Support Calls: Never call phone numbers from pop-up alerts on your computer. Always verify the number from the official website of the company claimed to be involved.
- Bank Contact: If told to contact your bank, always use the number printed on the back of your bank card or from the bank’s official website, not a number given by someone else.
- Unusual Transactions: Be wary if you’re advised to transfer money to “secure” your account, especially to cryptocurrency wallets or through wire transfers.
- Caller ID Spoofing: Scammers can manipulate the number that appears on your caller ID. Always verify the identity of the person you are speaking to.
- Account Activity: Be cautious if someone claims to have moved your money or liquidated your assets without your explicit consent.
What To Do If You Suspect a Scam:
- Stop all communication with the suspected scammers.
- Contact your bank immediately to discuss the situation and any necessary actions, such as freezing your accounts or reversing transactions if possible.
- Report the incident to the police and any relevant federal agencies like the FTC or CFPB.
- Consult a tech expert to scan and secure your computer and phone for malware.
- Change all passwords for online accounts, especially financial accounts.
- Compile all information (call logs, emails, etc.) that can be used for an investigation.
- Inform your social circles, community, and colleagues to raise awareness of the scam.
Stay vigilant and protect yourself from falling victim to such intricate scams. Always follow best practices for cybersecurity and financial safety.
