Publisher's Clearing House Scam:
A Sheridan County resident reported receiving a scam call from someone claiming to be a Publisher's Clearing House (PCH) driver. The caller said he had a package for the resident and needed to verify the address before arriving in 45 minutes. The resident became suspicious due to the caller's accent and refusal to answer simple questions, such as his location or the weather. The caller gave a phone number to contact the General Manager, Albert Johnson, who was unprofessional. A man with a similar accent answered, and after some awkward exchanges, the scammer claimed the resident had won a Mercedes Benz, $7,000 per week, and $3.5 million, but needed to pay a $395 fee to claim the prize. The resident laughed and confronted the scammer, who admitted the scam works on some people. After a long period of silence, the resident hung up. CyberWyoming Note: To stay safe from scams like this, always be cautious if someone calls you out of the blue with an offer that sounds too good to be true. The resident did the right thing by questioning the caller, refusing to give personal info, and not falling for the upfront payment request. Always trust your gut and double-check with official sources if you're ever unsure!
McAfee Invoice/Receipt Scam:
A Laramie citizen reported receiving a scam email impersonating McAfee. The email had the subject "Receipt -MEU" and contained a message with just the word "SGJJ." It was sent from a personal Gmail address, unrelated to McAfee. CyberWyoming Note: This type of scam, where attackers impersonate antivirus companies like McAfee, is becoming increasingly common. Always be cautious with unsolicited emails, especially those from unfamiliar sources, and avoid clicking on links or attachments. It's important to verify any suspicious communications directly through official channels to protect your personal information and devices.
Google Ads Gone Bad:
Tech support scammers are heavily exploiting Google Ads to deceive victims, particularly by using fraudulent ads for popular brands like PayPal, eBay, and Apple. These scams, which have been linked to significant financial losses (around $924 million in 2023), often involve ads that lead to fraudulent support pages designed to steal personal information. Repeated offenders have been found using the same Google Ads accounts to run multiple malicious campaigns over time, with some accounts involved in over 30 incidents in just a few months. Despite reports, Google has not consistently blocked these accounts, raising concerns about the effectiveness of its policies in preventing repeat scams. Efforts to tackle such scammers require more comprehensive, long-term strategies rather than addressing individual incidents.
– Brought to you by Malwarebytes
malwarebytes.com/blog/scams/2024/12/repeat-offenders-drive-bulk-of-tech-support-scams-via-google-ads
Avoid Getting Inked by Printer Support Scams:
Printer users often encounter frustrating technical issues, and many turn to Google or AI for solutions, making them vulnerable to scams. Fraudulent tech support websites, disguised with brand names like HP or Canon, appear in search results, tricking users into downloading fake drivers or contacting scammers. These scammers often use remote access to steal personal data, lock computers, or commit fraud. Such scams are prevalent, especially in ads linked to printer help, which lead users to fraudulent sites. To avoid falling for these schemes, it’s advised to be cautious with search results and use tools like Malwarebytes Browser Guard to block malicious ads. – Brought to you by Malwarebytes
malwarebytes.com/blog/scams/2024/11/printer-problems-beware-the-bogus-help
AI Chatbot Talks Too Much:
A security breach was discovered involving AI chatbot provider WotNot, which exposed 346,000 files containing sensitive personal information, such as ID documents, medical records, and resumes, due to improperly configured cloud storage. The leak occurred because WotNot's cloud storage bucket was set to allow unauthorized access, mainly affecting customers using the free plan, which lacks security features. These files included passports, medical histories, and contact details, posing a significant risk for identity theft and fraud. WotNot acknowledged the issue, explaining that the storage settings were altered for a specific use case but failed to verify the exposure. They also recommended that clients delete sensitive files after processing and stressed the importance of securing data before sharing it.
– Brought to you by Malwarebytes
malwarebytes.com/blog/news/2024/12/ai-chatbot-provider-exposes-346000-customer-files-including-id-documents-resumes-and-medical-records
PayPal Invoice Scams Are on the Rise:
PayPal became the third-most impersonated brand for scams, with a rise in fake invoice scams, particularly involving cryptocurrency, according to the Federal Trade Commission. These scams often involve emails or messages with fake invoices for purchases you didn’t make, urging you to call a customer service number where you may be asked for personal or payment information. These messages aim to direct you to fraudulent websites or impersonate customer service representatives to steal your information. To protect yourself, avoid engaging with suspicious messages, and always report fraud through PayPal’s verified channels.
– Brought to you by AARP aarp.org/money/scams-fraud/text-alerts.html
2025 Alert for W2s:
Remember that January is the month when scammers take advantage of the 1/31/25 deadline for companies to send out W2s. They may offer quick filing, help to get the W2s out, or impersonate your accounting firm. Companies should be extra vigilant. The IRS advises companies to quickly report a W2 scam data loss as they can help protect employees from tax-related identity theft. Report to dataloss@irs.gov.
For more information, irs.gov/newsroom/form-w-2-ssn-data-theft-information-for-businesses-and-payroll-service-providers.
Individuals should also be aware that last year, the IRS reported a scam circulating on social media that was urging Americans to use their W2 information on a tax return to claim false credits for tax refunds. Scam artists were instructing people to make up their W2 information and file for credits they weren’t eligible for on their tax return, which could result in penalties and criminal prosecution. irs.gov/newsroom/attempting-this-w-2-scam-can-lead-to-penalties-for-taxpayers
Other ways to report a scam:
- Better Business Bureau Scam Tracker: bbb.org/scamtracker/us/reportscam
- Wyoming Attorney General’s Office, Consumer Protection
- File a complaint with the Federal Trade Commission at reportfraud.ftc.gov
- Get steps to help at www.IdentityTheft.gov
- Report your scam to the FBI at www.ic3.gov/complaint
- Reported unwanted calls to the Federal Trade Commission’s Do Not Call Registration. Online at donotcall.gov/report.html or call 1-888-382-1222, option 3
- Office of the Inspector General: oig.ssa.gov
- If you believe someone is using your Social Security number, contact the Social Security Administration’s (SSA) fraud hotline at 1-800-269-0271.
- AARP Fraud Watch Network (any age welcome) Helpline 877-908-3360
- IRS: report email scams impersonating the IRS to phishing@irs.gov
- Call the Wyoming Senior Medicare Patrol (SMP) for assistance with potential Medicare fraud, abuse, or errors at 1 800 856-4398
- Victim Support: The AARP Fraud Watch Network and Volunteers of America (VOA) created a new, free program to provide emotional support for people impacted by a scam or fraud, called ReST. Visit www.aarp.org/fraudsupport to learn more about the free program and register