Scamdemic Series: Online Phishing Scams Flourish During Coronavirus Pandemic

//  Leave a Comment

Welcome to the first installment of our new Scamdemic Series.  Each week I am going to deep dive into one type of scam making the rounds during the global Covid-19 pandemic. We’ll talk about how the scam works, who scammers are targeting, and how to avoid becoming a victim.

First up, we’re going to talk about phishing—and no I’m not referring to how fans of the psychedelic jam-rock band Phish zealously ponder the meaning behind the band’s set list choices or wax nostalgic about the first time they saw drummer Jon Fishman’s vacuum solo. Phishing scamsters are way more of a problem. 

What Phishing Scams Are

Phishing scams are emails, texts, spam, phone calls or websites disguised to look or sound like they are legitimate or trustworthy. In reality, cybercriminals are behind these scams and they are designed to trick you into giving up your personal and private information.

According to a cnbc.com article, coronavirus-related robotext scams are becoming more difficult to decipher. “It starts with a text purportedly from the Internal Revenue Service asking to confirm information for a stimulus payment through a link,” the article says. Clicking on the provided link takes you to an authentic looking IRS webpage where you are asked to enter your name, contact information and Social Security number.  Once the scammers have all the information they need, you are rerouted to the real IRS website where you may remain unaware that you were phished out of your sensitive information.

Scammers can be very nuanced in the use of phishing attacks. Understanding that a large segment of the population relies on home delivery of goods during the pandemic, scammers have designed emails and texts purporting to provide information on the delivery of packages. In this version of the scam a customer, eager to know the status of a package, may not think twice about opening an email claiming to come from FedEx. But by clicking on the link, a customer may inadvertently provide his or her personal information to a scammer or download malware. 

In mid-March, emails claiming to be from the World Health Organization (WHO), a leading health organization in the fight against the coronavirus, were sent out to the unsuspecting public. The emails included various attachments providing guidelines and recommendations for protecting against Covid-19 and staying safe during the pandemic. The real purpose of these emails was to lure recipients into downloading malicious attachments, including an invasive keylogger called Agent Tesla capable of stealing passwords, logging keystrokes, and capturing screen and video from your device.

The above cases are just a few examples of the phishing scam scene today. And, unfortunately, phishing scams come in many different shapes and sizes. In reality, they are only limited by the imagination of the scammer.  What is worse, the coronavirus pandemic has seemingly opened the phishing scam floodgates. In an April 16, 2020, Google announced that in one week they saw 18 million daily malware and phishing emails related to Covid-19. This is in addition to the more than 240 million coronavirus-related spam messages sent to users on a daily basis. Luckily, Google says they have security protocols in place that “block more than 99.9% of spam, phishing, and malware from reaching our users.”

Still, there are measures you can take to further protect yourself from these bad actors.

What You Can Do

Screenshot of the smishing scam Rocky received while working on this piece.

Educate yourself on the latest tactics used by scammers: The more aware you are of how scammers operate and the current type of scams they are engaging in, the greater the chances you will recognize a phishing scam coming your way.

Personal experience can back this up. At the time of writing this post, I was sent a phishing text (known as smishing) thanking me for the purchase of a $469.97 product. Admittedly, there was a strong impulse to find out, as quickly as possible, what it was all about and click the conveniently provided link. The scammers behind this text were banking on the shock of seeing the dollar amount to spur me into taking some misguided action. I might not have been able to resist the urge to click on the link if I wasn’t familiar with some of the techniques used by scammers. Instead, I calmly verified directly with my bank if any unauthorized payments had been made. When I was assured none had, I simply deleted the text and moved on with my day.   

Be vigilant and pay attention: Treat texts and emails you receive from unknown sources as potentially suspicious,  especially if they are unsolicited. If you receive a suspicious email/text, do not reply, open any attachments or click on any links. Instead, contact the business or organization directly and verify with them that they sent you the email/text. If the email or text is from an unknown source, think hard before going further and clicking on any links. The best course of action may be to delete these types of communications. If you want to respond to an unsolicited email, you can rely on websites like CheckPhish—a free url scanner that verifies whether the site is known for phishing—before performing any call to action.

Take note of the language used in emails and texts. Emails that are purportedly from a reputable business but are overly friendly should raise some flags. If they begin with: “Hello Mate” or “Hi User!” steer clear of them—they are likely scam communications. Egregious grammatical and spelling errors are also a strong sign a scammer is working behind the scenes to dupe you into divulging sensitive information.  

Up Next

In the next blog post, we will look at how scammers have set their sights on your government coronavirus relief payments. For many, stimulus checks represent a lifeline in times of economic uncertainty but for cybercriminals they are just another opportunity to enrich themselves at your expense.

Covid Cons: Introducing the New ‘Scamdemic Series’ Spotlighting Coronavirus-Related Cons And How to Avoid Them

//  Leave a Comment

Covid-19 and the New Wild West 

Imagine you are driving to town to restock on essentials. As you are driving, you see cars lining up under a white banner advertising, “Covid-19 testing here.” You wonder if you may have the coronavirus because you haven’t been feeling well lately and so you decide to get tested. 

It strikes you as odd that the operators of the testing site prefer a cash payment of $240 or that their personal protective equipment (PPE) has that signature DIY-flare. In a world where every new day brings in a “new normal,” it’s easy to lose sight of what normal actually looks like. 

You hand over the cash, get your throat swabbed and go home and wait for test results that will never be sent to you. You don’t know it yet, but you have become a victim of a new crop of coronavirus-themed scams. 

Businesses May be Closed but the Business of Fraud is Booming

The coronavirus pandemic has been a deterrent to the ordinary criminal—drug dealers, murderers, rapists, burglars, and their ilk—those who, under normal circumstances, have to leave the house in order to commit crimes. After all, a burglar usually waits for you to go out before helping himself to your things. For the scores of fraudsters and online criminals out there, however, this prolonged stay-at-home life has been a bonanza. According to the Federal Trade Commission, during the first three and a half months of 2020, Americans reported losing $13.44 million to Covid-19-related scams, while Canadians have lost $1.2 million in the last several weeks, alone.

In an effort to help arm our readers with the knowledge necessary to protect themselves from the growing number of pandemic scams out there, we’re putting together new series here on the blog called Scamdemic. Each week we’ll focus on a different scam born out of the global coronavirus pandemic, giving you the high-level overview of how these cons work, as well as tips on how to best protect yourself from them. 

In the meantime, here’s a quick list of covid-related cons that have been in in the news recently:

  • Phishing attacks: As we continue to isolate at home, we rely more than ever on the internet for work, essentials and entertainment. Scammers are taking advantage of this new reality by using phishing scams—which use emails, texts, spam, or websites to steal sensitive, personal information. Last month the Better Business Bureau released a report highlighting a number of “free trial” offer scams making the rounds during Covid-19, including one claiming to offer free Netflix streaming services. 
  •  Investment scams: Investment scams can be particularly enticing when they play off of what’s happening in the news—the search for a vaccine, PPE shortages, new testing technologies, etc.—luring victims into thinking an investment is guaranteed to bring in a good return.  Unsurprisingly, investment scams are on the rise during the pandemic. Last month Maryland’s Attorney General warned of an expected surge of coronavirus investment schemes, and the BBB published a “scam alert” on a new pyramid scheme making the rounds on social media.
  • Healthcare-related scams: PPEs, medical devices and other necessary items are in short supply these days.  Plenty of scammers are pushing fake and defective products or marking up prices on supplies. Don’t think you can fall for one? Even governments are susceptible to these scams—scammers conned the German government out of some $34 million in relief money meant to help its citizens, Forbes reports.
  • Stimulus checks and government impersonation schemes: For many people, stimulus payments represent a financial lifeline during these uncertain times. The U.S. Treasury Inspector General for Tax Administration (TIGTA), the agency responsible for deterring fraud related to Internal Revenue Service (IRS) programs and operations, “anticipates that criminals will engage in various scams and schemes in attempts to intercept EIPs (Economic Impact Payments), and/or steal sensitive taxpayer information during these challenging times.” These schemes include fake websites, emails or texts claiming to be from the IRS asking for personal, sensitive information so that scammers can steal your stimulus checks from you. 
  • Employment Scams: Many people are looking for online work while they wait for the job market to rebound from the pandemic shutdowns. In some of these scams, fraudsters may require an upfront “training” fee, ask that you provide personal and banking information to run a credit check or set up direct deposit payments, or send you a check to buy hardware and supplies from “approved vendors,” only to bounce the check and pocket the profits on the purchases the new hire made.  
  • Small Business Scams: As governments allocate millions of dollars to help businesses stay afloat, scammers are busy trying to divert these funds into their own pockets. Stay ahead of them by understanding some of the ways they can get their hands on your money before you do.
  • Charity Scams: People have fallen under unprecedentedly hard times—Covid-19 has had historic impact around the world— and many who are in stronger positions to weather the economic fallout want to do their part to help those less fortunate. But before giving your money away be sure that your charitable donations are really going to help those in need.

Up Next

In the next blog post, we will be taking a closer look at one of the most deceptive and effective ways that scammers steal sensitive and personal information from victims—phishing attacks. Phishing attacks are emails, texts, and other forms of communication that appear to come from sources that are trustworthy and reputable—when in fact they are anything but trustworthy.

Psychology of Fraud: Mental Triggers That Leave Us Vulnerable to Scams

//  Leave a Comment

John Gentile and Lorn Leitman met in the Army Reserves in the early 1970s and quickly became best friends. After their military service, Gentile graduated from medical school and established a successful chiropractic business in South Florida. Mr. Leitman became a licensed attorney and CPA. For almost four decades they strengthened the bonds that were formed during their Army days—they traveled together, called themselves brothers; Gentile even became a godfather to Leitman’s daughter.

In 2012, this storied friendship came to a bitter end when Leitman received a 17.5-year prison sentence for operating a Ponzi scheme that defrauded investors, including Gentile, of a total of $4 million dollars.  

Mr. Gentile’s ordeal was in many respects similar to the experiences suffered by other victims of fraud. Yet, a pervasive misconception about financial fraud victims is that they are most often elderly, naïve, greedy, passive, socially isolated or uneducated people—when in fact, research suggests the opposite. The truth is that fraudsters and scammers target all people, regardless of their demographics.

In fact, having a brain makes you a good candidate for being scammed because the human brain is wired for persuasion. Humanity’s susceptibility to persuasion, like much of our behavior, is a product of evolution. From an anthropological perspective, the ability to be persuaded was a biological necessity required in order to get a group of individuals to act in the interest of the collective. In exchange for giving up a strongly held opinion, a tribe member would receive protection and inclusion into the tribe. In addition, there are a series of human tendencies and needs—our belief in the goodness of others, the desire to please, the need to be cooperative, our affinity for and willingness to believe in stories, etc.—that, if satisfied or met, can be exploited by skillful and unethical individuals. 

Here are some of the mental mechanisms by which our brains can expose us to scams.

But I’m Too Smart

Believing that you are incapable of falling for a scam leaves you in a highly vulnerable position because your guards are already down. Social scientists call it the “illusion of invulnerability”—the belief that you are free from a danger because of a perceived advantage or a false sense of optimism. The invulnerability illusion was illustrated in a Better Business Bureau study that found that younger and educated people—more so than elderly people—were more susceptible to scams because they never expected to be targeted. In the study, which surveyed more than 2,000 adults, 69% of victims were under the age of 45, and 78% had a college or graduate degree. 

The Need to Please

We supposedly live in an age of cynicism and selfishness. The nightly news airs a string of negative and sensationalized stories, Facebook can be a blackhole of toxicity and the neighbor rants about how there is no decency anymore. But the fact is that most people are nice. Not only are people nice but they are driven by a need to be generous and giving, especially when others have been generous to them. This need for reciprocity can be a dangerous weapon in the hands of a con artist.  

For example, if someone were to offer you a lucrative investment opportunity you may, in turn, see it as an act of goodwill. In exchange, you may be pressed into listening to a sales pitch or, worse yet, into making a misguided financial commitment.

The Captive Audience

Through storytelling, early man was able to build community and maintain social order. And even today, when we hear a compelling story, our brain becomes measurably more engaged. When this happens, the neurochemical oxytocin is synthesized in the brain, causing us to develop and associate trust with the storyteller. In movies, this causes us to identify and feel for the characters, but the same principle applies in interpersonal relationships. This is known among neuroscientists as the “you seem trustworthy” signal, and research suggests that “emotionally engaging narratives” inspire prosocial, cooperative behavior in response. Con artists who are good performers or storytellers have an easier time connecting with victims, and victims are prewired to emotionally respond, identify and empathize with them.

A Wolf In Sheep’s Clothing

Humans are social creatures that enjoy spending their time with people who share the same values, passions, beliefs and worldviews. The problem arises when you automatically regard everyone within your group as having the same goodwill and intention as you do.  

Scammers regularly target religious communities—aptly termed “affinity frauds” by law enforcement—because they can easily exploit the trust level that exists between members. Bernie Madoff, who orchestrated the biggest investment fraud in history, stealing close to $65 billion dollars from investors, was able to gain the trust of the Jewish community by exploiting his Jewish affiliations. 

In the case of Dr. John Gentile, the chiropractor and Army veteran, he relied on his close relationship with Leitman and never properly vetted the financial investments he was offered. Gentile saw in Leitman a like-minded individual. It never occurred to Gentile that his friend (and fellow veteran) was capable of scamming him.

F.O.M.O. (Fear of Missing Out)

People are generally afraid of missing out on a “good thing.” And if a “good thing” is available in limited quantities or for a short period of time, people tend to want it even more. Fear of missing out can be a driving force behind many ill-advised financial decisions. Con artists can present opportunities in ways that make it hard for an investor to decline. Scammers may say that the offer must be accepted after the pitch or that there is a cap on the number of investors and that swift action must be taken before it’s too late. In the end, the victim concludes that the opportunity is too good to miss out on without properly verifying the offer.

In Conclusion

By no means an exhaustive look at the way the mind can sometimes make it easier to fall for scams, this post can help with recognizing some of the cognitive pitfalls that can make anyone vulnerable. It is important to remember that if you have been defrauded it is not because of a shortcoming on your part. Naturally, the emotional toll of falling for a scam can be tough to overcome. But it helps to remember that anyone is susceptible to financial fraud—even the best and the brightest. 

Up Next!

Check back for more white-collar crime and fraud news, including the the biggest cons capitalizing on the global Covid-19 pandemic today, and how to spot one when when you see it.

About the Author

Lottery Winner Launches Rantanna Media to Expose Con Artists, Cover-Ups

//  Leave a Comment

FOR IMMEDIATE RELEASE

Lottery Winner Launches Rantanna Media to Expose Con Artists

Randall Rush to use media company to spotlight white collar crimes, other social injustices 

(April 28th 2020 – Vancouver, B.C.) Randall Rush, who won Canada’s $50 million Lotto Max Jackpot in 2015 has announced the launch of Rantanna Media, a mission-driven publishing and production company that is committed to shining the spotlight on white collar crime and other social injustices. 

Rantanna Media was born out of a quest for justice by Rush, who found himself the victim of a $4.6 million con within months of his lottery win. Because Rush had the money to hire top attorneys and undergo a grueling eight-month civil court battle, he was able to recoup sixty percent of his money. But he was disgusted to learn that so little is done in the criminal justice system to stop white collar criminals. And when he discovered that at least a hundred other people had fallen prey to the same con artist who had taken him, he knew he had to act. 

“I had heard about the devastating impact of white collar crime, but didn’t understand how emotionally crippling it could be until it happened to me,” notes Rush. “I find it outrageous that so little is done legally to stop these criminals from ruining peoples’ lives. Given the enormous financial gift I have been given, I see it as my responsibility to take on this fight.” 

Rush says the mission of Rantanna Media is three-fold. First, he wants to give victims a voice and ensure their stories are heard. Next, he wants to expose these con artists to the world in order to prevent them from hurting anyone else. Finally, he is determined to ignite a movement that forces the criminal justice system to address the gaps that Rantanna Media spotlights.  

Rantanna Media’s first two books, 13 Billion to One and Bloodsuckers, focus on Rush’s personal experience with white collar crime and stories of dozens of other victims who have fallen prey to con artists. Upcoming books focus on cover-ups of fraud and sexual abuse among Evangelical Christian leaders. 

Along with sharing these true stories in print, e-book and audio form, Rantanna Media is exploring film and documentaries. 

“At Rantanna Media, we are determined to raise such widespread awareness that these criminals will have nowhere left to hide,” says Rush. “But we can’t do it alone. We are asking people who have been a victim of white collar crime and other social injustices to report it to police and share their stories with us at Rantannamedia.com.” 

For more information, visit www.rantannamedia.com or contact their team. 

Download the full press release hereDownload