{"id":1268,"date":"2017-07-19T20:13:29","date_gmt":"2017-07-19T20:13:29","guid":{"rendered":"http:\/\/investspectrum.com\/uma\/?p=1268"},"modified":"2019-02-27T21:47:33","modified_gmt":"2019-02-27T21:47:33","slug":"phishing-smishing-if-you-didnt-order-it-dont-click-on-it","status":"publish","type":"post","link":"https:\/\/investspectrum.com\/uma\/phishing-smishing-if-you-didnt-order-it-dont-click-on-it\/","title":{"rendered":"Phishing Smishing: If you didn\u2019t order it, don\u2019t click on it."},"content":{"rendered":"<p style=\"text-align: justify;\">It\u2019s the oldest online scam in your inbox: They send out an official looking e-mail. \u201cYour password has expired,\u201d \u00a0\u201cYour account is in arrears,\u201d \u00a0\u201cPlease verify a charge,\u201d or some emergency that needs you ASAP.\u00a0 These are the tricks \u201cphishers\u201d use to get you to click 1st and think 2nd. So how do you protect yourself from phishing schemes?<\/p>\n<p style=\"text-align: justify;\"><a href=\"http:\/\/investspectrum.com\/uma\/wp-content\/uploads\/phishing.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1270\" src=\"http:\/\/investspectrum.com\/uma\/wp-content\/uploads\/phishing.jpg\" alt=\"\" width=\"620\" height=\"413\" srcset=\"https:\/\/investspectrum.com\/uma\/wp-content\/uploads\/phishing.jpg 620w, https:\/\/investspectrum.com\/uma\/wp-content\/uploads\/phishing-300x200.jpg 300w\" sizes=\"(max-width: 620px) 100vw, 620px\" \/><\/a><\/p>\n<p style=\"text-align: justify;\"><strong>BE WARY OF E-MAILS WITH LINKS YOU DID NOT REQUEST<\/strong><\/p>\n<p style=\"text-align: justify;\">Very simply&#8211;if you see an official looking communication from your bank, credit card, Amazon or any entity, directing you to take action by clicking a\u00a0link&#8211;don\u2019t!\u00a0 Click it, and the bad guys verify your existence.<\/p>\n<p style=\"text-align: justify;\"><strong>COMPANIES DON&#8217;T ASK FOR PASSWORDS IN E-MAILS<\/strong><\/p>\n<p style=\"text-align: justify;\">Hackers are really good at creating phony e-mails that look like the real thing.\u00a0\u00a0The company \u201cwill never ask you for your password in an e-mail or send you a password as an attachment.\u201d\u00a0 The same goes for the IRS, banks and other officials&#8211;if you\u2019re under an audit, you\u2019ll be notified by the US mail. You don\u2019t need to sign into an account that\u2019s probably bogus.<\/p>\n<p style=\"text-align: justify;\"><strong>HOW TO SPOT A FAKE E-MAIL<\/strong><\/p>\n<p style=\"text-align: justify;\">Fake e-mails usually look spot on, but there\u2019s often a typo, a mis-spelled word, a contact address that isn\u2019t a google.com or amazon.com , but instead a webmail address. Perhaps you have a Wells Fargo account and get an email from: Wells Fargo Support. Looks legit, but would they use <a href=\"mailto:WellsFargoSupport@gmail.com\">WellsFargoSupport@gmail.com<\/a>\u00a0\u00a0 Not likely!\u00a0 I have even seen domains registered close to the legitimate such as <a href=\"mailto:info@amazzon.com\">info@amazzon.com<\/a>\u00a0\u00a0 Just a small misspelling could get your information compromised.<\/p>\n<p style=\"text-align: justify;\">Many times the pages served by these links are not secure. They will show up as http:\/\/ instead of secure https:\/\/ The S stands for secure, by the way.<\/p>\n<p style=\"text-align: justify;\"><strong>WHAT IF A FRIEND SENDS YOU AN E-MAIL WITH JUST A LINK? <\/strong><\/p>\n<p style=\"text-align: justify;\">Be wary, inspect it, ask the friend what the intent was before agreeing to click on the link. If it doesn\u2019t seem legit, don\u2019t be tempted, just delete it.\u00a0 If the e-mail is from a company, and you&#8217;re addressed as &#8220;sir&#8221; or &#8220;madam&#8221; and not by your name, and you&#8217;re also asked to fill out a form, the smartest solution&#8211;don&#8217;t.<\/p>\n<p style=\"text-align: justify;\"><strong>SMISHING: MOBILE MAKES IT HARDER <\/strong><\/p>\n<p style=\"text-align: justify;\">Smishing is a phishing scam that is sent over Short Message Service (SMS) Text message. It\u2019s not just your inbox that they are after anymore.\u00a0 Most texting fraud is an attempt to get your private information by responding by text.\u00a0\u00a0 They often use fear tactics to get you to respond hastily.\u00a0 In an age where we live on our smart phones, these fraud attempts are smaller, harder to spot, and more frequent, so you&#8217;ll need to be that more diligent and take the time for inspection.<\/p>\n<p style=\"text-align: justify;\"><strong>HOW TO RESPOND TO A COMPANY WE TRUST?<\/strong><\/p>\n<p style=\"text-align: justify;\">Google, Facebook, Amazon, Apple and other companies routinely ask us, via an e-mail, to update our passwords when we&#8217;ve forgotten them. Their pages <span style=\"text-decoration: underline;\">look<\/span> authentic, and they offer e-mails with links when we ask for a reminder. So why should I click their link when they send it to re-set the password? <strong>Because you requested it from the company<\/strong>.\u00a0 If you&#8217;re worried and want to play it safe, skip clicking in any email and go straight to your browser. Most company websites let you change your password at their registered <u>.com<\/u> addresses, by going to the account section and opting for a new password.<\/p>\n<p style=\"text-align: justify;\">Finally, it goes without saying, while I have your attention, that this is a great time to update\u00a0your passwords with hacker proof collections of numbers, symbols, upper and lower-case letters. Stay away from hacker favorites like &#8220;password,&#8221; 123456&#8243; the name of your street, default, or your pet\u2019s name.<\/p>\n<p style=\"text-align: justify;\">Long passwords from a pass phrase work well. \u201cJimwasmyfavoriteCollegePal1\u201d is an example of a strong password.\u00a0 There are secure password manager programs such as Roboform, <a href=\"https:\/\/www.roboform.com\/\">https:\/\/www.roboform.com\/<\/a> that can also securely help you keep track of your passwords.<\/p>\n<p style=\"text-align: justify;\"><strong>WHAT TO DO IF I GET IN TROUBLE?<\/strong><\/p>\n<p style=\"text-align: justify;\">Always act quickly when you come face to face with a potential fraud, especially if you\u2019ve lost money or believe your identity has been stolen.<\/p>\n<p style=\"text-align: justify;\"><strong>FBI<\/strong> &#8211; If a phishing scam rolls into your email box, be sure to tell the company right away. You can also report the scam to the FBI\u2019s Internet Fraud Complaint Center at <a href=\"https:\/\/www.ic3.gov\/\">https:\/\/www.ic3.gov\/<\/a><\/p>\n<p style=\"text-align: justify;\"><strong>SEC<\/strong> &#8211; If the email purports to come from the Securities and Exchange Commission, alert the SEC by submitting a tip online at <a href=\"https:\/\/denebleo.sec.gov\/TCRExternal\/disclaimer.xhtml\">https:\/\/denebleo.sec.gov\/TCRExternal\/disclaimer.xhtml<\/a><\/p>\n<p style=\"text-align: justify;\"><strong>FTC<\/strong>&#8211; If you think that your personal information has been stolen, visit the Federal Trade Commission&#8217;s feature on Identity Theft at <a href=\"http:\/\/www.consumer.ftc.gov\/features\/feature-0014-identity-theft\">www.consumer.ftc.gov\/features\/feature-0014-identity-theft<\/a> for information on how to control the damage.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>It\u2019s the oldest online scam in your inbox: They send out an official looking e-mail. \u201cYour password has expired,\u201d \u00a0\u201cYour account is in arrears,\u201d \u00a0\u201cPlease verify a charge,\u201d or some emergency that needs you ASAP.\u00a0 These are the tricks \u201cphishers\u201d use to get you to click 1st and think 2nd. So how do you protect [&hellip;]<\/p>\n","protected":false},"author":6,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[57],"tags":[66,65,64,67],"class_list":["post-1268","post","type-post","status-publish","format-standard","hentry","category-news-you-can-use","tag-hackers","tag-online-safety","tag-phishing","tag-smishing"],"_links":{"self":[{"href":"https:\/\/investspectrum.com\/uma\/wp-json\/wp\/v2\/posts\/1268"}],"collection":[{"href":"https:\/\/investspectrum.com\/uma\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/investspectrum.com\/uma\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/investspectrum.com\/uma\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/investspectrum.com\/uma\/wp-json\/wp\/v2\/comments?post=1268"}],"version-history":[{"count":6,"href":"https:\/\/investspectrum.com\/uma\/wp-json\/wp\/v2\/posts\/1268\/revisions"}],"predecessor-version":[{"id":1275,"href":"https:\/\/investspectrum.com\/uma\/wp-json\/wp\/v2\/posts\/1268\/revisions\/1275"}],"wp:attachment":[{"href":"https:\/\/investspectrum.com\/uma\/wp-json\/wp\/v2\/media?parent=1268"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/investspectrum.com\/uma\/wp-json\/wp\/v2\/categories?post=1268"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/investspectrum.com\/uma\/wp-json\/wp\/v2\/tags?post=1268"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}