Don’t Get Caught in a Non-Delivery Scam

With the holidays coming up, and online shopping reaching its annual peak, scammers are out to get at your money and your stuff. There are loads of scams to watch for this time of year, from online “retailers” phishing for information as you shop to thieves swiping delivered packages from doorsteps and so many more. The non-delivery scam can be particularly difficult to spot, and recovery is nearly impossible. Here’s what you need to know about this scam.

How the scam plays out

In a non-delivery scam, a shopper makes an online purchase, often at a deep discount. Unfortunately, though, the promised package never arrives. After weeks of waiting, the shopper may try reaching out to the seller, only to find that the seller’s gone AWOL,

along with the victim’s chances of recovering their money and/or their purchase.

Protect yourself

Here’s how to protect yourself against non-delivery scams:

Never click on links or open attachments of unsolicited emails or on social media.
Keep your device’s security at its strongest settings.
Opt-out of websites that are full of typos and/or grammatical errors.
Check each website’s URL for authentic spelling and signs of security, like the “https” and padlock.
Research every new seller when shopping before sharing any information or making a purchase.
Avoid making payments by prepaid gift cards or wire transfer. When shopping online, it’s best to use a credit card.
Stay away from sellers who advertise as if they are residents of the U.S. and then respond to questions by claiming they are out of the country.
Be wary of items with prices that are too good to be true–they probably are!

If you’re targeted

If you believe you’ve fallen victim to a non-delivery scam, there are steps you can take to mitigate damage.

First, if you’ve paid by credit card, call the company to dispute the charge as soon as you recognize the scam. Next, alert the FTC about the scam so they can do their part in catching the crooks. If the alleged retailer is on the BBB website, you can let them know, too.

Shop smartly this season and follow the tips outlined here to avoid getting scammed. Stay safe!

‘You Better Watch Out’ for Holiday Shopping Scams!

The Holiday Season is quickly approaching, and scammers ‘see you when you’re shopping’ online and know how to trick you out of your money! Here are some quick tips that will help you avoid fraudulent retailers and ensure that you get what you pay for.

1. Maintain Your Account Awareness

Set up appropriate E-Alerts for your accounts and monitor your activity regularly. It’s especially important to monitor your accounts if while using your account information you notice anything abnormal while performing online payments. If you haven’t already, set up E-Alerts by logging in to your Digital Banking Account at HighPointFCU.com.

2. Don’t Purchase Anything Via Social Media Links

While you can find legitimate advertising on social media, it’s best to research the sale yourself via your browser, on the retailer’s official website. This way you avoid potential fraud, as scammers can easily copycat legitimate websites and advertisements.

3. Don’t Click on Links in Email or Text Messages

Even if you’ve subscribed to a particular retailer to stay up to date on sales, that doesn’t mean the ad you just received is legitimate. Scammers can duplicate or closely imitate advertisements from trusted companies. Your safest bet is to visit the official website of the retailer and look for the sale there.

4. Only Use Gift Cards on Trusted Websites

If you have a gift card you’d like to use for holiday shopping, be sure to use it with the retailer it’s associated with. If it’s a gift card that can be used anywhere, only use it on trusted websites. Do not use it in places like Facebook Marketplace or Craigslist. If the seller is a fraud, you won’t be able to get your money back.

5. Don’t Pay with Cryptocurrency or Wire Transfer

These forms of payment are nearly impossible to trace, so if you pay a scammer, you’ll likely never see that money again.

6. When in Doubt, Use Your Credit Card

Any legitimate online retailer will accept credit cards. If you’re interested in purchasing from a company you’re unfamiliar with, first do your research to see if anyone has complained about the company. If there are no red flags, make the purchase with your credit card and save the order confirmation. This way if there are any issues with your order, you can dispute the charges.

7. Be Extra Suspicious of Deals that are Too Good to be True

If something seems too good to be true, it usually is. Don’t fall prey to scammers looking to steal your information and ruin your credit. Validate the deal by navigating to the sale directly through the retailer, not through the link or ad you received.

8. Report Scams Immediately!

If you make a payment to a fraudulent retailer, call your financial institution right away. You can contact High Point FCU by calling 800-854-6052. Then, report the scam at ReportFraud.ftc.gov and at IC3.gov. And lastly, inform your friends and family! If you were tricked into a holiday shopping scam, then someone you care about could be next.

Don’t Get Caught in a Social Security Scam

Social Security scams are on the rise. Unfortunately, many of the older adults who receive Social Security benefits can be overly trusting and vulnerable to these scams. However, with some knowledge of how these scams play out, you can protect yourself and Social Security beneficiaries you know from these schemes.

How the scams play out

In a Social Security scam, a target gets a phone call from someone pretending to be a Social Security employee, who informs them that their suspended benefits need to be reactivated. The target is told they must share personal information with the caller. Alternatively, they are told they must pay a fee to reactivate their account.

In another variation of the scam, an automated voice message claiming to be from the Social Security Administration (SSA) instructs them to call a number to reactivate their “suspended” benefits. If the target follows through by calling the number, they’ll be asked to share personal information or pay a fee to continue their benefits.

The scam is sometimes pulled off through an email message containing an embedded link. The scam then follows the same script depicted earlier, concluding in the victim being asked to share personal information or pay a fee.

Of course, the end of the story is the same in each scenario: The victim shares their money and/or their information with scammers. In doing so, they pad the scammers’ pockets or grant access to their financial accounts.

Protect yourself

The SSA cautions Social Security beneficiaries to be wary of phone calls claiming to represent their organization. Also, the SSA will never:

Ask you to share a full Social Security number over the phone.
Demand immediate payment by gift card, prepaid card, wire transfer, cryptocurrency or cash sent through the U.S. postal system. The SSA only accepts payments electronically through Pay.gov, Online Bill Pay or physically by check or money order at its offices.
Threaten a beneficiary with arrest or legal action for not paying immediately.
Suspend a Social Security number.

In addition, if there is an issue with someone’s account, the SSA will notify them through the mail. They will only send emails or text messages to someone if they’ve signed up for them.

If you’re targeted

If you believe you’re being targeted by a Social Security scam, hang up on the caller and report the scam to oig.ssa.gov. You can also call 1-800-772-1213 and ask if there is actually a problem with your benefits. If you’re being scammed, the SSA will be better equipped to stop the scammers.

If you receive a suspicious email about your Social Security benefits, mark it as spam and do not respond. It’s also a good idea to block numbers that continuously send scammy text messages.

As a rule, never agree to wire money to an unverified contact over the phone or online. In fact, it’s best not to share any personal info over the phone or internet.

Finally, tell your friends and family about the scam so they can be aware and protect themselves.

Stay safe!

All You Need to Know About SIM Swaps

SIM swaps, also known as SIM swap scams or SIM hijacking, can be a nightmare for an unwary victim. According to a recent announcement by the FBI, this ruse is on the rise. Here’s what you need to know about this prevalent scam and how to protect yourself.

How the scam plays out

Before the scam is pulled off, the scammer will generally employ a phishing scam to obtain the target’s personal information, mobile number, and phone service provider information. They’ll then use this info to convince the service provider that they are actually the target and ask them to transfer the number to their own SIM card. Finally, they’ll insert the newly activated SIM card into their own device and use it to access the victim’s accounts by bypassing the SIM-based two-step authentication. If the target doesn’t catch on soon enough, the scammer can change all passwords for online accounts linked to the phone. This leaves the victim with an inactive SIM card and locked out of their own accounts.

Warning signs of a SIM swap

You can no longer make calls or send text messages. This is the very first sign. You will likely still be able to use your apps at first, so be sure to take action right away by changing your email password and other account passwords.
You receive an email stating that your SIM card was activated on another device.
You suddenly can’t log in to your accounts.
You discover unfamiliar financial transactions.

If you’ve been targeted

If you believe you’ve been targeted by a SIM swapping scam, take these steps to mitigate the damage:

First, change your email password, then change the passwords and logins on all your other accounts.
Contact your cellphone provider to regain control of your phone number.
Let your financial institution and credit card companies know about the scam so they can look out for suspicious activity on your accounts. Consider locking your financial accounts until the issue is resolved.
Consider placing a credit alert and/or credit freeze on your accounts.
Report the scam to your local FBI field office, your local law enforcement agency and the FBI’s Internet Crime Complaint Center.

Protect yourself

Despite its prevalence, there are ways to protect yourself from SIM swaps:

Never share personally identifiable information online.
Use long and strong, unique passwords across all your online accounts.
If possible, create a password code with your cellphone carrier that needs to be provided before any changes can be made.
Never share information about your financial assets while online.
Never share information about your mobile phone number or cellphone provider with an unverified contact over the phone or online.
If you receive an unexpected call, message or email from your mobile phone’s provider asking you to share or confirm information, do not engage. Contact the provider directly to determine if the communication was authentic.
Keep your social-media platform settings private.
Sign up for E-Alerts for SMS and Email.
Use strong, updated security for all your devices.

Stay alert and stay safe!

Don’t Get Caught in an Election Scam

Democracy is a privilege that’s upheld by the election process. But scammers are out to hijack this process and cause havoc throughout election season. Here are three red flags to watch out for this time of year to avoid an election scam.

1. Eleventh-hour campaign contributions

This scheme targets voters right before elections by asking them to make a donation toward their chosen candidate’s campaign. They’ll claim to represent the candidate and suggest that the candidate just needs one big push to move to the front of the line.

Unfortunately, if the target believes the caller and makes a donation, they’ll be giving money helping to line a scammer’s pockets.

Stay safe: If you’d like to contribute to a candidate’s campaign, reach out to campaign headquarters on your own through their website.

2. Polling for information

During election season, informal poll-takers and petitioners are everywhere while canvassing voters. Once they have your attention, they’ll ask who you’re voting for, request that you fill out a survey or have you sign an election petition on a particular issue. But first, some will say they’ll need your personally identifiable information (PII), like your name, date of birth, home address and even your Social Security number. If you oblige, you’ll be sharing your information with a scammer.

Stay safe: Never share your PII with an unverified contact. If you do decide to fill out a voter survey, be super-selective about the information you share. Don’t share your Social Security number, driver’s license number or any other information that can be hijacked for crime.

3. Voter re-registration

In the weeks leading up to Election Day, you may get a bogus voter registration form, claiming your name has been mistakenly removed from voter rolls. They will say you can get back on by filling out this form and mailing it out. Alternatively, they’ll reach out over the phone, text, or email, and tell you to register by responding. Naturally, this is an election scam!

Stay safe: Remember that you can only register to vote by mail. In addition, there’s no reason to believe your registration is no longer valid. If in doubt, search your state’s Secretary of State website.

Stay safe, and may the best candidates win!

All You Need to Know About Cybersecurity

Cybercrimes are increasing massively each year. In fact, according to Cybercrime Magazine, cybercrime will cost the world $10.5 trillion annually by 2025.

The best way to protect yourself from falling prey to cybercrimes is by being aware of common tactics and keeping your systems and devices secure. In honor of Cybersecurity Month, let’s take a closer look at this essential toolset and how to best harness it for your protection.

What is cybersecurity?

Cybersecurity is the protection of online devices, networks, data and electronic systems from attacks by hackers, scammers and cybercriminals.

There are several major categories of cybersecurity:

Network security is the securing of a computer network from intruders who commit crimes by targeted attack or malware.
Application security focuses on protecting software and devices from threats.
Information security protects the integrity and privacy of data.
Operational security includes handling and protecting data assets.
Cloud security refers to creating secure cloud applications for companies that use cloud service providers, like Google, AWS, etc.
Identity management and data security protects processes that enable authorization and authentication of legitimate individuals to an organization’s systems.
Mobile security protects data stored on mobile devices from threats.

Methods of cybercrimes

All forms of cybercrimes threaten cybersecurity in some way. Here are some of the methods used to wage attacks:

Malware-includes ransomware, spyware and viruses. These can install harmful software, block access to systems or provide scammers with access to data.
Trojans-trick users into thinking they’re opening a harmless file, but they’re really installing a backdoor that provides access to cybercriminals.
Botnets-conducted via remotely controlled malware-infected devices and usually employed as a large-scale attack.
Adware-involves a potentially unwanted program installed without the user’s permission, which automatically generates unwanted online advertisements.
Phishing-employed by email, text, or social media message, it tricks the target into sharing sensitive information.

How can I protect myself against cyberattacks?

Fortunately, there are many ways to protect yourself from cyberattacks:

Use banking activity alerts.
Update your software and operating systems often.
Use anti-virus software.
Use strong, unique passwords across all your online accounts.
Never open email attachments or click on links from unknown senders.
Avoid using unsecured public WiFi.

Through awareness and use of cybersecurity tools, you can keep your devices and personal information secure.

Stay up to date on current scams and learn how to report fraud by visiting https://consumer.ftc.gov/.

Don’t Fall for Auto Warranty Scams

Auto warranty scams can lead to financial pain, or even disaster, for an unwary consumer. Here’s what to know about these scams and how to stay safe.

How the scams play out

In an auto warranty scam, a scammer reaches out to a target supposedly selling or offering to extend an existing warranty on their car. The scammer claims to represent the automaker or policy company and may know the exact model and make of the car. Unfortunately, though, if the driver buys or extends a warranty on their car through this call, they’ll be giving their money and information to a scammer.

Red flags

Watch for these red flags:

Robocall. When the pitch to buy a new auto warranty, or to extend an existing one, starts with an automatic message, you’re dealing with a scam.
Extend now! Pressured to buy an extended warranty for your vehicle? Probably a scammer.
How about some ad-bombing? If you keep running into the same ad on every site and social media platform, it’s quite possibly a scam.

Plus shipping and handling. If the alleged representative selling the extended auto warranty starts asking you to pay any processing fee, or even a down payment, before providing real details, hang up and block the number.
Restricted callers only. If your Caller ID is showing “private number” or “restricted,” you are likely being called by a scammer.

Protect yourself

First, never share personal information with an unverified contact while on any platform. Next, if you’d like to purchase a new policy or extend the one you have, reach out directly to an auto warranty company. Finally, if you are constantly getting ad-bombed and robocalled for illegitimate offers, mark the email as spam/or and block the number.

If you’ve been targeted

Take quick steps to mitigate the damage. Do not engage with the scammer, and report it to the Federal Trade Commission. Lastly, close any accounts that may have been compromised and consider a credit freeze, if warranted.

Stay safe!

What is the Dark Web?

Q: What is the dark web?

A: The dark web is the deepest layer of the internet that isn’t visible to the average browser. Unfortunately, the it is full of illegal activities and crimes. Let’s take a closer look at the dark web and how you can protect your information from being snared.

What is the dark web?

The internet has been compared to an iceberg, with very little being visible above the surface, but it’s an enormous, dark and deep chasm underneath.

There are three basic parts of the internet:

The surface web – all websites and landing pages that can easily be accessed through popular search engines and direct address entry using a web browser.

The deep web – this includes private, but not invisible accounts, like social media pages, membership websites, medical records and more. All content on the deep web is safeguarded by a paywall or sign-in credentials.
The dark web – can only be accessed by using special browsing software called Tor. Tor masks IP addresses and makes all visitors anonymous.

Not all activity happening on the dark web is illegal. The deepest part of the internet also provides a platform for communication and commerce for people living in countries that have heavy censorship of online activity.

Unfortunately, though, the dark web remains a hotbed of criminal activity. Loads of illegal trade takes place through the dark web, including drugs, firearms, counterfeit money, subscription credentials and personal information of thousands of targets. The inherent anonymity allows hackers and scammers to roam free without fear of being caught.

How can I protect myself?

Enable two-step authentication on all online accounts.
Regularly monitor your credit for fraudulent activity.
Use strong, unique passwords for your accounts.
Never share personal info with an unverified source.

The dark web is impossible to trace, but there are ways to protect your information. Use the tips outlined here to stay safe.

Don’t Get Caught in a College Degree Scam!

College degree scams can be tough to spot. Unfortunately, getting duped by one can mean losing out on lots of time and money. Here’s what to know about college scams.

What’s a college degree scam?

A college degree scam can look like a diploma mill, in which an alleged school promises a super-quick degree for almost zero work (the ultimate blowoff class, right?). Just pay a fee, fill out forms and the degree is yours. Too bad the degree is bogus, and no graduate school or reputable employer will honor it.

In another variation, an accreditation mill provides higher education accreditation than a diploma mill for a similar amount of minimal effort. Unfortunately, the accreditation is illegitimate, as the “school” is not recognized by the U.S. Department of Education (USDE) or the Council on Higher Education Accreditation (CHEA).

Red flags

When researching college choices online, look for these red flags of college degree scams:

The school promises a degree in a ridiculously short timeframe.
There’s no physical address for the school.
Tuition is billed as a flat rate per degree.
The website doesn’t end in .edu.
The college isn’t on the list of schools approved by the USDE or the CHEA.

How can I verify if my degree program is legit?

Here’s how to check if your own college is legit:

Look up your school on the USDE and the CHEA lists of accredited schools.
Look for a physical address associated with the school.
Check the school’s website to see if it ends in .edu or is very similar to another, well-known college.
Ask the registrar of a local community college if they’d accept transfer credits from the institution.

If you’ve been targeted

If you believe you’ve gotten caught in a college scam, report the scam to the FTC. Leave the program and mark any emails from them as spam. If you’ve shared personal or financial information with the scammers, you may need to take extra steps to prevent further charges. Finally, let your friends know about it so they can be alert.

Stay alert and stay safe!

Beware Malware Scams

Malware scams are malicious and exploit the known prevalence of scams. Hackers tap into people’s fears by tricking innocent victims into losing their information and their money. Here’s what you need to know about malware scams and how to avoid them.

How these scams play out

Malware scams, also known as tech support scams, begin with a phone call, pop-up message, or email. A scammer reaches out to an individual and informs them that their computer has been hacked. The caller claims the alleged hacker gained access to the victim’s device and can do all kinds of damage. However, the caller, posing as tech support, says they can help remove any malware that’s supposedly installed. The bogus rep gives the victim instructions for removing the malware, possibly even giving the caller access to their device. Unfortunately, though, if the victim follows these directions, they’ll actually be installing malware on their computer.

Red flags

Avoid malware scams by looking out for these signs:

An alleged rep of a tech company has called you without you reaching out first.
The “tech support rep” asks you to provide them with remote access to your device.
The caller urges you to act immediately or risk causing further damage.
The caller asks you to enter your credit card information to pay them for their service. Alternatively, they’ll ask to be paid via prepaid gift card.

If you’ve been targeted

If you’ve been targeted by a malware scam, don’t engage with the caller. Hang up and block the number. Next, close your device. If you believe you’ve already given the scammer access, consult a real tech support expert to remove any malware that may have been installed. In addition, consider placing a credit freeze on your name. Finally, alert the FTC.

Signs your device has been infected

Here’s some ways to tell if your computer’s been infected:

It’s slowed down a lot.
You’re blasted with tons of pop-up ads.
Your system abruptly crashes.
You’re suddenly low on disk space.

If you notice any of these signs, take it to a tech support expert and follow the steps outlined above.

Stay safe!

Don’t Get Caught in a Shopping Scam!

When shopping moved online, it created a wave of new scams. Many of them can be difficult to spot and offer no way for the victim to reclaim lost funds. Here’s how to recognize an online shopping scam.

How these scams play out

There are several variations to the online shopping scam.

In one version, a shopper decides to purchase an item online and completes the transaction. Unfortunately, the item will never show up. If it does, it’s a cheap knockoff of the product, instead of the item that was purchased.

In another variation, a shopper finds an item online and tries to make a purchase. They’ll be asked for sensitive info, such as their checking account number. The shopper will be unable to complete the transaction and will run into repeated site errors. Unfortunately, the scammers now have their information and can empty their accounts, or worse.

In a third version, a seller clicks on an ad, or on a site that came up in a Google search for one of their favorite stores. They’ll proceed to make an order, not knowing they’ve clicked into a scammer’s fake site. The rest of the scam will follow one of the scenarios described above.

Red flags

Watch out for these warning signs that you may have stumbled upon a shopping scam:

Prices are too good to be true.
The offer urges you to act now.
The seller demands a specific means of payment.
The website is full of typos.

Stay safe

Follow these tips to keep yourself safe from online shopping scams:

Only shop on safe, secure sites.
Check the URL for proper spelling of reputable sites to ensure you haven’t landed on a look-a-like site.
Avoid clicking on high-pressure pop-up ads.
Pay with a credit card when shopping online.
Never share personal information with an unverified contact.

If you’re targeted

If you’ve fallen victim to an online shopping scam, take these steps to fix the damage:

Call the company to dispute the charge if you paid by credit card. At this point, you may want to place a credit alert on your name. Next, alert the FTC . Finally, let your friends know about the scam.

Stay safe!

Don’t Get Caught in a Grandparent Scam

Grandparent scams have gotten super sneaky in recent years, which makes them difficult to spot. Here’s what to know about grandparent scams and how to avoid them.

How the scams play out

There are several variations of the grandparent scam. In each one, the caller claims to be a grandchild of the target. The scammer often spoofs the grandchild’s number so it shows up on the grandparent’s phone.

The legal trouble scam. In this ruse, a scammer claiming to be their grandchild will call and claim to have been arrested. The “grandchild” asks them to send money for posting bail. They’ll pass the phone to an alleged representative to accept the funds via wire transfer or gift cards. But this is just the scammer’s partner in crime; not a real authority figure.
The medical trouble scam. This version of the grandparent scam involves a “grandchild” calling up Grandma or Grandpa and claiming to be seriously injured. They’ll ask for money to help pay the medical bills.
The international trouble scam. In this scam, a “grandchild” calls and claims they’re in deep trouble in a foreign country. They’ll ask for a big chunk of money to be sent by wire transfer or prepaid debit card for them to get out safely.

If you’re targeted

If you believe you’re being targeted by a grandparent scam or a similar ruse, follow these steps to keep yourself safe:

Don’t take immediate action. Pause and think it through before blindly sending money.
Ask the caller to answer a personal question only your grandchild will know.
Check your grandchild’s whereabouts by hanging up and calling your grandchild directly. Chances are, your grandchild is just fine.
Hang up and report the crime to your local police department and the FTC.

Safety rules to know

It’s a good idea to follow these rules for protection from grandparent scams and other ruses:

Never share personal info online or on the phone with an unverified contact.
If you’re asked to pay for something via money transfer or prepaid gift card, it’s probably a scam.
Put your number on the no call list.
Keep your social media privacy settings at their strongest and limit what you share on public forums.

Stay safe!

What is a Fraud Ring and How Can I Keep Myself Safe?

Q: I’m hearing a lot about fraud rings and their threat to businesses and consumers. What is a fraud ring and how can I keep myself safe?

A: A fraud ring is a group of fraudsters and merchants that can operate for years while stealing money and information, causing tremendous damage and loss along the way.

Let’s take a look at fraud rings, how they operate and how consumers and merchants can keep safe.

What is a fraud ring?

A fraud ring is an organized circle of criminals working to defraud and steal from people. They’ll use the same tactics as smaller scammer groups and individuals, but work on a massive scale. They also tend to have access to way more technology and resources than a typical scammer. Because of this, the harm they can do is on a much larger scale, too.

This form of fraud can consist of a group of criminals, as in any organized crime ring, or it can be made up of a family of crooks working together. The members of this crime ring collaborate to share info that can help them commit acts of fraud to net vast amounts of stolen funds and merchandise.

How does a fraud ring operate?

They can operate under several different pretexts. One common premise involves forgery, in which the fraudsters create fake claims, steal identities and even print counterfeit checks and/or currency. Some rings target individuals, committing identity theft and the like, but many focus on targeting ecommerce websites, businesses, charities or government agencies.

A fraud ring can commit any of the following scams:

Forgery
False claims
Identity theft
Identity manipulation
Counterfeit checks and/or currency

How can I recognize this type of fraud?

Look for these red flags, which can indicate signs of fraud:

Large purchases on your credit card or checking account that you didn’t make
Bills for loans you haven’t taken out
An unexplained, big drop in your credit score

If you own a business, you may be at higher risk of falling victim to a fraud ring. Be sure to look out for several sudden and large purchases from a customer who hasn’t made a purchase in a while, new accounts from customers that quickly become big spenders and claims demanding refunds for faulty products you believe were fine when shipped.

Detecting instances of fraud at the first sign of suspicion can help mitigate the damage and keep your money and your information safe. Be sure to configure and add e-alerts on your bank accounts.

Stay up to date on prevalent scams and common types of fraud by visiting Olean Area FCU’s Security Corner.

Beware of Job Scams

It’s an amazing employment opportunity–or is it? Scammers often hijack the job market to ensnare job seekers. Here’s what to know about these scams.

How the scams play out

There are several variations of job scams. Here are the most common:

Bogus job listing. There’s a Help Wanted ad for a dream job. The eager job-seeker applies, sharing their information, and even paying a small fee for an interview or resume submission. Unfortunately, the job doesn’t exist, and they’ll never hear from the “employer” again.

Imposter hiring. An alleged rep from a well-known agency or hiring firm reaches out to a target, asking them to send funds to cover a job screening. While the job may exist, the “representative” is a scammer, and the money the victim shares will go directly into the scammer’s pocket.
Phishing emails. In this scam, a victim is targeted by email. It offers the victim a fantastic job, but asks that they first share confidential info. If the victim complies, they’ll be giving their personal information to a scammer.

How to spot a job scam

Learning to identify the signs of a job scam can help you avoid them. Here are some red flags to watch for when job-hunting:

The emails the “company” sends are highly unprofessional.
There’s no street address for the company.
You’re asked to pay an upfront fee before you’re even hired.
You’re asked to share personal information before an official contract is signed.
When “hired,” you’re underworked and overpaid.

Before applying to or accepting a job offer, do thorough research. Ask for references of past or current employees and check out the company website to see if it’s secure and has real information about the firm, including a street address. Check out the company’s social media accounts, too. Finally, don’t be afraid to ask the employer any questions you may have about the company or job.

Job-hunting can be stressful, but getting caught in a job scam can bring that stress to a whole new level. Stay alert and stay safe by following the tips outlined here.

Don’t Get Caught in a QR Code Scam

Scammers are always dreaming up new ways to con people out of their money. Recently, they’ve figured out a “quick” way by hijacking QR codes. Here’s what to know about QR code scams and how to avoid them.

What’s a QR code?

Before we explore this scam, let’s get the skinny on QR codes. A QR code is a square barcode that can be scanned using a smartphone. It goes directly to a website or app. Businesses use QR codes for many reasons, like posting online menus, scanning coupons, processing payments and more.

How the scam plays out

In a QR code scam, a scammer replaces a legitimate QR code with their own. A target scans the bogus code thinking it’s legit. They make a payment for a transaction and, unfortunately, the target has sent their money right to the scammer. Often, the scam also gives the scammer access to the victim’s phone and information.

How to avoid a QR code scam

When scanning a QR code, practice basic safety measures. Check the URL that the QR code directs you to for common signs of a secure site, including a lock icon and an “s” after the “http”. If the webpage or app seems suspicious, get out. You can access the merchant’s payment portal by visiting their app or website directly. The FBI also advises against downloading an app from a QR code and/or downloading a QR code scanner app.

When using a QR code, look for these red flags:

The URL is different from the home site.
The QR code is posted on a public sign or notice that looks tampered with.
The site or app the code directs you to is full of typos.

If you were scammed

If you’ve used a QR code to pay for a transaction and then received an email from the company claiming you’ve never completed the payment, or that the payment failed, you may be the victim of a QR code scam. Let the real company know its QR code has been tampered with, call your financial institution, and alert the FTC.

Stay alert and stay safe!

Beware of Sport Ticket Scams

Sport ticket scams can make the best game go foul. Here’s what to know about these scams and how to avoid them.

How the scams play out

In a sport ticket scam, a target clicks on an online ad to buy tickets to a live sporting event. They enter their info and choose seats. Next, they’ll input their credit card info, complete the payment, and wait for confirmation. But the wait never ends! Unfortunately, the virtual tickets aren’t coming, and the seller has ghosted the victim. To make matters worse, the scammer now has the personal info and card details for more scamming shenanigans.

In another version of the sport ticket scam, the victim gets an e-ticket after completing the transaction. But this ticket is useless. It is either counterfeit with bogus barcodes and logos or a copy of an actual ticket that has already been sold to other buyers.

The dos and don’ts of purchasing sport tickets:

Do:

Buy the tickets using a credit card rather than a debit card, gift card, or cash.
Check out the seller before agreeing to the purchase.
Buy tickets at the venue box office.
Buy tickets from authorized brokers and third-party sellers after verifying their contact information.
Research the seller by looking for a safe website and a legitimate physical address and phone number.
Do a quick online search for negative reviews about the seller.
If the site requires a login and password, be sure to use a unique password.
Verify that the tickets have the correct date and time before confirming your purchase.

Don’t:

Don’t wire money to pay for tickets.
Don’t pay for a ticket from an unknown reseller before seeing it.
Don’t meet a private ticket seller alone or in a low-traffic area.
Don’t trust online search results for ticket sellers without researching each one well.

If you’ve been scammed

If you believe you’ve been targeted by a sport ticket scam, there are steps to take to mitigate the damage and to help stop the scammers. First, if you’ve paid with a credit card, be sure to dispute the charge, cancel the card and ask to be issued a new one. Next, report the incident to the FTC. Finally, let your family and friends know about your experience to help them avoid becoming a victim.

Stay alert and stay safe!

4 Questions to Ask Yourself About Your Passwords

With potential threats to cyber security today, it’s a good time to revisit your passwords. Even if you think you’re following the latest password guidelines, you could still be at risk of a data breach. Ask yourself these four questions about your passwords and be prepared to make any necessary changes to secure your information.

1. Are any of my accounts using the same password?

If you answered ‘yes,’ then it’s time for a change! If a hacker gets your password for one account, then they’ll have access to your other accounts. It may seem like a hassle, but it’s nothing compared to fighting identity theft or trying to retrieve stolen money!

2. Are my passwords at least 12 characters long?

12 characters may seem like a lot, but the longer the password the stronger it is. Think up a passphrase of random words that you can easily remember – but avoid popular ones. Also make sure to mix up your characters with lowercase and uppercase letters and symbols. If one of your accounts doesn’t allow for long passwords, mix up the characters even more to improve its security.

3. Are my passwords easily accessible?

This may seem like a silly question, but how and where you keep your passwords can determine whether you get hacked. For example, if you save a Word document to your desktop titled “passwords,” you’re assuming that only you have access to your desktop. You’re not considering a potential hacker gaining remote access to your computer, or someone at your work opening the document when you step away for a minute.

4. Does anyone know my passwords?

Yes, we mean anyone! The best way to keep your information secure is to keep your passwords private. Obviously, your partner or child isn’t going to intentionally misuse one of your passwords, but if they’re not careful it could end up in the wrong hands.

Stay up to date on password guidelines and other security tips by signing up for FTC Consumer Alerts at consumer.ftc.gov.

Beware of Debt Relief Scams

Big debt can be a big beast. One that takes huge bites out of your budget and destroys any chance you might have at strong financial wellness. Unfortunately, scammers know this, so they target victims with debt relief scams.

Here’s what you need to know about debt relief scams and how to avoid them.

How the scams play out

Debt relief scams target consumers who may have a lot of credit card debt under any or a combo of the following guises:

Debt repair service to greatly increase their credit score in no time
Service to remove negative credit report info
Promise to reduce credit card rates

The target, who is desperate to shed their debt, will pay any price for the promised outcomes. The scammer then fails to come through as promised, leaving the consumer even deeper in debt.

Red flags

These red flags can help you identify a debt relief scam:

Someone guarantees to bring your credit score up by a specific number of points within a short time.
The service promises to get rid of factual credit report information on your credit file.
They demand an up-front payment.
The service claims to be affiliated with a credit card company, but that company doesn’t recognize the service.
They tell you to cut off all communication with creditors.

The do’s and don’ts of credit repair

If you’re looking for a legitimate credit repair service, these tips can help.

Do:

Research the service you consider using. Look for a secure site with a phone number and street address, as well as positive reviews from past clients.
If the service claims to be affiliated with a credit card company, give the company a call to verify.
Ask for a clear explanation of all fees and conditions.

Don’t:

Never pay an upfront fee for a debt relief service.
Don’t believe a service that guarantees to bring up your score by a certain amount in a specified timeframe.
Don’t believe that a service can get rid of negative information on your credit file.

If you’re deep in debt, don’t despair. Let Olean Area Federal Credit Union help you get out of debt through a debt consolidation loan. Call, click or stop by today to learn more.

Beware Tax Filing Scams

It’s tax time! Unfortunately, that means there are thousands of scammers looking to steal your information and your tax refund by posing as authentic tax preparers. Here’s all you need to know about these scams and how to keep safe.

How the scam plays out

In a tax filing scam, a victim will hire an alleged tax preparer to do their taxes. The scammer then uses the victim’s information to file a tax return in the victim’s name. They’ll change some important details on the tax form, such as a checking account number or mailing address, and then collect the victim’s refund. By the time the victim realizes what’s happened, they’ve lost the money owed to them by the IRS and are now vulnerable to deeper identity theft.

Protect yourself

The best way to stay safe from a tax filing scam is to do your research carefully before hiring a tax preparer.

First, avoid pop-up ads when choosing a tax preparer, especially those that are riddled with typos. Research any preparers you consider hiring by asking for references of previous clients and by looking for a physical address on their website. Be suspicious, as well, if they promise a large return without knowing anything about your finances.

Second, before hiring an individual or an agency to do your taxes, ask to see their Preparer Tax Identification Number (PTIN). If the “preparer” refuses to share their PTIN, you’re being scammed.

Finally, if you’ve already hired a preparer but you’re suspicious about their authenticity, look for these red flags:

The preparer inflates numbers that affect your tax liability.
They claim ineligible individuals as your dependents.
They ask you to sign a blank form and promise to fill out the remainder after you sign.
The preparer refuses to sign your form.

In the event that your tax preparer follows any of the above practices, terminate your relationship with them immediately.

When you’ve been targeted

If you’ve been targeted by a tax filing scam, report it to the authorities immediately! Let the FTC know about the scam and alert the IRS. If you’ve shared personal information with the scammer, you are now vulnerable to identity theft. Check out the federal government’s page on identity theft recovery to learn what steps to take next.

Stay safe!

4 Scams to Watch for After the Holidays

The weeks after the holiday season generally bring an increase in scams that can be difficult to spot. Watch out for these common post-holiday scams.

1. Charity scams

When giving charity this time of year, be extra cautious. Verify it’s legit by looking up the organization on CharityNavigator.org, doing a quick Google search with the “charity name+scam” and look for a physical address and phone number on its website. Also, if you have a specific cause you like giving to, contact them personally instead of clicking on an ad that allegedly represents them.

2. Bargain-priced gifts for sale

The weeks following the holidays bring a rush of scams on resale sites like Craigslist and eBay.

Avoid a gift scam by exercising caution when buying an item on a resale site, especially after the holidays. Ask for the seller’s phone number, street address and for several references to see if they check out. If everything seems to be in order, make arrangements to meet in a well-lit and populated area, preferably one with security cameras. Make the exchange after you’ve checked out the legitimacy of the item, using cash only.

2. Belated holiday e-cards

Scammers send thousands of virtual greetings after the holidays, most of which are loaded with malware. An authentic e-card will include a confirmation code for you to copy and paste to the associated website. If you receive a late e-card without such a code, don’t open it. Mark it as spam and delete the email.

4. Post-holiday sales

Unfortunately, lots of the advertised sales you may see in the weeks after the holidays are actually scams. The scammers may be working off a bogus site that looks just like one representing a legitimate business, or they may be targeting their victims with emails that advertise “sales,” but are embedded with malware.

Before making an online purchase, check the site for signs of authenticity. Look for the “s” after the “http,” and check for the lock icon in the URL. If the site allegedly represents a well-known retailer, check the URL for misspellings. Look for the store’s logo on the site, and continue to check the URL of each landing page as you complete your purchase.

If you spot one of these scams, report it to the FTC at ReportFraud.ftc.gov.

Stay safe!