Here’s a hypothetical situation that’s becoming more common in 2023: You receive a notice – by email or text message – that looks like it is from a reputable company: Amazon, McAfee, Norton Security, Kirtland Credit Union, etc. The notice states that you have an issue with your account, and to remediate the issue, you must call a phone number or click a link to resolve the issue.
We should know by now that clicking a link in an email or text message that we didn’t expect is a surefire way to introduce malware or other problems onto your devices – but what about when an email provides a phone number to call for support?
In this case, it can also spell trouble. If you call a phone number from a phishing email, you’ll likely reach a “support agent” – a person who is working with the scammer to gain your confidence and manipulate you into giving them money or information that can be used to take your money. These “support agents” may ask to obtain remote access over your device to fix the problem that is described in the original phishing message – with remote access, they can surreptitiously install software on your device, which can log your keystrokes and take screenshots of your device. With this information, scammers can potentially obtain passwords, account numbers, Social Security numbers or other sensitive information without your knowledge.
Thankfully, we can avoid impact from these scammers by exercising vigilance for any unexpected communication. Be wary of any email or text message you receive from someone you don’t know. Don’t click on links in emails or text messages, and don’t call phone numbers listed in the notice if you have any questions about a communication.
Instead, look for a support phone number from a reputable source, like the website for the company that is supposedly sending you the notice or from a recent invoice or statement if you are using their service.
You can’t stop scammers from sending you phishing messages, but you can report them. Forward any phishing emails you receive to the Federal Trade Commission at [email protected], or report phishing texts to 7726 (SPAM) if you are an AT&T, T-Mobile or Verizon customer. Doing so allows these service providers to identity the senders of such messages and take steps to limit messages from them in the future.
