What Are Online Fraudsters Up to Now? – Tips for Cyber Safety

Michele Walfred, Communications Specialist, University of Delaware; walfred@udel.edu and Maria Pippidis, Extension Educator Family & Consumer Sciences; pippidis@udel.edu

A photo illustrating "fishing"/phishing for passwords.Did you know that identity fraud cost Americans a total of about $56 billion last year, with about 49 million consumers falling victim? That’s according to the 2021 Identity Fraud Study by Javelin Strategy & Research. With concern about cyber security looming across the globe, ranging from major government and corporate initiatives to smaller-scale individual attempts, now is a good time for the public to review their personal cyber behavior and refresh awareness on the relentless methods scammers and hackers use to gain access to your personal and financial information. Here are some tips from University of Delaware Cooperative Extension professionals.

Here are important tips to keep you safe:

  • Look out for emails or text messages confirming a purchase you did not make. The idea is to alarm you so you react with “What? I didn’t buy anything!” The scammer hopes you get worked up and click on the link or the attached receipt. Do the exact opposite! These attachments and links are likely malware.
  • You are contacted by a business that you know. It’s an issue that needs immediate attention or warns you of an urgent matter, such as closing your account or detecting fraud. These usually pose as names you know like Amazon, UPS, FEDEx, USPS, IRS, PayPal, or your bank. The odds are these emails, known as phishing attempts, are fake. People fall for them because they may indeed coincide with a recent legitimate transaction. That is exactly what the criminals count on.
  • Never click on links inside a text or email. Instead, open up a new browser window and sign in to your account via an official website for legitimate notifications.
  • Check the salutation! “Dear customer,” or “Dear account holder” are dead giveaways of a phishing attempt. However, spammers are increasingly taking the time to use your name, so a good rule of thumb is to open a fresh webpage to verify on a legitimate website.
  • Beware of emails from friends who send links without any type of salutation. A link out of the blue from a trusted friend is a link not to be trusted!
  • Be careful with emails from trusted people (friends and family) that use your name but contain uncharacteristic content. If Aunt Edna regularly sends you pictures of her cat, but suddenly asks you to click on a PDF attachment, call Aunt Edna and confirm if she sent you that email first.
  • If you are on Facebook, hide your friend list. A simple Google search will show you how. If spammers can see your friend list, they can pose as one of those friends and use that identity to get you to view a video or click on a link embedded with malware.
  • Spammers and criminals also call on the phone. They use a local number or business name to hide their actual nefarious boiler room, network location. This is call spoofing. Blocking the number is ineffective because they are not really calling from the number on display. They use a device to disguise the party name and real number. You may be blocking a legitimate number. Let your messages go to voicemail so you can screen accordingly. Some people even get calls from their own number!
  • Be wary of pop-ups warning that your computer is compromised with a virus. Do not click on anything. Exit the browser window immediately.
  • Make sure your computer and device’s operating systems are up to date. Check with your Internet provider to assure you have the recommended antivirus or anti-malware software for your computer. Many IP providers include this service with their plans.
  • If any contact via phone, email or text feels strange, odd, misplaced or off-topic, trust your instincts. In such cases, odd equals dangerous!
  • Re-examine all passwords. Most experts recommend using a minimum of 12 characters in combinations of numbers, caps, lowercase and symbols. Those can be hard to remember so consider a sentence structure that is unique to you, but that you can remember such as (and don’t use this example) “DontUseThisPassword” becomes instead “d0ntU$3ThizP@$$w0rD!”

Michele Walfred is a communications specialist and presents on Internet security and technology topics on behalf of Cooperative Extension. Maria Pippidis is a family consumer scientist educator and financial management expert with the University of Delaware Cooperative Extension.