Jump to content

SCAM! SCAM! SCAM!


old man emu

Recommended Posts

A consumer watchdog is warning shoppers to be on high alert for scam QR codes this Christmas as criminals are increasingly using the technology to steal your data.

 

Everywhere you go these days, from restaurants and cafes to gyms and parking garages, you’re often asked to scan a QR code with your phone to get access to the most basic of business services.

You may find that annoying and time consuming, but by scanning the code, you’ve also just given that business permission to collect your digital data – whether you knew that or not.

 

QR scams on the rise

It’s probably no surprise then, that the QR code has come to the attention of cybercriminals and scammers as another way of getting your info.

US watchdog the Federal Trade Commission (FTC) has issued a stark warning for shoppers ahead of the Christmas rush.

 

It says criminals have been hiding malicious links inside fake QR codes and placing them on top of existing legitimate ones in stores. At the same time, there has been a marked increase in fake QR codes being sent via SMS, advertising sales and other special offers.

 

“A scammer’s QR code could take you to a spoofed site that looks real but isn’t,” the FTC says.

 

“And if you log in to the spoofed site, the scammers could steal any information you enter. Or the QR code could install malware that steals your information before you realise it.”

 

That time of year (for scammers)

The FTC caution comes as one of Australia’s big four banks issues its own Christmas scam warning.

 

Westpac research has found that transaction scams, those that involve buying and selling items or services, were up 47 per cent compared with last year. The majority of those scams were facilitated through fake websites, social media or online marketplaces.

 

Ben Young, Westpac head of fraud, says the highest number of transaction scams are usually reported at this time of year, in November and December.

“Scammers often target customers at this time of year when people are spending more and can sometimes be a bit more distracted,” he said.

  • Informative 2
Link to comment
Share on other sites

I very rarely use Q-codes, because I find that 90% of the time, it's impossible to scan the code and get it to work. So I don't find them particularly useful.

 

Besides, I am very alert as to what permissions are being allowed with any particular app, and I refuse access to my phone with a very large percentage of apps that request a wide range of access that is not needed for the particular use.

  • Like 1
Link to comment
Share on other sites

Nissan Australia has been hacked and Nissan is warning their customers to be alert to phishing attacks and scam SMS's and emails, obviously because customers personal information has been accessed by the scammers.


As one of the commenters points out, it can be as simple as now getting an email from Nissan saying you just qualified for a free service from them - just click on the link!

 

https://www.drive.com.au/news/nissan-australia-customers-warned-following-cyberattack

 

Toyota has also been hacked by scammers holding them to ransom. It's a very appealing world for scammers, this internet world.

  • Like 1
Link to comment
Share on other sites

  • 4 weeks later...

Received this email this morning.

 

Note the originating email address, address salutation, amount with no dollar symbol, and blue link with hyphens instead of dots inn address. Besides which, I have not lodged a return for years, I earn less than minimum taxable.

 

scamtaxemail.thumb.jpg.99347312407e1eef3bfb85850465ed4a.jpg

 

The ATO don't send emails like this, they notify you there is a letter in your mygov account inbox.

  • Informative 2
Link to comment
Share on other sites

Red, I couldn't scroll with your posted thing, so this maybe odd for you to understand. How can they take your money when it looks like they are giving you about 450 dollars?

Once I was the subject of a pfishing email and I should have noticed that the email was a fake, but they were using the paypal website stuff and I didn't notice that the originating country was Italy! They sure knew how to appeal to a cheapskate, they said that some person had used my details to buy oil filters in Ballarat, and I would be charged for them if I didn't act. 

  • Sad 1
Link to comment
Share on other sites

I had a text message saying my parcel was unable to be delivered and to click on the link to provide my details. I get many of these and the clever thing is that I am waiting for a parcel.  I think these days there is a high likelihood that any random person a text is being sent to actually is waiting for something. Even if they are not it is a little intriguing to think that something is about to be delivered.  The thing is not to click on a link.    Anything I order, if it is coming from Austpost I can track through my app.  A parcel from other sources can be tracked through various tracking sites without giving anything more than the tracking number.  I haven't been caught .... yet

  • Like 2
Link to comment
Share on other sites

Octave, did it have a tracking number in red in the email? I've had a few of those. If you have the Australia Post app on your phone, it will tell you if that is a valid tracking number. I have opened an Australia Post account and can check there. I received one of those emails that looks genuine. The AP account said the tracking no. was invalid. I am expecting a parcel from the US any day now.

  • Like 1
Link to comment
Share on other sites

That's one of the reasons I never use voice commands for anything. In the past, I'd found Google recording my voice when I'd simply accidently hit the "microphone" icon next to Google search icon.

If you don't know where to look on your Google account and how to delete any audio you've recorded (and a lot is recorded accidentally), there's no telling what scumbags will do with it. 

 

I wouldn't be in the least surprised to find corporate scumbags using peoples voice recordings without their approval, to further develop their AI programmes and software.

People are only just starting to find out now how these corporate scumbags are keeping track of peoples habits with computerised systems in their cars.

 

https://www.washingtonpost.com/technology/2019/12/17/what-does-your-car-know-about-you-we-hacked-chevy-find-out/

  • Like 2
  • Informative 2
Link to comment
Share on other sites

What concerns me most is that washington post article was written 5 years ago.

 

I'm not concerned about advertisers knowing where I go shopping but I am concerned about carmakers and phonemakers, etc having their 'confidential' database hacked by people about to steal my identity. There have been increasing reports of bank accounts being emptied, and fraudulent purchases made.

  • Like 1
Link to comment
Share on other sites

I had my bank's fraud department ring me this morning to check on a suspicious transaction. It was a genuine transaction but they were right on to it and rang within ten minutes of the transaction going through. It's good to see they are checking in real time, probably with automatic red flags on certain criteria.

 

I was paying a bill yesterday by direct bank transfer and the amount exceeded the daily transfer limit for transfers, so I had to split it into two payments and make another one today. With my internet server I have a dynamic IP address so I get a different IP assigned every time I connect. To the bank's automated fraud detection it looks like the transactions were made by two different devices whereas in reality it's the same device, just different IP addresses. I get verification emails all the time from various accounts warning me a different device has logged on to my account with them, but so far it's just been me doing it.

  • Informative 2
Link to comment
Share on other sites

Your money would be in a metal box connected to the mains and with lots of plastic separating the metal box from the earth. The mains connection would not be obvious to somebody digging from the top.

Please don't mention my name if you really do this.

  • Like 1
  • Sad 1
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...