Staying Safe Online: An Update on Common Email Scams

We can go along for months enjoying the wonderful tools and information that our computers and our smart phones provide, then, just as we get complacent, we are surprised by a scam email that could really create anything from a small problem to something that could be very serious.

Email scams are getting increasingly more sophisticated, and we can never let our guard down.  Scammers are now using AI to create emails that include the names of friends or family members to make them even more convincing.  

Most employers have policies and procedures in place for IT security.  They also provide training so that their employees are aware of current scams and try to give advance notice to their employees when scams are encountered.  Then they provide procedures to follow if someone encounters one of these scams.  

Seniors have different challenges.  They don’t have a Help Desk to rely on or have an expert to help them undo a badly placed “click.”  So, they must be extra vigilant.  

Here are some of the current most common email scams:

  1. Tech Support Scams

I will always remember the morning I signed into my computer and a big red box flashed on telling me my computer had been infected, and I needed to call a help desk to get it removed.  I am embarrassed to say, I did call and the “agent.”  They said they needed to get remote access to my computer and wanted to walk me through some keystrokes to enable them to enter my computer.  Luckily, I smartened up eventually and realized it was a scam.  But even after years of training at my employer, I still almost fell for it.  These tech support scams can come in a variety of ways.  If you are employed, the email can claim to be your company’s help desk offering to assist with your computer. Or the email can seem to be from Microsoft, Apple or an antivirus company.  

  1. Amazon Prime Scam

In July, there were numerous reports of an email scam that claimed to tell people they needed to renew their Amazon Prime membership with the goal of having you click on attachments that installed software that would steal passwords and other personal information.  And because a lot of us are Amazon customers, this can seem very legitimate.

  1. Lottery or Prize Scams

You may have heard about the very common Lottery or Prize scams.  These have been around for many years, but they are still prevalent today.  You get an email stating that you have won a lottery, prize or inheritance, but you need to pay a “fee” or “upfront payment” first in order to collect the prize.  The biggest red flag is the fact you never entered this lottery.  These should always be deleted immediately and never provide banking or financial information.

  1.  Quishing Scams

Quishing is a new one for me. I think we all may have already heard about phishing emails.  Phishing can be included in fraudulent emails that appear to be from legitimate sources asking you to click on a link to provide personal or financial information.  Quishing is QR code phishing.  Scam emails are now including embedded QR codes that redirect users to harmful sites or download malicious software on your computer.  And these methods are becoming more and more dangerous as they may bypass many traditional security measures.

  1. Government Impersonation Scams

Seniors are common targets for scammers who impersonate trusted authorities like the IRS, Social Security Administration (SSA), Medicare, or other agencies. These messages may threaten arrest, fines, or loss of benefits if you don’t make an immediate payment.  This scam is well known for asking for payment via gift cards.

What to look for?

A common aspect of these emails is the use of urgent language, like if you don’t respond today your account will be closed, or your computer will crash.  Another common feature is requesting payment in the form of gift cards.

A few suggestions to help you remain vigilant.  Check the senders’ email address closely.  Sometimes you can tell it’s fraudulent as the sender’s email address won’t match the company they are claiming to be from.  The email may claim that it is from Microsoft, but when you look at the email address, the word Microsoft is nowhere in the address. Or there will be misspellings.

The rule of thumb is to never click on links, download attachments – or now, click on QR codes – in emails that you aren’t 100% positive of where they came from, and they are safe.