Protect Yourself From Scams Online
Australians lost more than $2 billion in scams in the last year according to Scam Watch. And New Zealanders have lost over $69.8m over the last 5 years according to Stuff. It is important that you follow these three key steps to protecting yourself online; 1. use strong passwords, 2. be alert, and 3. report attacks, scams and fraud.
If it sounds too good to be true or if something seems little off, it probably is. Don't let anyone pressure you. Ask questions and do research - use reputable websites you trust to check the validity of the company or person. Check out the resources below for more information.
Types of scams to look out for
Online scams have proliferated with the growth of the internet and its associated technologies. While the tactics of scammers continue to evolve, here are some of the main types of online scams that have been consistently observed:
- Job and Employment Scams: Fake job offers, often for "work-from-home" positions, where the victim may be asked to pay for training, materials, or even the fake job itself.
- Phishing Scams: These involve sending fake emails or messages that appear to be from legitimate sources, like banks or popular online services. The aim is to trick recipients into providing sensitive information such as usernames, passwords, and credit card details.
- Tech Support Scams: Scammers claim to be from reputed tech companies, warning victims about a fake virus or technical issue on their computer. They either trick the victim into paying for unnecessary tech support services or install malicious software.
- Lottery or Prize Scams: Victims receive messages claiming they've won a large sum of money or a prize, but must first send a fee or provide personal details to claim it.
- Online Shopping and Auction Scams: Scammers set up fake online stores or auction listings to either not deliver the purchased items or deliver items that are counterfeit or of poor quality.
- Investment Scams: These promise high returns for low-risk investments. Ponzi schemes and pyramid schemes are two common types.
- Romance Scams: Scammers create fake profiles on dating sites or social networks to form a relationship with the victim, eventually convincing them to send money, often with a sob story or fake emergency.
- Rental Scams: Fake rental listings are created where the scammer tries to get a deposit or rent payment before the prospective renter realises the property isn’t available or doesn’t exist.
- Fake Antivirus Software: Pop-ups warn users that their computer is infected and offers to sell them antivirus software, which is itself malware.
- Cryptocurrency Scams: These might include Ponzi schemes in the guise of investment opportunities, fake ICOs (initial coin offerings), and phishing attempts to steal cryptocurrency.
- Gift Card Scams: Scammers convince victims to purchase gift cards and then provide the codes as a form of payment.
- Social Media Scams: This might involve "clickbait" links leading to malicious sites, fake celebrity endorsements, or impersonating friends or family to request money.
- Tax-Related Scams: Pretending to be tax agencies, scammers claim the victim owes money and threatens legal action unless payment is made immediately.
- Ransomware: Malicious software that encrypts the victim's data, with the scammer demanding payment (usually in cryptocurrency) to unlock it.
It's important to remember that scammers are always coming up with new tactics. Staying informed and exercising caution online, especially when dealing with unsolicited communications or too-good-to-be-true offers, is essential to avoid falling victim.
What do phishing attacks look like?
- They may reach out on WhatsApp, social media, email, or a text message
- They may be an advertised link that comes up in your search results and leads you to a fraudulent website that looks like a real site
- They may use the name, logo and/or artwork of a major brand to make you think they are legitimate
- They may redirect you to unusual pages that use colours, fonts, or images that you wouldn't normally see on the real website
- They may come from a suspicious email address or have a misleading domain name (URL) that looks similar to the real one
- They may claim there is a problem with your account and ask you to visit a fraudulent website designed to look like a real website
If you are ever unsure of a link you're shown in an email or in internet search results, don’t click on it. Instead, browse by typing it into the URL bar of your browser, rather than clicking links or advertisements.
Use strong passwords
- Use a password generator - G2 ranks the best password generators here
- Never use the same password - this is easy when you use a password generator
- Never share passwords - goes without saying, never email, text or write down passwords
- Use hard to guess passwords - upper and lower case, numbers and symbols
- Always use 2 factor authentication - Google and Microsoft both have options
Report attacks, scams and fraud
When you see, or are a victim of, an attack, scam or fraud, report it. We have included links in the resource list below that can help you.
Have you been hacked?
The ACSC has launched the ‘Have you been hacked?’ tool. This tool will help you assess if you’ve been hacked by guiding you through a range of scenarios that will advise you on how to best respond to the situation.
Scenarios include ransomware attacks, malware threats, email compromise and identify theft, as well as phishing and fake website scams.
The tool is simple to use and includes typical warning signs, scenario explanations and easy-to-follow steps on how to remediate the situation.
Now is the perfect time to protect yourself online.
If you are interested in receiving cyber alerts, join the ACSC Partnership Program and help others stay secure too.
- Multi-factor authentication
- Secure your Google account
- Secure your Microsoft account
- Protect your business from email fraud & compromise
- Phishing - Scam Emails
- ACCC Scamwatch to report or find out more about scams- https://www.scamwatch.gov.au/report-a-scam
- ATO - ATO’s dedicated scam line 1800 008 540 to check legitimacy of a call, text, or email. You can also verify or report a scam online at ato.gov.au/scams
New Zealand Resources
- NetSafe for information on staying safe online https://netsafe.org.nz/
- New Zealand Police https://www.police.govt.nz/advice/email-and-internet-safety/internet-scams-spam-and-fraud
Wamarekani walipoteza zaidi ya dola bilioni mbili katika ulaghai wa mtandaoni mwaka jana, kulingana na Scamwatch. New Zealand imepoteza zaidi ya $ 69.8m katika miaka mitano iliyopita kulingana na Stuff. Kujiweka salama mtandaoni ni muhimu kwa kutumia hatua tatu muhimu: (1) kutumia nywila kali, (2) kuwa macho, na (3) kuripoti mashambulizi, udanganyifu na udanganyifu. Ikiwa jambo fulani linaonekana kuwa zuri sana hivi kwamba haliwezekani, au linaonekana kuwa lisilo la kweli, huenda likawa hivyo. Usiruhusu mtu yeyote akushinde. Kuuliza maswali na kufanya utafiti - kutumia tovuti reputable unayoamini kuangalia uhalali wa kampuni au mtu. Angalia rasilimali hapa chini kwa habari zaidi. Aina za udanganyifu wa mtandaoni zimeongezeka kwa ukuaji wa mtandao na teknolojia zinazohusiana. Ingawa mbinu za wadanganyifu zinaendelea kubadilika, hapa ni baadhi ya aina kuu za udanganyifu wa mtandaoni ambazo zimekuwa zikionekana mara kwa mara: Udanganyifu wa Kazi na Ajira: Ofa za kazi bandia, mara nyingi kwa nafasi za "kazi kutoka nyumbani", ambapo mhasiriwa anaweza kuombwa kulipa mafunzo, vifaa, au hata kazi bandia yenyewe. Phishing ni aina ya udanganyifu unaohusisha kutuma barua pepe bandia au ujumbe ambao unaonekana kuwa unatoka kwa vyanzo halali, kama vile benki au huduma maarufu za mtandaoni. Kusudi ni kuwafanya wapokeaji watoa habari zenye kuvutia kama vile majina ya watumiaji, maneno ya siri, na maelezo ya kadi ya mkopo. - Tech Support Scams: Scammers kudai kuwa kutoka makampuni maarufu tech, kuonya waathirika kuhusu virusi bandia au suala la kiufundi kwenye kompyuta yao. Wao ama kudanganya mhasiriwa katika kulipa kwa ajili ya huduma za msaada wa kiufundi zisizohitajika au kufunga programu mbaya. - Lottery au Tuzo Scams: Waathirika kupokea ujumbe kudai wao wameshinda kiasi kikubwa cha fedha au tuzo, lakini lazima kwanza kutuma ada au kutoa maelezo ya kibinafsi kudai yake. - Ununuzi wa mtandaoni na udanganyifu wa mnada: Wadanganyifu huanzisha maduka bandia ya mtandaoni au orodha za mnada ili ama wasipeleke vitu vilivyonunuliwa au kupeleka vitu vilivyo bandia au vya ubora duni. - Ulaghai wa Uwekezaji: Hizi huahidi faida kubwa kwa uwekezaji wenye hatari ya chini. Mipango ya Ponzi na mipango ya piramidi ni aina mbili za kawaida. - Scams Romance: Scammers kuunda profiles bandia juu ya dating tovuti au mitandao ya kijamii kuunda uhusiano na mhasiriwa, hatimaye kuwashawishi kutuma fedha, mara nyingi na hadithi sob au dharura bandia. - Udanganyifu wa Kukodisha: Orodha bandia za kukodisha huundwa ambapo mlaghai hujaribu kupata amana au malipo ya kukodisha kabla ya mpangaji wa baadaye kutambua mali haipatikani au haipo. - Programu bandia ya Antivirus: Pop-ups huonya watumiaji kwamba kompyuta yao imeambukizwa na inatoa kuwauza programu ya antivirus, ambayo yenyewe ni programu hasidi. - Scams Cryptocurrency: Hizi inaweza ni pamoja na Ponzi mipango katika disguise ya fursa za uwekezaji, bandia ICOs (matoleo ya sarafu ya awali), na majaribio ya udanganyifu wa kuiba cryptocurrency. - Ulaghai wa Kadi za Zawadi: Wadanganyifu huwashawishi wahasiriwa kununua kadi za zawadi na kisha kutoa nambari hizo kama njia ya malipo. - Udanganyifu wa Mitandao ya Kijamii: Hii inaweza kuhusisha viungo vya "clickbait" vinavyoongoza kwenye tovuti zenye madhara, uthibitisho bandia wa watu mashuhuri, au kuiga marafiki au familia kuomba pesa. - Udanganyifu unaohusiana na kodi: Wakijifanya kuwa mashirika ya kodi, wadanganyifu husema kwamba mhasiriwa anakopwa pesa na kutishia kuchukua hatua za kisheria isipokuwa malipo yafanywe mara moja. - Ransomware: Programu mbaya ambayo encrypts data ya mhasiriwa, na scammer kudai malipo (kwa kawaida katika cryptocurrency) kufungua yake. Ni muhimu kukumbuka kwamba wadanganyifu daima wanakuja na mbinu mpya. Kuendelea kuwa na habari na kuwa mwangalifu mtandaoni, haswa wakati wa kushughulika na mawasiliano yasiyotakiwa au ofa nzuri sana kuwa kweli, ni muhimu ili kuepuka kuanguka katika hatari. Mashambulizi ya udanganyifu yanaonekanaje? "Wanaweza kuwasiliana na wewe kupitia WhatsApp, media ya kijamii, barua pepe, au ujumbe wa maandishi - Wanaweza kuwa kiungo cha matangazo ambacho hutokea katika matokeo ya utafutaji wako na kukupeleka kwenye tovuti bandia ambayo inaonekana kama tovuti halisi - Wanaweza kutumia jina, nembo na au kazi ya sanaa ya chapa kubwa ili kukufanya ufikiri ni halali - Wanaweza kukuelekeza kwenye kurasa zisizo za kawaida ambazo hutumia rangi, fonti, au picha ambazo kwa kawaida huwezi kuona kwenye wavuti halisi - Wanaweza kuja kutoka kwa anwani ya barua pepe ya kutisha au jina la kikoa (URL) ambalo linaonekana sawa na halisi.""" Badala yake, angalia kwa kuibeba kwenye ubao wa URL wa kivinjari chako, badala ya kubonyeza viungo au matangazo. "Kutumia ""password"" ya nguvu - Tumia jenereta ya nywila - G2 inaweka jenereta bora za nywila hapa - Kamwe usitumie nywila sawa - hii ni rahisi wakati unatumia jenereta ya nywila - Kamwe usishiriki nywila - inaonekana bila kusema, kamwe usitumie barua pepe, maandishi au kuandika nywila - Tumia nywila ngumu kutabiri - kesi kubwa na ndogo, nambari na alama - Daima tumia uthibitisho wa sababu mbili - Google na Microsoft zote zina chaguzi ""Ripoti, udanganyifu na udanganyifu.""" Tumejumuisha viungo katika orodha ya rasilimali hapa chini ambayo inaweza kukusaidia. Je, umeharibiwa? "Kama ilivyoelezwa hapo juu, ACSC imeanzisha ""Je, umekuwa hacked?"" chombo." Chombo hiki kitakusaidia kutathmini ikiwa umevunjwa kwa kukuongoza kupitia hali mbalimbali ambazo zitakupa ushauri juu ya jinsi ya kukabiliana na hali hiyo. Hali ni pamoja na mashambulizi ya ransomware, vitisho vya programu hasidi, uharibifu wa barua pepe na wizi wa kitambulisho, pamoja na udanganyifu wa tovuti bandia na bandia. Ni rahisi kutumia na inajumuisha ishara za kawaida za onyo, maelezo ya hali na hatua rahisi za kufuata juu ya jinsi ya kurekebisha hali. Sasa ni wakati mzuri wa kujilinda mtandaoni. Ikiwa una nia ya kupokea tahadhari za mtandao, jiunge na Programu ya Ushirikiano wa ACSC na usaidie wengine kukaa salama pia. "Kupitia ""Multi-Factor Authentication"" (MFA), kampuni ya Google inatoa huduma ya ""Auto-Authentication"" (AU) kwa wateja wake, na kwa watumiaji wa mtandao wa kijamii, kwa kutumia ""Auto-Authentication"" (AU) na ""Auto-Authentication"" (AU) kwa watumiaji wa mtandao wa kijamii, na kwa kutumia ""Auto-Authentication"" (AU) kwa watumiaji wa mtandao wa kijamii." Unaweza pia kuangalia au kuripoti udanganyifu mtandaoni kwenye ato.gov.au au scams New Zealand Resources - NetSafe kwa habari juu ya kukaa salama mtandaoni https: www.netsafe.org.nz - Polisi ya New Zealand.