I consider myself to be reasonably cautious about scams - ones in the mail, on the phone, or in emails. I’ve written two articles about them: Don’t Be Fooled and Watch Out - Scams Ahead!
EVEN SO
I was expecting a package from Amazon the other day. So, when I got an email from USPS (United States Postal Services) stating my package couldn’t be delivered, I concluded that it was referring to that package. The email and URL looked professional, a tracking number and correct delivery date were included, but I did not check thoroughly. I was asked to confirm my address so they could deliver the package; I was ready to do so.
Fortunately, before I had time to fill out the form, my friend stopped by. I told her about the situation, and she said, “that doesn’t sound right; Amazon doesn’t typically use USPS.”
So, I checked my Amazon account – the package was out for delivery. I checked my USPS account - the tracking number was not valid.
We copy/pasted the URL into Google. The response: it was not a valid URL. Finally, we researched the situation by typing “USPS scam email.” This is what we found.
THE GOOD NEWS
I didn’t provide personal information, two computer scans showed no damage, I learned new ways to check out suspicious emails, and my package arrived safely.
THE BAD NEWS
I knew better but was responding because the email looked professional, and I was in a hurry to fix a perceived problem. Not good reasons!!!!
HELP
Security Metrics offers seven ways to recognize phishing with examples. Take a look.
This video offered suggestions to pursue if you click on a phishing link.
Scammers are becoming more professional and devious; they are everywhere.
One of the more recent scams has to do with Zelle - the app that allows a person to send money directly between most U.S. bank accounts within minutes. In the San Francisco Bay Area, Wells Fargo Bank customers lost thousands of dollars after scammers posed as bank employees.
I got an email from Lowe’s Home Improvement Center today. If I didn’t want to receive further emails, it said to click “unsubscribe.” The URL was a mix of unrelated letters and numbers, the typing was in upper and lower case, and it was not addressed to me but to “valued customer.” Would a click on “unsubscribe” open the door to accessing my computer? I wasn’t willing to try - that email address was marked as spam and blocked.
WORD TO THE WISE: Be suspicious of all incoming emails rather than assuming they are legitimate.
I consider myself a pretty savvy shopper and computer user, but just last week my wife and I nearly got scammed. We were looking for a raised planter box to grow some vegetables this year. Found one online for an incredible price, from a company we've used before, Wayfair. We clicked the link and was taken to what looked exactly like the Wayfair site. Click on the product and went to the shopping cart to pay. I looked at the URL of the shopping cart and it looked quite odd--without even a hint of Wayfair familiarity. I told my wife to stop, and call Wayfair to see if we could get the sale price by phone. She gave them the SKU#. We were told they have no such number in their system, and did not even have a similar product. (I felt scammed even though we saved the day.) We sent Wayfair a screen shot of the fraudulent shopping cart page with the URL intact.