Category: Scams (Page 4 of 9)

A Scammer Locked My Computer!

Remote-control scammers are dreadful. They get inside your head and your computer, and do whatever it takes to get into your bank accounts. I really hope you can avoid being tricked by these awful people. But in case you find yourself in a jackpot with these jokers, I need to tell you about one of their worst tactics: Locking your computer against you. I frequently get calls for help from my customers that start off with, “A Scammer Locked My Computer!”

A Scammer Locked My Computer!

If you’ve been tricked into allowing a bad guy into your PC, your screen may look like the above graphic. That means that they have put a password on your computer, blocking your access to everything! Then the crook tries to ransom your computer back to you. I know this situation feels awful, but if this is where you’re at, don’t lose hope. I’ll explain more and describe your escape plan!

First, Some History

Scammers have doing this for a long time now. They usually surprise their victims with this technique when they sense that their spell is wearing off. Their scams usually start with lies and hypnotism, but they resort to brute force and cruelty as a last resort.

Many years ago, this password-locking tactic was extra-easy for a scammer to use. There was a small hidden feature in Windows (called Syskey) that they could turn on with a quick DOS command. And once enabled, only the scammer knew the password to make the computer usable again.

As news of this spread, though, Microsoft assessed the situation. They looked into that particular Windows feature and realized: Hey, what is that file in there for anyway? It’s no longer needed for Windows to run! So they did the right thing: They crafted a Windows Update to remove it, and nowadays, Syskey is no longer usable to lock any computer.

This just caused the scammers to scrounge for another tool, though. Locking a computer against its owner was too effective to give up. And they happened upon a piece of freeware called Lock My PC. Scammers began using this app to continue their extortions.

This App Has Locked My Computer, What Do I Do?

If you are confronted with the above graphic, then your computer comes second. What comes first?

  • Get off the phone with the scammer.
  • Turn off or reboot your computer
  • Contact your bank(s), if you were tricked into paying any money.
  • Talk to the police, if any large sums of money were stolen from you.

After all of that, we can resolve the Lock issue on your system.

There’s a small bright side to this tool being used to lock computers. The developers of this app are good people, and they do not like that their work is being used for evil. So they have made a way for you to defeat this lock!

Visit this site for their recovery steps. Follow the instructions, submit the number as shown, and wait for them to email you back. When they send you a code, it should work on the locked-up PC to let back you in.

And after you can access the computer again, uninstall Lock My PC from the Apps or Programs list, so you won’t have to ever deal with it again!

I hope this will get you out of a jam, but if you have any troubles with this, or just want help with the process, give me a call and we’ll get through this together.

Dissection of a Facebook Scam

The internet is a hotbed for crime, Facebook especially so. It’s simply too big to police. But since we can’t give up using the internet or Facebook, our other options are to prepare, learn and adapt. I encourage you to maintain a rampant skepticism as you use the web.

Come with me and consider the following scam post from Facebook:

This post popped up in a local Facebook group and triggered my Spidey-Sense. But even I had to pause and doubt myself. C’mon, Jesse, it’s just some eggs, people are always selling off their excess henfruit. But as I dissected this post, I knew my gut was right.

The Clues

The first clue here was plainly visible: the poster turned off commenting for their post. Surely, there are good reasons to turn off comments on group posts. But if you are selling something, comments usually aren’t that big of a deal. The next clue is the few comments that occurred before they were turned off:

Notice that the poster is trying to get the commenters to PM her immediately, using identical comments. And the poster commented on her own post, first thing. These do not constitute a smoking gun, but they are suspicious to me, and I see this on many spammy posts.

Going further, I click on the poster’s name and noticed the following:

A new member in that Facebook group? Oh, really? Again, it’s not proof of a scam, but it looks more and more sus, as I go. Next, I clicked further to visit her Main Profile page:

There’s nothing here except for two photos. As I click through every menu, there is no other info to be gleaned. No Details, no Friends, no other Posts, etc. And that’s OK, I recommend that you hide most of your info from public view. But still, most of the locals would have a little something here to make them look authentic.

Next, I went to her two public photos. Those photos had one Like on each of them:

Two very nice looking people… from Kenya. I don’t have anything against the people of Kenya, but what are the odds that this poster in rural Virginia has two friends in Kenya (and no one else!), liking her photos?

The Final Clue

By now, you’re looking this over and nodding your head and thinking, “Yup, sure is fishy.” But thinking like a scientist or lawyer: All of these clues so far suggest something is off, but there is still a non-zero chance that maybe this character is really selling eggs in my community. So let’s go further.

I highlighted and copied the first sentence of her post, and then pasted it into Facebook search field in the left corner. And I turned up another FB post by the same poster:

Different photo, but the same exact text, posted at the same time as her other post. But wait, she posted in a Virginia group, and Nacogdoches is in Texas. And she’s ready to deliver in both states? To quote a Tarantino film, “Now I am calling you a liar, Señor Bob.”

Epilogue

After recognizing the scam on Facebook, I reported the content as best I could, to both Facebook and the group admins. And that’s all you can do, too, when you recognize something shifty on Facebook. Report it, and move on.

Unless you notice someone you know, commenting on or sharing the scam post. Then you might go the extra mile and reach out to them, tell them what they’ve stepped in.

What was the scam, anyhow? It’s probably an advance payment sort of scam, where they try to collect your cash through Zelle or Cash App. If I can message with these scammers and get proof, I’ll update these details.

Stay safe out there, folks!

Brushing Scams

Here’s a scam that you should know about, but not because it’s particularly dangerous. It’s just weird. But once you know the details about brushing scams, they won’t creep you out, and you can quickly move on from them.

Surprise‽

When an unexpected item arrives at your doorstep, it may be part of a brushing scam. The item may be lightweight or small or just plain curious: people have reported receiving packets of seeds, hand warmers, “dragon eggs“, and even Bluetooth speakers. The packaging often shows an international return address, but no further clues about the point of sale. No bill is included, no company name or URL can be spotted.

Nothing “killer” about this, just an artsy rock…

In general, the items are harmless. There have been no reports of hazardous items being shipped with this scheme. Whatever you receive, you do not have to pay for it, and you are under no obligations regarding what you do with it. Keep it. Donate it. Trash it.

Why Send Me Junk?

This scam is harmless to you specifically, because it isn’t targeting you. Certainly, someone used your mailing address in this scheme. But don’t take it personally. Your address was probably chosen at random, from any number of online public information sources.

The scam’s target is an e-commerce website. It could be Amazon, Wal*Mart, AliExpress or others. They are gaming the reviews in order to sell more merchandise. Their process is:

  • Create a new account and buy an item.
  • Have the item shipped to a random address in the USA.
  • Once the item is shipped, the new account is considered legitimate, and can leave a review. So the account holder leaves a 5-Star review on the item and for the seller.

If they repeat this over and over for a particular item/seller, that item will soon show a lot of trustworthy, 5-Star reviews, even though it may be a new listing or a shady, fly-by-night vendor. This can help encourage a lot of future sales.

Whatever it takes to sell more jewelry.

Final Takeaways

Most brushing scams give you no info to act on. But if you spot a clue on the parcel and you manage to determine what site it was purchased through, you could follow-up with that company. Don’t call any number listed on the package, but you may, for example, go to Amazon.com or Walmart.com and contact their support about the item. If they care to listen to you, you may ask that they:

  • File a fraud report for the item you received.
  • Find and remove any reviews associated with your name or address.

Brushing scams are actually incredibly effective at what they do. Amazon and similar stores are constantly battling fake reviews. But brushing reviews is where the bad guys have the upper hand. Brushed reviews are almost impossible to suss out, even with sophisticated software tools. So at the end of the day, I have to advise you: Don’t give 100% of your trust to online reviews. Sure, read them over, but take them with a grain of salt.

Fake Hard Drives for Sale

A couple of years ago, I blogged about Fake Flash Drives, and now I have to write a refresh article: You also need to watch out for Fake Hard Drives and Fake Solid State Drives. Please make sure you don’t buy these things!

Good & Bad Examples

First, some examples of legitimate, reliable storage drives:

These items are all fine choices for your data storage. Please note that they are recognizable, big-brand names within the $50-100 price range.

Now for some fakes for your consideration (PLEASE DO NOT BUY THE FOLLOWING PRODUCTS!):

If you regard those items, you should notice some clues that something’s not right. First, there’s no noticeable brand name, or if there is, it’s a name you’ve never seen before and won’t see anywhere else on the web. There’s a big price disparity, too; charging a few dollars per Terabyte of storage is too good to be true.

16TB storage drives do exist, for the rare few of you that need one. If you buy a legitimate 16TB hard drive, expect to pay around $300 at the time of this writing.

Details & Dangers of Fake Drives

The dangers of this scam go beyond losing some money. Your files are at risk if you fall into this trap. These fraudulent devices are mis-manufactured to offer 16TB of storage to your computer. And your computer will believe it when you attach the drive! But there isn’t really that much storage in there. It’s more like a couple of 64GB microSD cards glued to a reader board in these sham drives.

So what happens is that you can try to put data on the device. And it will work, up to a point, but then catastrophe will strike. As your computer pipes data into an area that it thinks is huge but is really much smaller, your data will fall into oblivion. Like lemmings walking off a cliff. And this won’t be apparent until later, when you try to open or retrieve those files. Then you will meet with errors and irrevocable data loss.

Dos & Don’ts

The Too-Long;-Didn’t-Read advice I can finish up with is:

  • Do pay attention to brand names, and buy something from a recognizable manufacturer.
  • Don’t jump on amazing prices/deals. If the price is too good to be true, it probably is.
  • Don’t believe the posted reviews! Amazon and other websites are commonly gamed by the scammers, and a sham product can have thousands of 5-star reviews below it.
  • Do be judgmental about where you buy (online). Costco, Staples & Best Buy vet their vendors more than Wal*Mart, Amazon and eBay. Avoid those free-for-all marketplaces where anyone can hawk their wares.
  • Do feel free to report scam products to the website’s support team, but don’t spend a lot of your time or emotion on it. I did that 2 years ago with the flash drive debacle, and it became obvious that these big companies don’t care about or can’t fix the problem from their side.

The Text-Based EBT Scam

For anyone involved in SNAP or receiving EBT funds, please be aware of the following scam:

This is a text message that did NOT come from the government or any legitimate entity. It is the beginning of a scheme to steal your EBT funds.

If you receive this text, do NOT call the number. Do NOT respond to the text. Simply ignore, delete or block this message.

If someone calls the number in the text, a scammer will answer and pretend to be with the government. They will try to learn the caller’s EBT account info and PIN. Once they have those numbers, the crook will drain the funds from the person’s EBT account.

The legitimate people in charge of SNAP and EBT will never text you. If you need to contact them, find their official phone number on this list and call them. And if you have fallen victim to this scam, please call your state’s EBT Client ASAP to see if anything can be done.

The Hybrid Paypal Scam

I’ve seen plenty of Paypal-related scams, but this one is the slickest I’ve encountered to date. Pay attention and don’t be fooled if The Hybrid Paypal Scam shows up on your doorstep:

The Scam Arrives

You’ll see this scam arrive either in your inbox as an email, or in your Paypal account as a transaction under Activity.

the hybrid paypal scam
Email example
from the real Paypal website!

Are you a believer yet? I wouldn’t blame you, because this is not your typical fake-email. This is an authentic Paypal email, and it takes you to the true Paypal website to view a real Paypal invoice! Nothing has been spoofed or faked here. The Paypal invoice can even be downloaded as a PDF from their website. The only lie is what’s shown in the Seller’s Notes field.

What is truly afoot here is that someone’s Paypal account has been stolen and is being used to send payment requests. Paypal calls them “invoices”, and that terminology only serves to make the scam look even more important.

The Two-Fold Danger

You’re at risk from two different directions with this scam. Make sure you don’t get taken by either of these:

  1. The cybercriminal is trying to trick you into paying the bill with a quick click.
  2. The crook wants you to object to the bill and call the phone number listed in the Seller Notes.

For anyone moving too quickly and not thinking enough, #1 quickly puts $500 in the thieves’ pocket. The money will be transferred into gift cards or other untraceable ratholes, and the victim will have a hard time clawing that money back.

#2 leads to a typical remote support scam. If you call the number, you’ll talk to a scammer who will seek to remotely access your computer, steal your money and possibly bork your PC.

In short: do NOT pay this bill, and do NOT call the listed phone number.

What To Do With This Hybrid Scam

First, be very careful as you deal with this. Make sure to avoid any “Pay Invoice” button. It’s safe to view the invoice and other screens in your Paypal account, but you must not accidentally pay the scammer.

Next, much like with an accidental payment scam, you can simply ignore the invoice. Nothing bad will happen if you simply do nothing with this Paypal item. It will sit there inert, until some day when Paypal catches up and removes it.

Alternatively, you can cancel the invoice. Sign into your account at Paypal.com, click on Activity, and select the scam invoice. Right below the blue Pay button, you may safely click on “Cancel Invoice”.

Click Cancel, do not Pay!

Lastly, you may reach out to Paypal support, if you want them to know you received the Hybrid Paypal Scam. Once you’re logged in at Paypal.com, scroll to the bottom of the site and look for the Contact link. Click it and make use of the Call Us or Message Us options to reach out to them.

Data Breach Phishing Email

Consider and beware this data breach phishing email:

data breach phishing email
Not actually from Google or anyone trustworthy…

The sender’s address and bad grammar should give it away. But it is still pretty convincing, and closely resembles other real Google email messages.

Do NOT call the number. You must NOT reply to the email. Do NOT click the links.

If you receive this data breach phishing email, mark this message as Spam, and then Delete it.


I’ll admit, though: I called the number (from an anonymous line). I added a comical 30 years to my voice and fumbled through a call with a scammer.

He pretended to be with Google, and researched my email address (which I made up on the spot). And he insisted that a hacker was targeting my computer and calling my ISP wouldn’t do any good. He tried to convince me that my IP address was compromised, and because IP addresses were unchangeable and assigned for a lifetime, I had to do the needful and let him fix the issue.

Switching back to my regular voice, I called him on his nonsense and he said some bad words and I moved on. Sigh. It’s just another Monday.

Accidental Payment Scams

You should know about Accidental Payment Scams that can occur through instant money-sending apps, like Venmo, Cash App and Zelle.

What the Scam Looks Like

It starts with an unexpected payment from an unknown person. Your Venmo may pop up and say any number of off-the-wall things:

  • $600 sent for vintage wedding dress
  • $300 recv’d for Adult Svcs Rendered
  • $250 for Imagine Dragons tickets @ Jiffy Lube Live

Next, you’ll get a follow-up email or text:

Accidental Payment Scams
Don’t Do It!

This is a variation of the Overpayment Scam. They’re counting on your moral code to convince you to help them out. While it may seem easy to send that money over to the poor stranger, hold your horses and slow your roll! This was no mistake:

What To Do

  • Nothing. The best course of action here is to do nothing. Don’t send this stranger any money. Don’t reply to their messages. You don’t know them, you don’t owe them anything. Not even common courtesy. If you stay your hand long enough (a few days?), Zelle or Venmo will reverse or remove the “payment”.
  • You may also contact Venmo or your bank (for Zelle concerns). Cash App has some info and contact methods on this site. They may be interested to know about the accidental payment, and they may instruct you on other methods for dealing with it that won’t put your money at risk.

If You Were Tricked

When a person falls for the Accidental Payment Scam, they cooperate with the requests and send money back to the person in their DMs. They get a big Thank-You in return and some warm Good Samaritan feelings. But those only last a few days and then comes a nasty surprise.

The app company flags the the original “accidental payment” transaction as fraudulent, and reverses it. (It was likely made off of a stolen credit card.) They’ll deduct that amount from the victim’s account. It is as if it never happened.

But the app company will uphold the follow-up transaction. That’s where the victim sent money to the stranger. Seen as a wholly separate transaction, initiated by the victim, the bank will maintain that it is completely legitimate. They usually will not reverse such transactions. That money cannot be clawed back.

If you fell victim to this scheme, I am very sorry for your loss. Even though you cannot get your money back, you should still notify Venmo/CashApp/your bank of the fraud. They will want to track the details, and maybe one day make all of this a safer process.

The Microsoft 365 Renewal Scam

The Microsoft 365 Renewal Scam is yet another phishing operation, based on a renewal or subscription you never agreed to:

The Microsoft 365 Renewal Scam

This email is 100% fiction and fake. There is no purchase or charge. This didn’t come from Microsoft. If you get this message:

  • Do NOT call the number.
  • Do NOT reply to it.
  • Mark it as Spam or Phishing, and delete it.

How to tell it’s a phishing scam? Well, not all are easy to spot, but this one is. Notice that:

  • It was sent from a Gmail address!
  • There are spelling and punctuation errors throughout the message.
  • Even the Microsoft Logo is a bit off.

While The Microsoft 365 Renewal Scam may look laughable, keep in mind that these cybercriminals actually have good reasons for crafting low-quality emails. Bad spelling and other mistakes help narrow down the number of people who will respond and fall for these ploys.

But the next bogus emails could be harder to spot. If you ever have any doubt about your Microsoft 365 subscriptions, just head on over to Office.com . Sign in and go to My Account -> Service & Subscriptions. That’s where you can review everything you’ve bought from Microsoft, as well as prices and renewal dates.

The RV Giveaway Scam

No, you are not going to win a free RV! But when you see posts about this on social media, they are so tempting. Companies with names like Camping & RV World boast about “unclaimed RVs” that they have to give away for free, and the included photos show some beautiful vehicles. But this is one of those too-good-to-be-true situations. You will not win anything from the RV Giveaway Scam. And there is a lot of harm afoot, even if you click Like on the post.

the rv giveaway scam
Scam!

How To Spot the Scam?

This gets harder every year, as the scammers study Facebook and other platforms for ingenious ways to conceal their identities. But here are some clues:

  • When you visit a Business Page on Facebook, scroll down to find the Page Transparency section. Click “See All” to get the most details. This will tell you useful info, like the date that the Page was created, and possibly the country of origin. Scam pages often show a very recent date, while known trusted pages have older dates.
  • Regard the About section: Scam pages often have no info here, while legitimate pages will reveal a proper phone number, physical address and website. Do not trust any “tinyurl”, “bit.ly” or “google.sites” addresses!
  • Search on Facebook for the company in question. Take Camping World, for example, they show hundreds of thousands of Likes. Notice that the scammer’s page probably only has a handful of Likes.
Only 32 people? And most of them are other scammers…

The Hazards of This Scam

The first part of the scam is in the first interaction you have with it. If you click Like or Share the scam, Facebook will promote the scammy post to your friends & family, or to everyone else in your group. It will help it spread like wildfire, or a chain letter. And your endorsement will make the scam look more believable to everyone else!

Next, many of these scams steer you towards marketing websites that promise free money via CashApp. This nonsense will waste your time with survey after survey and form after form. You’ll never get the promised cash, but they will hoover up your information. And sell it to every spammer and telemarketer known to man. If you think you get a lot of spam and junk calls now, just you wait. Participating in these surveys will elevate your spam to nightmare levels!

Finally, these RV Giveaways will “select” you as a winner, and push you into Private Messaging or other non-public communication. And the scammer will prepare to deliver your winnings… but first, they want a delivery fee to be paid. Or some insurance. Maybe a “customs surcharge.” Whatever it is, they’ll make it seem like a trifle, compared with the value of the big thing you’ve just won. But if you pay that fee (through CashApp or wire xfer or gift cards), then you will never hear from them again, and you will not see any RV appear in your driveway.

What To Do

When you encounter this scam on social media,

  • Do NOT click Like. Do NOT comment on it.
  • Report it to Facebook or other social media, as a scam.
  • If posted in a Group, also report it to the admin(s), and ask them to take it down.
« Older posts Newer posts »

© 2024 BlueScreen Computer

Theme by Anders NorenUp ↑