Buckeye Security Awareness

Stay Alert for Travel Scams

As the holidays approach, it’s a great time to travel, but it’s also a time to be extra vigilant about scams. Here are some quick tips to help you have a safe and enjoyable trip:

• Only Trust After You Verify: Always double-check hotel and flight deals and make reservations from official websites. 
• Beware of Phishing: Beware of unsolicited emails or messages offering holiday deals. Do not click on links from unknown sources – they often take you to fraudulent sites.
• Protect Your Information: Make sure your financial and personal information is secure. During busy travel times, scammers are looking for easy targets.
• Watch Out for Fake Rental Listings: Are you looking for a holiday rental? Book only through reputable websites. Avoid transferring money directly to individuals for rentals you haven’t verified.
• Report Suspicious Offers: Report any potential scams to the relevant authorities. Help keep everyone safe and informed.

It’s important to remember that being cautious doesn’t mean you can’t have fun. Be smart, travel safely, and make the most of your holiday memories.

Watch Out for “Prime” Scams

Amazon Prime Day and other retailers’ summer sales are upon us. Some great deals can be found during these “shopping holidays” but they’re also prone to scams.

Do your research before you add an item to your cart, warns the Better Business Bureau. You should also watch out for scammers who pretend to be from Amazon or another retailer.

During these online shopping sales, the BBB offers these tips for staying safe:

• Beware of unsolicited emails, texts, or phone calls
• Watch out for social media ads leading to counterfeit websites
• Ensure that the website you are shopping on is secure
• Purchase sought-after products with caution
• Use a credit card 

Have fun during these shopping holidays but stay vigilant and watch for thieves and scams.

Stop Senior Financial Abuse 

Financial crimes are increasingly victimizing seniors. You can protect yourself and your family by following these tips from the American Bankers Association:

Financial crimes are increasingly victimizing seniors. You can protect yourself and your family by following these tips from the American Bankers Association:

• Shred all unneeded financial documents and offers
• Never give out your Social Security number or account number to anyone you haven’t initiated contact with
• Consult a financial advisor or lawyer before signing any documents that you don’t fully understand
• Trust your instincts – if something doesn’t feel right, it probably isn’t
• Family members should watch for red flags like unusual activity in an older person’s bank accounts, including large, frequent or unexplained withdrawals

Find out how to protect yourself and your family from financial abuse by visiting the ABA tip page. 

Avoid Online Marketplace Scams

Online marketplaces provide great options if you’re looking to buy gear or sell your stuff to earn some extra cash. Avoid online marketplace scams by staying vigilant. The scammers are getting craftier, and we must be one step ahead to protect ourselves.

Here are a few tips to stay safe:

• Do your research by checking out the seller and platform
• Trust your instincts – if it seems too good to be true, it probably is 
• Only use trusted and secure payment options
• Do not share sensitive personal information
• Report scams or suspected fraudulent behavior

Protect Your Business from Fake Invoices

Businesses are being targeted by scammers who send fake invoices for nonexistent services or products, hoping you’ll pay. Each year, millions of dollars are lost by organizations of all sizes.
 
According to the Better Business Bureau’s Scam Tracker, business owners have reported fake invoices for everything from office supplies to domain hosting services. Take some steps to protect your business by:

• Verifying Existing Vendor Billing Information
• Check Payment Instructions to Spot Scams 
• Use Secure Payment Methods 
• Train Your Team to Spot Unusual Invoices
• Establish Internal Procedures for Paying Bills

Make sure your team feels comfortable asking questions and voicing concerns about invoices. 
 
Report scam invoices to the Federal Trade Commission at reportfraud.ftc.gov or the Ohio Attorney General at ohioattorneygeneral.gov to assist law enforcement.

Don’t Fall for a Romance Scams  

Thieves are constantly looking to take advantage of people’s most vulnerable emotions by exploiting those who use online platforms to foster new connections. This Valentine’s Day – and every day – be careful with what you share online, and never send money or sensitive information to someone you have not met in real life. 

Here are some tips to avoid romance scams:

• Be cautious of anyone who contacts you online, particularly if you haven’t met in person
• Never give out personal or financial information to someone you just met online
• Beware of anyone who asks you for money or says they are in financial trouble
• Be wary of anyone who avoids video chats or in-person meetings
• Never agree to open a bank account for someone, transfer money or re-ship goods they send you
• Trust your instincts and be suspicious of anyone who seems too good to be true, and talk to someone you trust if something seems unusual  

If you believe someone is trying to commit fraud or if you are the victim of a romance scam:

• Stop all communication immediately
• Report any suspicious activity to the online dating company or social media platform
• Contact your bank and credit card issuer if money has been exchanged
• File a complaint with the Ohio Attorney General at ohioattorneygeneral.gov and the Federal Trade Commission at reportfraud.ftc.gov

Avoid Spam Text Messages  

Scammers are increasingly using fake text messages to trick you into divulging personal information. Your information can give thieves access to bank and other accounts.

These text messages often contain a link that claims to let you collect a prize, pay off a loan or fix an account problem.

In this approach, criminals claim the following to get you to click and react without thinking:
•Your account is showing suspicious activity;
•There is a problem with your payment information;
•An invoice for a product you didn’t order must be paid now; or 
•A shipper needs help delivering a package to you.

If you receive a text message you weren’t expecting, never click any links or respond with personal or financial information. Use a phone number or website you know is authentic to contact the company if you think the message is genuine.

The Federal Trade Commission recommends reporting unwanted texts as junk or spam in the messaging app you use and filing a report at reportfraud.ftc.gov to help filter and stop them.

Beware of Malvertising  

A relatively new method of cyberattack is on the rise. Malicious advertising – or malvertising – involves criminals injecting digital ads with harmful code. Because nefarious ads are displayed through real digital ad networks, most web viewers are at risk.
 
The corrupted code can install malicious software on computers or devices with a click. It is possible for the attacker to redirect the user then to a spoofed website or to steal personal and business information in other ways. 
 
Despite the difficulty in preventing infection from a malicious advertising, users can take steps to reduce their risk, according to digital security firm Norton:

• Make sure your computer and device software is up-to-date
• Install antivirus software and ad-blocking software to reduce your risk
• Don’t click on links or download anything without thinking
• Make sure Flash or Java doesn’t automatically run when browsing the web

Take Steps to Protect Your Business Data  

Almost every day, the news is filled with stories about cyber security breaches. National Computer Security Day is a good reminder that keeping people and companies safe online is crucial. 

You can take the first steps to keeping your business and team safe by following these simple steps from the Federal Trade Commission:
   • Update your apps, web browsers and operating systems
   • Make sure your files are secure and backed up
   • Require passwords for all devices
   • Encrypt devices that contain sensitive information
   • Create a security-conscious culture with routine training of all employees

Visit bit.ly/ftccyber for more ways to protect your business from the FTC.

Protect Yourself When Upgrading Devices  

It’s the season for getting or gifting the latest smartphones or devices. Before you trade in, sell, give away or recycle your current device, the Federal Trade Commission offers tips to protect your personal information, including:

• Backing Up Your Phone or Device – backup your phone or tablet before moving it to a new device so that you have a saved copy of your information.
• Removing SIM and Memory Cards – the SIM card securely stores subscriber identity and other essential information, so it is necessary to move to your new device or destroy it. And remember to remove your memory card, if your old phone has one.
• Erasing All Information – completely wipe all data on your old device before you move to a new one, including deleting contacts, text messages, photos, videos and browsing history.

Check out more specific steps to prepare for your new devices at the Apple (support.apple.com) and Android (support.google.com) sites.

Watch Out for Hurricane Scams 

Photos and stories from Hurricane Ian are devastating. Fraud can occur when natural disasters and severe weather happen, and people are especially vulnerable.

Scammers target Americans’ desire to help through phone calls, texts, emails and even door-to-door visits.

The Federal Trade Commission offers several ways to verify a hurricane relief charity:

• Find trustworthy, well-known charities on give.org, charitynavigator.org, charitywatch.org, and guidestar.org
• Watch out for names that closely resemble those of better-known, reputable organizations
• Choose the relief effort you wish to support and search for the charity’s name online with the words “complaint,” “review,” “rating” or “scam” 
• Be skeptical of callers thanking you for a pledge you don’t remember making
• Never click on any links or open attachments in suspicious emails requesting donations or other assistance

Report scams you see at reportfraud.ftc.gov.

Stay Clear of Fake Check Scams 

Fake check scams continue to target consumers. According to the American Banking Association, here is what you should know to avoid falling victim. The scam usually starts with an offer to buy something you advertised, pay you to work at home or send you an advance on a sweepstake.

The following tips can help you avoid fake check scams:

• A Cleared Check May Not Mean You’re Clear – Federal law requires banks to make deposited funds available quickly, but that doesn’t mean the check is valid. You can ask your banker any questions you may have about the check. Be sure to explain where the check came from, why it was sent to you and if you’ve been asked to wire money back.
• Don’t Get Fooled By a Check’s Appearance – Counterfeit checks are created by scammers using sophisticated technology to mimic legitimate checks. 
• Don’t Pay to Play – There is no legitimate reason for someone giving you money to ask you to send money back or give you more than the exact amount. 
• Avoid Easy Money Offers – Do not respond to social media offers for quick ways to earn extra cash, which are rarely legit.

Notify your bank immediately if you suspect fraud. Bank staff are experts at spotting fraudulent checks. And report attempted scams to the Federal Trade Commission at reportfraud.ftc.gov and the Ohio Attorney General at ohioprotects.org.

Keep Your Mobile Devices Secure 

Your mobile device can be a treasure trove of information in the wrong hands. Despite its small size, it contains essential information about your bank, company, and social accounts and details about your friends, colleagues, and family.

Keep your information and money safe with the American Bankers Association tips.

• Use Passcode Locks – using passcodes to open your device prevents others from gaining quick access if it is lost or stolen
• Log Completely Out – sign out of mobile and web banking accounts, as well as other services, when you are finished with them
• Use Caution with Apps – some downloaded apps can contain malicious software, so be aware of ones that request unnecessary “permissions” and delete apps that are seldom used
• Stay Up to Date – update your devices and apps by downloading new versions from the manufacturer or official software store
• Protect Your Sensitive Information – do not store passwords or social security numbers on your mobile device where others might access them
• Clean Before Giving Away – before you donate, sell or trade a device, erase all data using specialized software or the manufacturer’s recommended method
• Beware of Phishing – do not open links or attachments in emails or texts, especially from unknown senders, and be wary of ads that claim your device is infected
• Use Only Secure Wi-Fi – only use secure Wi-Fi when conducting sensitive transactions, such as banking or entering account information, and use a virtual private network app when using a public network 

Act quickly if you suspect you have been a victim of data theft by reporting it to the Federal Trade Commission (reportfraud.ftc.gov), the Ohio Attorney General ohioprotects.org and the financial institutions you use.

Find out more about protecting your business and yourself at bit.ly/buckeyesecurity.

A cyber attacker may target your business to gain unauthorized access to its accounts and data. If thieves gain control of the company’s accounts, they can make unauthorized transactions, transfer funds, add fake employees to payroll and steal sensitive business and customer information.

Prevent Senior Financial Abuse 

The number of financial crimes committed against people 65 and older is rising.

The American Bankers Association offers these tips to protect yourself:

• Plan ahead by exploring your best options with a trusted financial or legal advisor
• Shred financial documents and offers
• Never give any personal or business information, including your Social Security number or account numbers, to anyone you did not initiate contact with
• Don’t sign any documents you don’t fully understand without consulting a financial advisor or lawyer
• Before hiring anyone, check their references and credentials
• Trust your instincts because if something doesn’t feel right, it probably isn’t

Learn more ways to protect you and your family against financial abuse from the ABA at bit.ly/stopfinabuse. And if you see potential fraud, report it to reportfraud.ftc.gov or ohioprotects.org.

Watch Out for Tech Support Scams

If your computer or device is acting up, it is still a target for scammers trying to steal your business and personal information.

While scammers take advantage of reasonable concerns about viruses, their goal is not to protect your computer. Instead, they try to sell you useless services or install malware that gives them access to everything on your computer.

You can protect yourself and your team from tech support scams with the following tip:

• Never Give Unknown People Access – scammers often call or send a message saying your device has a problem, then ask for access to fix it
• Beware of Pop-ups and Messages – cybercriminals use on-screen warnings, emails and pop-up messages to trick you into clicking on harmful links or calling a phone number that gives them access to your data
• Update Antivirus Software Regularly – by updating your software regularly, you can combat new viruses and exploits targeting your device
• Use Legitimate Tech Companies – when you need to repair your device or have it checked, contact your device’s manufacturer or a reputable local support option who can assist you in resolving any issues

Act quickly if you suspect you have been a victim of fraud. Contact your bank or credit card company to block any unauthorized transactions. Any possible scams can be reported to the Federal Trade Commission through reportfraud.ftc.gov or the Ohio Attorney General at 800-282-0515 or ohioprotects.org.

Beware of Crypto Scams

Are you confused about cryptocurrencies? Don’t worry, you’re not the only one. 

Cryptocurrency is a form of payment that can either be exchanged online for goods and services or held as an investment. Using blockchain technology, it manages and records transactions across many linked computers. Cryptocurrencies can be bought through an online exchange platform or earned through a complex mining process.

The Ohio Attorney General advises doing your research first because cryptocurrency is complex and not regulated by any state or federal government agency. Here are some common scams to watch out for:

• Impostor Wallets – cryptocurrencies are stored in digital wallets on a device or online and require you to send funds to the correct wallet because scammers can divert funds that intended for another person
• Social Media Scam – watch out for tweets, texts, or email messages asking you to send cryptocurrency because they are likely scams, and once cryptocurrency is sent, it cannot be recovered
• Referral Scams – like a pyramid schemes, these scams work by recruiting investors in several investment tiers, with the idea that the more you invest and the more additional people you recruit, the more money you will make
• Giveaway Scams – a hustle that falsely claims to be sponsored by celebrities and promises recipients they will multiply the amount of cryptocurrency they send from a nonexistent jackpot or lottery

Learn more about cryptocurrency and scams from the Federal Trade Commission and report problems to the Ohio Attorney General.

Protect Yourself from Home Improvement Scams

Increasing temperatures signal the start of the season for home improvement projects. Even though most local contractors are reputable and do fantastic work, this season also brings out scammers. You should do your homework before hiring any contractor.
 
Here are some tips from the Ohio Attorney General’s Office to protect yourself from scams and unscrupulous contractors:

• Check references, customer feedback, and past work before hiring
• Get multiple written estimates from different contractors 
• Ensure they are licensed, certified and insured
• Pay in increments rather than making a large down payment
• Don’t pay in cash
• Make sure all promises are in writing
• Avoid contractors who want payment made out to them personally instead of a company

Check out a company’s reputation and learn how to protect yourself by visiting the Ohio Attorney General’s Office and the Better Business Bureau.

Take Steps to Protect Your Company Today

Cybersecurity is now more critical than ever. Being aware can help you keep your business information secure. 

Secure Your Networks and Databases

Set up firewalls and encrypt data to prevent criminals from gaining access to sensitive information.

Educate Your Team


Discuss with your employees their role in securing and protecting the information of their colleagues, customers, and the company. Establish policies so everyone knows what is acceptable and what is not permitted.

Enforce Security Practices


Develop policies that protect your company against attacks and provide guidelines for resolving issues when they arise. Be sure to outline how various situations will be handled and the consequences if a policy violation occurs.

Identify Fake Notifications


Teach your team how to recognize fake warnings and alert your IT experts when they notice anything suspicious.

Protect Your Company from Cyber Attacks

Cybercrime can have a significant negative impact on your business if proper precautions are not taken to prevent it. Being aware can help you keep your businesses information secure.

Secure your networks and databases


Protect your networks by setting up firewalls and encrypting information. This will help minimize the risk of cyber criminals gaining access to confidential information. Make sure your Wi-Fi network is hidden and the password protected. Make sure to be selective of the information that is being stored in the company databases. Databases can be a great means for companies to have a central location of data and documents, but this does not mean it is favorable to store any and all information. Automatic backing up of company data should be set to be completed either once a day or once a week, depending on the level of activity within your company. Backing up your company’s data will increase the likelihood that with a cyber attack, your company’s data will not be lost completely, which is all too common.

Educate your employees


Talk to your employees about their role in securing and protecting the information of their colleagues, customers, and the company. Have policies set in place so they know what practices are acceptable and unacceptable. Limit the number of users within the company who will have administrative access. This will minimize the amount of programs they will be able to download, therefore, minimizing the risks of downloading viruses and malicious software.

Create security policies and practices


Establish practices and policies to protect your company from cyber attacks and provide guidelines for resolving issues if they arise. Make sure to outline how situations will be handled and the consequences if an employee violates the policies. Control physical access to company devices and dispose of them properly. Prevent access to company computers and handheld devices from unauthorized users. Laptops and cellphones are easy targets for cyber theft since they can be misplaced easily or stolen quickly. Reset devices that are being disposed of back to factory setting. Never get rid of a cellphone or laptop without completing this step. Failure to do so could result in company information winding up in the hands of the cyber criminal.

Know how to distinguish between fake and real notifications


Train your employees to be able to recognize fake antivirus warning messages and alert IT as soon as they notice anything questionable occurring (if necessary). Make sure your company has a policy in place for the steps to be taken should an employee’s computer become infected with a virus. Malware is a sneaky program that can obtain information by making its way onto devices via the Internet, social media, email, attachments, and downloads. For example, key-logging malware can track everything the user types on their keyboard. This means cyber criminals could access bank accounts, customer information, passwords, and other company-sensitive information. Make sure to keep your security software up-to-date to help prevent malware from sneaking onto your system and networks.

Source: Office of Consumer Affairs and Business Regulation, State of Massachusetts