Like so many Americans, you may have recently received a note from the U.S. Postal Service informing you of an undeliverable package, requesting you reply by giving the text sender some personal information.
Don’t do it. If you truly have a package waiting for you at your local post office, the USPS will send you a notecard in the mail.
In short, the holiday season is a ripe time for scammers.
To that end, an agent in the FBI’s field office in Sacramento this week passed along 25 tips to help Northern and Central California residents stay safe while online during the 2024 holiday season, when the electronic pickpockets, more clever than ever, have developed schemes to steal your money.
“Every person should be aware of how cybercriminals are targeting the American public and have a good defensive plan to stay safe while online,” said Sid Patel, a special agent in charge in the Sacramento field office, said in a press statement. “Our goal is to empower the public to thwart cybercriminals’ attempts but we also encourage the public to get more information and report cybercrime to IC3.gov.”
Last year, the FBI’s Internet Crime Complaint Center (IC3) received 880,418 complaints, with potential losses exceeding $12.5 billion. That is a nearly 10 percent increase in complaints received and represents a 22 percent increase in losses when compared to 2022 data.
Awareness and prevention are essential for a good defense against cyber criminals, Patel said in the prepared statement, then listed the 25 tips to foil cyber crooks:
- There is no substitute for password security. Use unique, complex passwords for each account – using a password management tool, when possible – and secure accounts with multifactor authentication, when available.
- If you receive a device with a factory-set password for the holidays, reset the password with a unique, complex password.
- Never store your credit card info online. The convenience is not worth potential compromise of your account.
- Scrutinize all URL addresses and email addresses. Criminals often use addresses that are close to legitimate accounts to confuse potential victims.
- Ignore unsolicited emails, texts, and calls. Criminals spam multiple accounts and numbers in the hope of hooking victims. When in doubt, contact the known, legitimate creditor, business, bank, or shipper using the numbers on your statements or official websites. Do not call numbers offered during unsolicited communication.
- Never post travel plans or photos of tickets online. These posts offer information about your absence from your home and criminals can steal information from the bar codes of tickets. Post comments and photos when you get home.
- Cross-check charities before donating. To ensure your money serves people truly in need and not someone taking advantage of your goodwill, ensure the charity is a registered nonprofit organization.
- Be careful what you click. Clicks can initiate downloads of malware or send you to a false website.
- Be cautious about what you download. Some apps may provide a criminal with more access to your device than you may realize.
- Beware of too-good-to-be-true offers on hard-to-find goods on unfamiliar sites. These sites may be interested in your credit card information, not your business.
- Do not buy animals online from distant, unregistered breeders. Cross-check the breeder’s information with breeders’ associations to determine legitimacy. The animal you may think you are purchasing may not exist and may never be delivered.
- Never make a large purchase for delivery such as a vehicle sight-unseen on the internet. Criminals may make false claims about a vehicle that may not exist and its alleged delivery to steal your money.
- Beware of purchasing online vouchers, gift cards, and tickets through social media or third-party auction sites.
- When purchasing gift cards from a rack, carefully inspect the gift card to ensure it has not been tampered with in any way.
- Be cautious of work-from-home or secret shopper job offers. In some cases, criminals are using these offers to steal your personal information or trick you into making gift card or banking transactions.
- Beware of remote money management jobs that involve receiving and redistributing funds. You may be an unwitting participant in a criminal scheme, acting as a money mule.
- Completing a transaction with a gift card is like completing it with cash. It is untraceable, unsecured, and cannot be recovered. Beware of anyone who asks you to obtain gift cards to complete a transaction or pay a fee.
- When dating online, never send money to anyone you have not met in real life for any reason. Criminals often leverage dating sites to exploit well-meaning but vulnerable victims.
- Be cautious with cryptocurrency investment schemes, especially those requiring an application download promoted by someone you recently met.
- Beware of individuals who claim to be located overseas and need your assistance with sending or receiving money on their behalf.
- Ignore pop-up messages or unsolicited phone calls from individuals purporting to be law enforcement or tech support. Do not give anyone remote access to your computer.
- Locking your credit is free and can prevent someone from opening a credit account in your name without your knowledge.
- Always hang up on calls purporting to be law enforcement that involves any form of financial transaction. Law enforcement will not demand fines to be paid over the phone or for you to open accounts to transfer money into.
- Scrutinize social media posts before sharing them. Your post may legitimize a criminal’s fake charity or business post for your network.
- Always report suspected scams to the FBI’s Internet Crime Complaint Center (IC3) at ic3.gov.