Recognise and Report Scams – Scammers impersonate trusted sources to steal your money or personal information. They can also try to get access to your company’s systems and steal data. Whether you are working from home, purchasing goods or services, or just catching up on email, be aware of commons scams making the rounds on the internet.
Here’s our pick of the 3 most common scams:
Phishing
Scammers use email or text messages to trick you into giving them your personal information, including access to your online accounts. They send you a deceptive message that’s designed to steal your passwords, account numbers, or other personal information. They use the information you provide to gain access to your email account, bank, or other online accounts.
Scammers send thousands of phishing messages every day and they are often successful.
Here are some examples:
- An email from NZ Post claiming you have a parcel ready for collection.
- An email from IRD informing you of a tax refund.
- A text message requesting a minimal customs duty be paid.
Spear Phishing
Spear phishing is like phishing where scammers use email or text messages to trick you into giving them information. The difference is that the scammers first collect information on their intended targets, so they can send convincing emails from a seemingly trusted source. These attacks are also often targeted at businesses and their employees.
Traditional security often doesn’t stop these attacks because they are so cleverly customised just for you
One employee mistake can have serious consequences for business, government, or organisation. Spear phishing messages can contain a virus that’s used to get access to the company’s systems and data.
Here are some examples:
- An employee receives a personally addresses email requesting an invoice payment.
- An employee receives an email from the CEO requesting some for or urgent action.
- An employee receives and email from a supplier to log into their systems/provide sensitive information.
 Crypto Investment Scams
The fast-changing state of the cryptocurrency market has caught the attention of scammers. Scammers are posing as friends, family and others to offer fake investment opportunities to steal money. The investment opportunities offer higher than normal returns which often result in investors losing most or all of their money.
These scams often need victims to download a trading platform to transfer cryptocurrency into a trading account. In most cases, victims are not able to withdraw their funds.
Here are some examples:
- A romance scam turns into an “investment opportunity“.
- An email offering a crypto currency investment opportunity.
- Phone calls soliciting “investment opportunities” and often asking for remote access to the victim’s computer.
Reduce the Risk
Scams are difficult to recognise and you might not know you’ve been a victim until it’s too late. There are things you can do to reduce the risk for yourself, your family and the business. Staff information security awareness education and the right technology can help to prevent these attacks. Phishing simulations also play an important role in helping employees get familiar with actual phishing emails making the rounds.
Take a look at CertNZ’s website on ways to reduce the risk and report a scam.
