October is Cybersecurity Awareness Month, which makes it a good time to review the most common way people get into trouble–clicking the wrong thing. Most of the problems we see aren't sophisticated hacks; they're fake emails, fake texts, and fake pop-ups that look just real enough to fool someone.
Here are some ways to spot scams, and what to do if you already clicked on one.
Signs a Message is a Scam
- A push for an urgent response. This can be messages like "your account will be closed today," "unusual activity detected," or "your package couldn't be delivered." Scammers want you to act before you think.
- The sender doesn't quite match. The contact name says your bank, but the actual email address is a jumble of letters, a different domain, or something similar but misspelled. If you’re using a smartphone, tap on the sender's name to see the real address.
- It asks for something a real company wouldn't. A legitimate company would never ask you for passwords, gift cards, one-time codes, or remote access to your computer.
- The link goes somewhere different than it says. On a computer, hover over a link before clicking on it. On a phone, press and hold it to preview the address. Always check links before clicking on them.
The Fake "Tech Support" Pop-Up
These can look like a full-screen warning with a loud alarm saying your device is infected and telling you to call a phone number. This is almost always a scam. Microsoft and Apple won't display phone numbers in their warnings. Don't call the number, don’t click on any links, and don't let anyone connect to your computer remotely. Close the browser–if it won't close, restart your computer–and get your computer checked out if you’re worried.
Three Habits to Help Keep You Safe
- Go to the source yourself. Instead of clicking a link in a message, open the company's website or app directly.
- Turn on two-step verification. This is especially important for your email, banking, and anything with payment info. Even if someone gets your password, they can't get into your account without the second step. Your email account matters the most, because it can be used to reset all the others.
- Keep your computer and browser updated. Updates will fix security issues or loopholes that scammers rely on. Make sure to turn on automatic updates and restart your device when prompted to ensure everything stays up-to-date.
If You’ve Already Clicked
Don't panic, but act quickly:
- If you entered a password into a fake link or gave it to a scammer, make sure you change it right away on the real website. Also be sure to change it anywhere else you use the same one.
- If you gave anyone remote access to your device or sent them money, contact your bank right away, then disconnect the computer from the internet and turn it off.
- Run a full scan with your security software, or have it looked at by a professional if anything still seems off. Always have a professional take a look if someone had remote access, as scammers will often install malware or spyware.
Not sure if something is legitimate?
We are happy to take a look before you click, or clean up after.