Email scams, called "phishing" or "carding", are an attempt to trick consumers into disclosing personal and/or financial information. The emails appear to come from companies with whom consumers may regularly conduct business (e.g., AOL, Earthlink, Paypal, eBay, or a credit card issuer). Often times the email threatens termination of accounts unless consumers update billing information.

Email scam message

Many of these email schemes contain links to "look-alike" Web sites that are loaded with actual trademarked images. The Web sites then instruct consumers to "reenter" their credit card numbers, social security numbers, bank PINs, or other personal information. If consumers provide the requested information, the data goes to scammers, not the legitimate company illustrated on the site. Often, the data is used to order goods or services and/or to obtain credit in the name of the victim.

Caution should always be used when receiving any unsolicited communication requesting personal information. We offer the following tips for people that receive emails as described above:

  • Be skeptical of warnings that accounts will be shut down with little or no notice if you don’t reconfirm your billing information
  • Don’t click on the link -- contact the company directly using a telephone number or a Web site address you know is real
  • Look at the "address bar" at the top of the browser – not just the pictures on a web page – it is often a different domain name than the firm being represented in the email or Web page
  • When submitting financial information on any Web site, look for the "lock" icon on the browser's status bar to be sure your information is secure during transmission
  • Avoid sending personal and/or financial information via email whenever possible
  • If you have given personal information, consider the following: (1) Carefully check credit card and bank statements for unauthorized charges each month (2) Contact the fraud departments of each of the three major credit bureaus and report that sensitive financial information has been compromised. Ask that a "fraud alert" be placed on your file and that no new credit be granted without your approval
  • If your financial accounts have been fraudulently accessed or opened, contact each company’s security department. Close these accounts. Put passwords (not your mother’s maiden name) on any new accounts you open
  • If your financial information is used for illicit purposes, file a report with your local police or the police where the identity theft took place and get a copy of the report.

 

 

U.S. Federal Trade Commission
United States
Federal Trade Commission


Statistics


Email Scams


I.D. Theft