Atlanta has been one of the top cities where Identity Theft and Fraud occur (Please see this 2019 article from WSB). Today, let’s look into how criminals are trying to use text messages to attack you. Let’s use my personal cell phone as an example. My number has been subscribed to the Do Not Call list for many years (DoNotCall.gov). I also do not answer calls from numbers that are not in my contact list (Tip: Your iPhone may already be protecting you from Scammers and Telemarketers ).
Below are two screenshots from text messages sent to me.
Let’s look at the pictures to find the clues.
- The phone number is listed. Most corporations text you from a 5-6 digit or 800 number that allows you to unsubscribe by replying STOP. Tip: Google the number they are texting from.
- I do not have a Verizon or a Chase account.
- They are offering something. The first one is offering a “little gift” and the second is offering access. Who doesn’t want access. They, especially want access to your information.
- The links are pointing you to a wired domain/ website. The first is pointing to *****.xyz and the second is to **.li . It should be a Verizon.com or chase.com address. Tip: don’t be fooled by the https.
How did they get my number?
- One of the many hacks where personal information has been leaked. Tip: Type your email or phone number on this site to see if your information has been compromised. https://haveibeenpwned.com/
- Public records. Here is one of many examples. https://www.truepeoplesearch.com/. It is surprising how much info it available with just a few clicks.
- List compiled from companies that I have done business with, selling information to affiliates, subsidiaries anyone willing to pay. Here is an interesting article about companies that say that they don’t sell your info. Here is a Washington Post Article about Data Brokers.
- Guess. If they have one number, they can keep incrementing the number and keep trying. According to this website. Verizon has over 29% of the US population as users. That means that if they texted every number in the US, they have almost a 1 in 3 chance of getting a potential ‘mark’.
What are the ramifications of following through (Clicking)?
- You are potentially downloading spyware on device
- The link may take you to a website that looks exactly like Verizon or Chase (using my example). You enter your credentials and poof, it goes to the criminals and it may even log you into the legitimate website.
- Your number gets added to an additional list where others know they have a greater chance of success with you.
The Solution. Besides the above tips. Be aware and don’t be too quick to click. Like AT&T says, “It Can Wait”. One wrong click can bring months of headaches.