Schemes, Scams, & Frauds

Phishing is the criminal attempt to acquire sensitive information such as usernames, passwords and credit card details by masquerading as a trustworthy entity in an electronic communication. Phishing scams are usually conducted through email, directing users to fake websites whose look and feel are almost identical to a legitimate one. Phishing emails may also contain links to websites that are infected with malware.

Spear Phishing is a variation of phishing. With phishing, criminals might send a mass email to thousands of people. Spear phishing attacks are customized and sent to a single person at a time. The spear phishing email usually contains personal information such as your name or some disarming fact about your employment. These attacks are usually limited to corporate targets. If you receive a suspicious email from your employer, go directly to your HR Representative or IT Department to learn whether the email is legitimate.

Smishing is yet another variation of phishing (combination of SMS, or Short Message Service, and phishing). In this scam, the fraudster uses cell phone text messages to lure you to a website or automated voice response system. For example, a smishing text message might say it is confirming an order for a large purchase and you need to follow the directions in order to not be charged for the item. Once you click on the URL or call the phone number, you are asked to provide card numbers, account numbers, PIN numbers, etc.

NEVER give your personal information over the phone unless you initiated the phone call.