When Internet Scam Artists Go "Phishing," Don't Take the Bait


How to avoid being lured into giving out personal information

Law enforcement officials use the word "phishing" to describe a type of identity theft by which scammers use fake Web sites and e-mails to fish for valuable personal information from consumers. The FBI also is calling it the "hottest and most troubling new scam on the Internet." Even the FDIC's good name was used fraudulently in a phishing scheme. This is how it works:

  • A consumer receives an e-mail which appears to originate from a financial institution, government agency, or other well-known/reputable entity.
  • The message describes an urgent reason you must "verify" or "re-submit" personal or confidential information by clicking on a link embedded in the message.
  • The provided link appears to be the Web site of the financial institution, government agency or other well-known/reputable entity, but in "phishing" scams, the Web site belongs to the fraudster/scammer.
  • Once inside the fraudulent Web site, the consumer may be asked to provide Social Security numbers, account numbers, passwords, PIN’s, or other information used to identify the consumer, such as the maiden name of the consumer's mother or the consumer's place of birth.
  • When the consumer provides the information, those perpetrating the fraud can begin to access consumer accounts or assume the person's identity.

These thieves are very good at convincing you that you are receiving a legitimate message or using a Web site from a trusted source.

Never provide your personal information in response to an unsolicited call, fax, letter, e-mail or Internet advertisement.
If you did not initiate the communication, do not give this information, regardless of how legitimate or genuine these people or entities may appear to be.

If you decide to initiate a transaction with a bank or other entity on the Web, take some simple precautions.
Do not provide personal information to a Web site using a link from an e-mail or an Internet advertisement, no matter how legitimate it may appear. You are always safer typing in the URL (Web address) from scratch, assuming you type it in correctly. The problem with typing a URL incorrectly or guessing about a Web address is that some fraudulent, copycat sites deliberately use URLs that are very similar to, but not the same as, those for well-known companies or government agencies. When contacting your bank, for example, use the phone number or Web address listed on your monthly statements or other literature from the institution.

Quickly report anything suspicious to the proper authorities.
Report any questionable e-mail message or Web site to the real bank, company or government agency, using a phone number or e-mail address from a reliable source. Example: If your bank's Web page looks different or unusual, contact the institution directly to confirm that you haven't landed on a copycat Web site set up by criminals. Customer inquiries about changes to a Web site are one of the most prevalent ways that banks and other organizations are finding out about unauthorized sites containing the look and feel of a legitimate Web site. If you are pretty sure an e-mail or Web site is fraudulent, contact the Internet Crime Complaint Center (http://www.ifccfbi.gov/), a partnership between the FBI and the National White Collar Crime Center.

What if you believe you are already a victim of ID theft, perhaps because you submitted personal information in response to a suspicious, unsolicited e-mail or you spotted unauthorized charges on your credit card? Immediately contact your financial institution and, if necessary, close existing accounts and open new ones. Also contact the police and request a copy of any police report or case number for later reference. In addition, call the three major credit bureaus (Equifax at 800-525-6285, Experian at 888-397-3742 and TransUnion at 800-680-7289) to request that a fraud alert be placed on your credit report. You can visit http://www.consumer.gov/idtheft/ for more details.

You also can file a complaint or learn more about ID theft by going to the Federal Trade Commission Web site at http://www.ftc.gov/index.html or calling toll-free 877-382-4357.