Posted on

Reference Number ACG-CSB 021225380

The following information was obtained from different cyber security sources for notification to all parties concerned pursuant to the mandate of the Philippine National Police Anti-Cybercrime Group (PNP ACG) and classified as “Restricted” pursuant to the PNP Regulation 200-012 on Document Security and Impact Rating as high based on PNP Information Communication Technology (ICT) Security Manual s.2010-01 p. 22 and p.129.

SUMMARY

Losing a phone can be stressful, and many people search for quick ways to track it down online. However, it is important to stay away from websites or apps that claim to find a phone just by using its phone number for free. These services often promise fast results, but they can be scams that steal personal information.

In one such case, after losing a phone, an individual came across a free app claiming to track phone numbers. The app seemed trustworthy, with a professional design, glowing reviews, and promises of real-time tracking. Desperate to recover their lost device, they downloaded the app and followed its instructions. However, before providing the supposed location, the app requested a small fee to “verify” the service. Believing this was a minor step to retrieve their phone, they entered their payment details. Instead of the promised results, they faced unauthorized charges on their account, and the app failed to deliver any information about their phone. Worse, the app requested unnecessary permissions during installation, allowing it to access personal data. Shortly after, phishing messages were sent to their contacts, pretending to come from them.

One of the most common strategies used by fraudulent services is data harvesting. These websites and apps frequently request sensitive personal information like phone numbers, email addresses, or banking login credentials. Once this information is provided, scammers can use it for a variety of malicious activities, including identity theft, phishing, or selling data on the dark web. Extra caution should be exercised when entering personal information online, especially when the service appears too good to be true. Many sites claim to offer tracking services but fail to deliver any legitimate results. Instead, they may use social engineering tactics to convince users to provide sensitive information or make payments

These scams involving phone number-based tracking pose significant risks. Identity theft is a primary concern, as scammers can exploit personal information for fraudulent activities. Financial losses can occur through unauthorized charges or payments for non-existent services. Moreover, these scams often involve malware installation, leading to severe privacy invasions, including access to personal data and potential location tracking.

Before using any phone tracking service, it’s a good idea to research the company or app offering the service. Scam websites often look real at first, but looking closer can reveal problems, like poorly designed websites, strange web addresses, or no customer reviews. Searching online or reading user feedback can help find any warning signs. Reputable services have strong reputations and clear security information. Be cautious of domain names that closely resemble legitimate sites but contain subtle misspellings or alterations (e.g., “Yah00.com” instead of “Yahoo.com”). Always double-check the domain for authenticity. Legitimate websites typically provide multiple contact methods, such as a phone number, email, or physical address.

If someone has used a suspicious tracking service, it is important to monitor bank and online accounts. Fake services might ask for payment details or charge hidden fees. Checking bank statements for any unknown charges is a good practice. If any strange changes are noticed in online accounts, like new passwords or linked devices, it’s important to act quickly. These types of scams often try to steal financial information.

Furthermore, it is important to scan the device for malware. Malware is harmful software that can steal data or cause other problems. Trusted antivirus programs should be used to check and remove any threats. Adding two-factor authentication to accounts and changing passwords regularly adds extra protection. By staying cautious and following these simple steps, people can avoid falling for scams. It is always best to use trusted services and avoid giving out personal information on unreliable websites.

RECOMMENDATION

            The public is advised to follow these tips to avoid being a victim of fake apps or websites that claim to track phones for free:

  • Avoid unsolicited messages or emails offering free phone tracking.
  • Don’t engage with websites that require payment before tracking a device.
  • Never share personal information like login details, phone number or email.
  • Watch out for fake testimonials or reviews that seem too generic or scripted.
  • Be suspicious of apps asking for unnecessary permissions, like accessing contacts or messages.
  • Check if the company has active social media profiles. Look for genuine engagement and reviews from real users. Fake companies often lack a substantial online presence

For additional information, please refer to the following websites:

  • https://consumer.ftc.gov/articles/how-recognize-and-avoid-phishing-scams
  • https://health.ucdavis.edu/cybersecurity/learning-center/spot-phishing-

POINT OF CONTACT

Please contact PLTCOL JERRY V EMPIZO, Officer-In-Change, Cyber Security Unit, thru e-mail address csradacgroup@gmail.com or contact us by telephone number (632) 723-0401 local 7488 for any inquiries related to this CYBER SECURITY BULLETIN.

Views: 0