Reference Number ACG-CSB 032525385
The following information was obtained from different cyber security sources for notification to all parties concerned pursuant to the mandate of the Philippine National Police Anti-Cybercrime Group (PNP ACG) and classified as “Restricted” pursuant to the PNP Regulation 200-012 on Document Security and Impact Rating as high based on PNP Information Communication Technology (ICT) Security Manual s.2010-01 p. 22 and p.129.
SUMMARY
An online scam is a cyber-enabled crime that steals money, personal information, or valuable data through the use of emails, fake websites, social media, and online ads to deceive people into trusting them. These scams are designed to look realistic and legitimate, making it hard to spot the difference between a real deal and a counterfeit. As our daily activities revolve around online, the risk of falling victim to these scams increases, making it important for everyone to be aware of these online scams.
Some of the most common online scams include phishing, where fraudsters send fake emails or messages to steal login credentials or bank details. Fake online shops take money but never deliver the products. Romance scams play with people’s emotions, gaining trust only to trick them out of their savings. Investment scams promise big returns but leave victims with nothing. Many people fall for these scams because scammers use urgency, emotional appeals, and fake credibility to manipulate their victims. Even tech-savvy individuals can fall victim when scammers make their schemes appear convincing.
Online scams are evolving with new tactics. One such scam involves AI-generated impersonations, where fraudsters create hyperrealistic videos or audio of trusted individuals to manipulate victims into transferring money or revealing sensitive information. Another emerging threat is the “pig butchering” scam, where scammers build long-term relationships with victims, often through social media or dating apps, to gain trust and convince them to invest in fraudulent cryptocurrency schemes, leading to significant financial losses. Additionally, QR-Phising or “Quishing” scams are trending now. These involve malicious QR codes that when scanned, will direct users to phishing websites designed to steal personal data or install malware. These sophisticated methods highlight the need for vigilance and robust cybersecurity practices.
If you think you have been scammed, do not panic but act fast. First, stop all communication with the scammer and block their contact. Secure all accounts by changing passwords and turning on two-factor authentication. Contact the bank or payment provider to report the issue and request a reversal of any fraudulent transactions. Collect all evidence, such as screenshots of messages, emails, or receipts, and report the scam to authorities. Don’t forget to report the scammer to the platform where the scam happened, as this can help prevent others from being targeted.
Online scams do not just cause financial damage but they as well as can also take a toll on one’s mental health. Victims often feel embarrassed, betrayed, or anxious, which can make the experience even harder to deal with. Financial losses can lead to stress, while the breach of trust makes people wary of legitimate online transactions. Scams also undermine trust in online platforms, which affects businesses and users alike. This is why staying alert and practicing good cybersecurity habits, like verifying sources and avoiding oversharing personal information, is so important.
Online scams are a growing threat that can affect anyone. By learning about common scams, acting quickly if you’re targeted, and staying vigilant in your online activities, you can reduce the risk of falling victim. Cybersecurity awareness is key to protecting yourself and helping create a safer online environment for everyone.
RECOMMENDATION
The public is advised to follow these tips to avoid being a victim of online scams:
- When engaging in online transactions, using virtual credit cards or payment platforms with buyer protection is highly recommended.
- Investment schemes should always be verified through official regulatory agencies to avoid falling for fraudulent offers.
- Online accounts should be regularly reviewed for unauthorized transactions or changes, with immediate action taken if anything unusual is detected.
- Suspicious or unexpected pop-ups requesting personal or financial information should be closed without interacting with them.
- QR codes from unverified sources should not be scanned, as they could lead to phishing websites or malware installation.
- Individuals should always verify the sender’s identity before engaging with unsolicited emails, text messages, or calls, especially those requesting personal or financial information.
- Reputable antivirus and antimalware solutions should be installed, and routine scans of devices should be conducted.
For additional information, please refer to the following websites:
- https://us.norton.com/blog/emerging-threats/internet-scams
- https://www.kaspersky.com/resource-center/threats/top-scams-how-to-avoid-becoming-a-victim
- https://www.avast.com/c-scam
POINT OF CONTACT
Please contact PLTCOL JERRY V EMPIZO, Officer-In-Charge, Cyber Security Unit, thru e-mail address csradacgroup@gmail.com or contact us by telephone number (632) 723-0401 local 7488 for any inquiries related to this CYBER SECURITY BULLETIN.