Sunday, November 27, 2016

Scam websites


 Note: This post was originally published on November 27, 2016 and has been updated with new information.
On top of all the safety concerns we have for shopping in the real world, you have to be careful online as well.  Not only from identity theft issues but bogus, price too good to be true deals, on fake websites and fake mobile apps.

You use to be able to look at a website and have your spider sense tingle warning that this doesn’t look quite right. But now, at first glance, it’s hard to pick out a thrown together site. Site building skills and packages are such that pretty much anyone can construct a site that looks like a multi billion dollar corporation is at the other end. When in reality it’s a small time operation or worse an out of country company that is selling bogus products or collecting personal data.

Scam Busting

One quick way to tell if the site is not quite on the up and up is to take a tour and make note of the grammar. One thing the scammers haven’t quite grasped is writing in grammatically correct English. Sites that do not pay attention to simple grammatical structure probably don’t have your best interest in mind. We’re not talking about a typo here or their or misusing there,  they’re, or their, you'll see serious grammar issues that scream no quality control. But don’t use this as your only method.

There are several “detectors” that can be found online that you enter the questionable website address and the detector gives you a report on the site, including a score, location, technical data, owner, and contact information. One such site is Scamadviser.com. [This is just one of many and no endorsements are being given.] This site seemed to provide the most detailed information that online users could use.

If you’re not sure of a site, run it through a “scam busting site”, you should be able to get enough laymen details to make a determination if the site in question is someone you want to provide your credit card.

Typosquatting

In the early days of the Internet, criminals would identify the most popular retailing websites and then figure out the commonly mistyped spellings of the retailer’s names. They create their own sites under the misspelled names. Users always misspelled Amazon, or example. Type in Amason, and you are directed to the scammers’ site. Companies figured this out and began buying up the domain names associated with the misspellings.

The technique is called typosquatting. The practice diminished but is picking up popularity again. It’s hard to think of or even buy every possible spelling combination, so criminals are able to slip past the gatekeepers. The fraudulent sites are very close facsimiles to the real sites. Once a user interacts, malware is downloaded onto the users computer and/or information is stolen.

Mobile devices are targeted as well through fake retail apps sold in smartphone stores. The apps mimic legitimate retailers, but they install malware that steal identity, financial information, and sometimes install ransomware (If you ever want to see your files again August 8, 2016) The RiskIQ cybersecurity company estimates that 1 in 10 Black Friday apps were fraudulent. The biggest app stores fall victim to fake apps. Retail apps may be safer downloaded from the retailers website.
  
Another oldie but goodie is fake shipping notices sent via in email. They are always prevalent but become more so when criminals know that there will be an increase in online shopping/shipping. The notices can look real and appear as they are from a retailer from which you recently purchased. With the flurry of shopping everyone does at this time of year, it’s easy for fake notices to lost in all the emails received. Know what you purchased and from whom, monitor the confirmations and shipping. Most companies will send out a confirmation email, a product shipped email, and possibly a follow up.  Be on guard for anything more.

It’s hard to say stick with nationally named brands and big retailers. Lots of small businesses make their living through online sales and often have good deals especially on unique items. Just as if you were shopping in the real world, you wouldn’t buy from a questionable character off the street, so do some research before you buy online. And watch out for too good to be true deals, especially on hard to find items. Use common sense.  Check reviews. Do your homework.

Be safe. Enjoy the thrill of the hunt.

See our blog archive for other posts relating to shopping safety:

No comments:

Post a Comment