General News

Phishiology: Forms and Samples of Phishing Scam Messages


Phishing is the foundation of scam.

The success of a phishing message leads to scam.

It becomes Phishing Scam when the two tricks are dubiously interwoven to get your details and your money.
Majority of cyber attacks begin with phishing emails which entice you to click, and majority of such emails use malicious file attachment.
So, you want to ask: what is Phishiology?
The collection of examples of such phishing e-mails, text messages, false credit alerts, and other messaging tricks sent to you by cybercriminals for fraudulent activities is what I refer to as phishiology.
Relationship between phishing and scam
Phishing is a ploy scammer uses to get your account details in order to use it for his own advantage.
Tools of Phishing message

These are the critical information a scammer needs to successfully launch attack on you:

  1. Your name 
  2. Username 
  3. Address 
  4. Phone number 
  5. Password or PIN 
  6. Bank account number 
  7. Debit or credit card number 
  8. Card Validation Code (CVC) of your credit card 
  9. Social security number (SSN)

It means the personal information gotten through phishing is used to execute scam, which is a dishonest way of making money from people through a questionable means.
Both involve tricks. 
Communication channels of phishing scam

  • Through social media (twitter, facebook, LinkedIn e.t.c) 
  • Over the internet, 
  • Via e-mail, 
  • Text messages (SMEs) 
  • One-on-one 
  • Print: Newspaper/Magazine (some newspapers carry dubious adverts) 
  • Radio, and 
  • Television.

How cybercriminals operate

Most cybercriminals are experts in hacking; they know how to break weak security walls. They use emails, calls, text messages, spyware, hacking and other means to gain your trust.
We’re in a mobile-world which is one of the reasons we’re more susceptible to attacks because mobile devices have completely changed the way, intervals and how we get information.
And you know the joy of “online hawks”?
They believe that the click rate of their specially-designed dubious messages, in whatever form, is higher on mobile devices than on desktop computers.
Though banks always issue security warnings on how their customers can protect their accounts, taking personal precautions on how to avoid scams is also necessary to securing your account information.

Warning to readers
Please, do not contact any email address herein, even though more than 99.9% of some of them do not have permanent email or telephone address.
Forms and Examples of Phishing Techniques

Online thieves work in a sophisticated market structure. They are very cunning and innovative like those who invented the computer, so being smart isn’t enough for you not to be duped.
One of the best ways to beat them is to stay alert, keep yourself updated about new trends. This article has 32 forms and samples of such phishing scams which are:

  1. Product Review Fraud
IMReport Card says, “…If you do these things we absolutely guarantee that it’ll make your Internet marketing journey easier and more financially rewarding, you’ll earn some extra money (emphasis is mine) using the site, and you’ll be helping lots of other people all at the same time.”
Unfortunately, IMReport Card has had to battle with fraud reviews from who has neither seen nor used a product before which negates the purpose of the firm. They made false reviews because of the extra cash. And false reviews can be misleading and confusing for a prospective buyer from making the right choice.

Here are some countries that have been prohibited from posting comments or earn credits from the use of the site:

  • India
  • Lithuania
  • Malaysia
  • Nigeria
  • Pakistan
  • Philippines, and
  • Singapore.
Some users from these countries had been detected for fraud commenting. (Please check the official website of IMReport for an updated list).

But some of them have devised a way around the barrier placed on them. Sophisticated ones among them now resort to using advanced methods.


2.  Quick action Message 

You’re persuaded to activate a particular account you’re unaware of when and how you opened it. Such email is tricky that you may say, “Can it be true” thereby clicking through in eagerness to know where you will be led. E.g:
“Hey,
There’s a new system that is literally printing money on demand for all it’s users.
I was lucky enough to secure a private activation key for you.
Click here for Your Private Activation Key
Once you activate the system you will start to receive real money into your account. Go Now To Gain Access
Good luck and I am glad you’re doing this!
Thanks.”
This kind of email is targeted at getting your bank details since you’ll be required to drop your account number, and some other personal details.

3. Contract Letter Impersonating Government Officials
This is one of the most used scam tactics across the border. The “bad guys” use this to defraud an unsuspecting foreigner who thinks he’s dealing with a real government representative. This takes different forms. They use letter head paper bearing the name of a particular ministry, a name of a minister, or permanent secretary with a forged signature sent to you as fax, or e-mail.
ActionFraud calls this “business opportunity fraud , where you get a comprehensive list of investment opportunities from which you can take advantage of.
One of the things that makes 419 fraud tricky is the fact that writer of the message follows the trends within government circle.
For instance, if the government is planning to distribute free English textbooks in all the public schools, it’s an opportunity for 419ner to come up with letter head paper of ministry of education, which content will be contract worth millions of dollars.
Which company doesn’t want to expand and explore international opportunities?
How they come up with who to defraud?
They search for international publishers on the website, and they establish contact posing as government representative.
It’s better to use the official website of government ministry than any link sent to you by an impersonator in any kind of business opportunity.
4. Escrow Deposit Scam

The scammer either acts as the seller or buyer. If he’s buyer, he contacts you saying he wishes to pay through Western Union. Then he goes ahead to forge an e-mail that payment has been made into your account, or saying that your money is being held in Escrow and will be forwarded when the seller verifies they have tracking number.
He’s also the same person that will send tracking number to you for verification.
In this kind of situation, you as the seller may send the goods thinking your money is secured with a reputable company the scammer claimed to have paid.
So, because of the forged e-mail or message sent to you, you too might send the item before you realised it’s a scam.
5. Act-Now email.
“Hey there!
I’ve sent you private, VIP access yesterday but my records show you haven’t taken action yet 1-time Free Access: Redeem Today.
I need to know if you’re really want to access to this all new commission tool or if I should pass the opportunity on to the next member. Activate Your Download Link Here
Only 24 hours before your link expires!
Hurry!”
Watch out:
The email isn’t formal. It’s generic, which is one of the Things to Watch Out For In Dubious E-mail.
Such message has a large number of recipients. Cyber thieves don’t have time to address each recipient by their name. The quickest way is to push their email out en masse to their targets.
It doesn’t want to give you time to think before you click, “horridness” in tone. Even if the message contains your name or addressed to you, you’re still advised to take personal precautions, particularly when the message is requesting you to click a short URL which is now one of their tricks.
Bank Account Update Scam
6. Email pretending to be from your bank
This kind of “masquerade” message is usually purportedly designed by cybercriminal requesting for your account details.
“Dear customer,
In compliance with the current banking policy, you’re expected to update your account profile.
Please, use our link to update your information so that your account will not be blocked in the next 12 hours.
Thanks for banking with us”
How to treat bank warning scam
If you got this kind of message, it’s better to contact your bank to verify the authenticity of such alarming message.
Again, these criminals target their awaiting “prey” during weekend when your bank isn’t open for business plus the ultimatum in the tone of the message.
If it’s not e-mail, you can be contacted through SMS.
Don’t be deceived by the fact that the sender actually bears the name of your bank because they use custom-SMS which can be manipulated to look like your real bank.
What of if I already clicked on this kind of dubious e-mail?
Anybody could be caught aware, but your next action should be to contact your bank. If it happened on Sunday, customer care line of some banks are always available 24/7, so report it right away before the bad guy carries out his dubious plan.
Online Shopping Fraud
7. Escrow/Ebay Scam

Another sneaky way is for fraudster to setup fake escrow company with fake website, a registered business name and address for the purpose of using such on online market like Ebay.
This kind of fake company imitates exactly what the original escrow does, but takes your product and will never return it.

8. Fake PayPal Email

 One of the leading targets of scammers is PayPal, and the reason is obvious: the money. This involves sending emails which fraudulently claim to be from it, but a thorough probe into the email will show you that it’s designed to trick you as a PayPal customer which is aimed at stealing your login details.
PayPal phishing scam email takes different formats depending on the trends of the “online bad guys.”But one of the latest trends is, “Your transaction was declined.” And you’re instructed to fill a form in an email sent to you in order to correct the unusual transaction in your account.
This is what Brett B. Christensen of Hoax-Slayer calls,sophisticated phishing scam attempt designed to steal PayPal login details and other financial information from recipients.”
Subject: Unusual Activities in your Account
There have been unusual activities in your account lately. We suspect that someone else is using your PayPal account without your consent.
The IP address in the last transaction shows that the user is located in another country contrary to your data.
Your security is our top priority, and this is what to do:
Confirm the information you provided when you created your account. This is to ensure that you’re the real account holder.
Download the attached document
Open the document in a browser
Follow the instructions in order to confirm that you’re the real account holder.
Yours sincerely,
PayPal

How to discover PayPal Scam:
PayPal addresses its customers by their first and last names, or business name.
It doesn’t use generic greetings like, “Dear Customer.”
If you’re suspecting an email sent to you as being scam, submit it to the company via PayPalphishing information pagefor analysis.
9. Auction Scams

Scammers have tricks of rigging online auctions. What they do most time is to take you out of the auction site. Following their site could make you end up with a dud product.
Even if your intention was to use a legitimate site, online crooks can imitate the URL of another site with just a slight difference that requires a critical study for you to identify.
Consider this: sellland.com, selland.com, these two addresses can put you at crossroads, if you don’t really know the actual one.
How to avoid online market scam
Take your time to critically check URL of any auction site you are about to deal with.
If you’re shopping on Ebay, or any other online market partnering with escrow, it’s advisable to use the Ebay approved escrow service at escrow.com
And keep an eagle eye on how the domain name is spelt because scammers are notorious for coming up with domain name that looks like the one they’re imitating.
Check this out: Escrow, eskrou, escrau, eskrou.
Be 100% sure of where you’re and what you want before you go shopping on the web. If you’re not sure, make enquiry from trusted people around you who have used the services you’re about to use.
Don’t be in a hurry to send your product, make sure a cheque has cleared.
If you’re using PayPal, don’t check transactions through the e-mail sent to you, it’s safer to login into your PayPal account to confirm payment. E-mail sent to you can easily be forged to look like PayPal’s.

Example of Ebay scam sent to a seller
Check out these scam messages sent to Ebay seller
“Dear seller,
I really want to buy this item and I need a seller who is ready to sell,i will be paying 750euros for this item and you will ship it to my client in Nigeria.
1 I will be paying you by western union Auction Payment Bidpay.
2 You will ship the item by FEDEX,DHL, UPS, EMS.
3 You will ship the item to my client immediately you receive my payment approval from the western union.
Please please scammers stay off!!!!!!!!!!
Robert Dallas”
Analysis:
Trace the origin of the e-mail to get which country the user is sending it from.
He claims not to be from Nigeria, why can’t he have the item sent to his own address?
He uses Robert Dallas in order to sound American.
Poor English, but some fraudsters are sound grammatically. Some of them even use poor English intentionally.
The use of multiple exclamation marks makes him sound so stupid grammatically. He’s trying to sound real by issuing warning to scammers.
Requesting to pay through Western Union which violates Ebay policies
10. Fake Charities And Non-Governmental Organisations
Criminals take advantage of your generosity by asking you for money. They present themselves as a legitimate charity most especially when they discovered you have a good track record of making donations to charities around the world.
They also take advantage of a disaster, war, or internal crisis in their domicile country. They don’t even need to reside in a particular country before they carry out their plans.
11. Twitter Phishing
Since phishing is an online method used by criminals to persuade you to either reveal your personal information or unleash virus unto your device, twitter too is one of their social media tools.
Here, you’re enticed to follow a link in order to get more 1,000 followers within minutes.
“Hey, follow this link if you want to get at least 1,000 followers NOW.”

Quadri’s Take:

First, you don’t really need artificial followers. Second, this kind of link is designed to hijack your twitter login details.

When your account is hijacked, the scammer gets total control over it, and he uses it to send phishing tweets to your followers.

Interestingly, some of the campaigners of twitter follower givers have below 500 or lesser.

So, if he’s doing “twitter follower bonaza”, why is he starving himself of what he has?

Don’t be desperate at getting followers on twitter, be natural. If your tweets are significantly having impart on the few followers you have, don’t worry, they’ll be the one retweeting you. By so doing, you’re getting popular, and more followers will be falling in love with you. It may take time particularly if you don’t tweet regularly.

 

12. Call-fraud alert
This is similar to Voice Phishing. Scammers pretend to be from your bank alerting you that a problem has been discovered in your bank account. The scammer could tell you that a certain amount has been withdrawn from your account.
Anxiously, you refute such withdrawal if you’re not the person.
What does your caller do next?
He asks for your account details so as to help you verify. In this kind of situation, you could gratefully hand over your account details to your caller. But at end he uses such details to steal your money.

  13. High profit, risk-free offer

Ben Carson says, “The most important developments in science, history, technology, and the arts came from taking risk.
 Life itself is a risk. So, if anyone tells you to invest N20,000 to get N100,000 within a month, you should be careful.
“Hey,
You can actually put an end to the madness of working with little return. Why not let your money work for you?
Our new system works like magic, the higher the money you put in, the higher your return.
Sign up here to learn more.”
The criminal behind this message intends to achieve two things:
To have your details
To dupe you.
14. Online job Scam that do not specifically tell you the task
Online pick “pocketers” can set up domain which could look like legitimate one. They tell you sweet words like:

  • “We guarantee you that you will earn $1500 in your first week by simple task of 5-10minutes.” 
  • “Unlimited online job positions.” 
  • “$25 sign up bonus” 
  • “Active job holders: 128,000 employees.” 
  • “You have to create a account with us to start and login to your member area, and do daily your jobs and you will be really great after using our service.”

Apart from the “grammatical scandals” they tell you that some people have been paid millions of dollars.
Do you really need any advice on this?
Quickly do these two analyses:
If 25 dollars is paid as a sign up bonus, does it means the sum of 3, 200,000 USD have been paid to current members doing nothing other than sign up?
Be wise!
Where is the money coming from- ghosts, charities, or just a give-away?
If you registered, they could unleash key-loggers unto your device thereby having access to every damn details of your social media account, banking account details and other personal data.
15. OLX Job Scam
OLX prides itself as the “next generation of free online classifieds.” It allows users to sell, and buy products, and place advertisements on its site.
People have told successful stories of how they either bought or sold products through OLX.
That’s good!
But not all job vacancies placed on the site are true. If you like to have first-hand information this is what you do.
Search for your desired job on the site and apply. Submit CV to at least five different companies. Before the day runs out, you’ll start getting interview invitations.
Sample: “Our company is a consulting firm and due to expansion in our branches, we need the services of versatile individuals to fill the available spaces.
Salary: N120, 000 monthly.”
 A genuine company will mention its name.
The ad and job descriptions will be specific.
The ad itself portrays unprofessionalism.
Check out what I got from one of them which are different messages, but from the same “veiled” company in the course of my research:
Pay special attention to the sender, composition, and the style of the invitations.
Samples of Scam OLX Job Interview Invitations
Sender: T-Link
“U have been shortlisted for an interview tomorrow Monday 11/8/14 at 205 Borno-way off Ladipo street before Total bustop Oyingbo, Lagos by 12.30pm”
Sender: TL E-INVITE
“You have been scheduled for oral interview with our management team, tomorrow Mon 11/08/14@205 Borno Way off Ladipo Str.Oyingbo,Lagos by 9am.”
Sender: INTERVIEW
“You’re shortlisted for a job recruitment/selection scheduled to hold on Tuesday 19/8/14 by 9:00am at 205,Borno-way,by Ladipo Str,Oyingbo,Lagos.”
 If that’s not enough, then attend this:
“You are hereby considered for text/job interview on Sat 16th Aug 2014 at the Trinity House, 84 Mushin-Itire Rd, Morgan B/Stop Mushin by 10:00am. Ref N0:920.”
The sender says you are invited for a “text”
Wouldn’t you rather honour such invitation?
How did they get attendees?
They may place ad for the position of a Content Writer, but don’t be surprised that you get to hear different stories entirely at the venue. At Borno way, Lagos ste, more than three discussants extolled the virtues of network marketing…plus health management conferences which could yield you minimum of N120, 000 per month.
The fourth speaker finally let the cat out of the bag. She said the job seekers would have to pay “a token:” The sum of N10, 500 for registration, and for them to have company operating license.
Also, the organizers of this type of fraudulent job recruitment are always boastful like:
“Our next trip will be Miami. And the good news is that the decision you made today will determine if you’ll be part of the entourage to that wonderful city.”
“You have to congratulate yourself today because you’ve found the right place that’s going to end poverty in your life.”
OLX isn’t to blame for any form of fraud in course of using content from its site because the terms of service (use) of the company is very clear.
You understand that OLX does not control, and it is not responsible for ads, directory information, business listings/information, messages between users,…and that using the website and the service, you may be exposed to content that is offensive, indecent, inaccurate, misleading, or otherwise objectionable. …you acknowledge and agree that OLX does not pre-screen or approve any content..”
Quadri’s Take:

The company has handcuffed you with its terms of service which you’re warned to carefully read. Because it may be difficult to pre-screen every adverts on its website, dubious adverts targeted at exploiting the public always find their way through.

16. Unsolicited gratitude message

A thank you e-mail or text message comes from a person, entity, or an organisation you’ve not transacted with. Apart from the grammatical flaws, you’ll also get a bonus link to click on.
“Hello,
Thank you for submitting your information.
Your application as been reviewed and you now qualify for this position.
New position Details Here .
Review the position, and let us know if you think its a fit.
Talk Soon.”
Facebook Phishing
“Scammers love Facebook because it provides them with a place to try out their scams in front of a huge audience.” Andy O’Donnell.
In what Andy describes as the most popular types of scams on Facebook,the security expert reveals five tricks used by the bad guys on the internet.
17. Facebook Friendship message aimed at hacking your account
The last couple of years have seen huge changes in the way we use social media for interaction, particularly facebook. A stranger, particularly a male posing as a beautiful young lady, wants to establish relationship with you.
Some of these scammers include facebook name like Glory, Binata, Vivian Richard, Sonia Kassala, Angela Love Murphy, Evelin Bemba, Stas Beresnev, Babra, Nancy, and other names they use temporarily.
I’m sure you must have seen something similar to this:
 “100002392877419@facebook.com
Hello’
My dear,how are you doing today also with your health and work,i am Miss Nancy contacting you for a strong relationship because i saw your profile that you matched mine and I decided to make you my only one as whom I can lay on his arms for an everlasting rest in life!plz if you are  interested i will like you to contact me through my private e-mail address bellow to enable me send you my photos and all about me.have a nice day bye for now.
nancydesmond699@rocketmail.com”
18 Fake Facebook Account Deactivation
“You’ve not updated your timeline lately, which has made your facebook account to be dormant. You’re advised to click on this link to refresh your account so as to avoid account deactivation.”
“You’ve not been to facebook for a few days, and a lot happened while you’re away. You messages will be deleted in a few days; to continue using your account kindly click here”.
Warning
Messages like these are designed to look like they come from facebook, but they aimed at getting your details…it’s a phishing scam.
19. Privacy settings trick
A message is sent to you claiming to be from facebook urging you to reset your private settings.
“Our team at facebook is making efforts to ensure that you’re highly protected. However, you have to play your own role by verifying these privacy settings of your account. Click Here to complete the process.”
Watch out:
This is a ploy to get your login details. No matter how professional the composition of the message is, make sure to verify it through the official facebook page of your account.
Instead of following the link, you can use Facebook’s “Report a problem” tab.
20. Shocking video trick
This is a sensational and shocking headlines used by scammers so that when you click to watch, it’s either you get a tricky link aimed at getting your account details, or unleashing virus on your device.

“Hey,
Have you seen the video of this popular artiste? It’s about how Mr. Clixuyt impregnated his five daughters.
This clip got leaked when he was having sex with one of them.
Click here to watch .”
What these cybercriminals do most of the time is that they use the names of popular celebs, hoping that you’re anxious to get the latest gist.
This is very popular on facebook considering its users.
21. Bonanza or promo scam.
You’re contacted either via custom-SMS congratulating you that you’re among the lucky winners in the latest promo of whatever product they chose. You’re then given an account number to pay into for delivery. But your money is gone if you paid.
This kind of fake promo was rampant lately which prompted nairaexchangerates.com to send security alert to its customers and followers on social media. This is an abridged version of the scam alert:
“Please beware of the messages circulating that you have won a Nokia or any big company Promo. Nokia is not doing any promo and whenever they do, they will advertise it and will never ask you to pay for parcel or tax. IT IS A SCAM (419). If you have received such a mail or message, please forward all details to admin@nairaexchangerates.com to enable us track them…”
Yahoo Mail Scam
22. Yahoo security scam alert creating fear that your e-mail account could be blocked
“Security Alert
           Title:                    Might be blocked
          From:         Yahoo service to you
 Your Yahoo! account has been compromised. You must update it immediately or your account will be closed.
Click here to update
Regards,
Yahoo! Member Services
********************************************************
The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material.
Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited.”
How to Detect Yahoo deactivation Scam Message
Check the sender of the message. It can’t just be “from Yahoo service to you”. For instance, when I dug the sender of this message I discovered that it emanated from “sapp.apiapi@gmail.com”.
So, you want to ask:
How could Gmail be alerting Yahoo! of an impending account blockage? Did you notice that? Isn’t just like Apple CEO carrying about samsung as his personal device?
Aside that, an authentic message will have below the email “this email was intended for mradb@gmail.com “and not the generic type The information transmitted is intended only for the person or entity to which it is addressed…”
But because it’d be time consuming for a scammer to start personalizing message meant for at least a million of addresses receivers across the world.
The bottom line is there will always be flaws in the composition of phishing email, and messages. And you can detect that through patience and if you have eyes for details.
23. Romance Scams
This is a love-interest scam. The person showing interest in you uploads another person’s photos (male or female depending on the targets).
24. Survey Scam
Survey for money has been around for some time now whereby you’re paid a certain amount for your opinion and time. A company needs your opinions which help it to make better products and improve sales.
Unfortunately, not all survey companies are authentic.
That being said, another way a scammer comes in is to set up a website priding itself as the archive of “real survey companies” that pay wonderfully well for your opinion, but you’re told to pay a certain amount ranging from $50 and above before you can have full access to register.
How to avoid survey scam
There are reasons why not to pay to register for surveys. No legitimate company will instruct you to pay before you start taking survey.
  • Don’t share your credit card information on any survey site. 
  • Watch out for survey sites that say something like, “Register with us today and make up to $120 per day.” Ignore them. 
  • Never register with sites that claim to give you access to a list of highest legitimate paid survey companies if you pay. 
  • If a survey site is trying to get more than required info about you, delete your account with such website.
25. Emotional scam
“You are been paid #30,000 to #90,000 monthly working in the bank or other industries, and when you put on your suit people look at you and say “wooow this man is a perfect gently man and he should be making good money since he works in a bank.
Do you know that #30,000 or #90,000 monthly is just #1,000 to #3,000 daily for 30 days?
Do you know you even work for 8 to 10 hours to earn the said #1,000 to #3,000 daily? Hmm! 8 to 10 hours work for that token?
That means they pay you #100 to #300 to work for complete one good hour, this is crazy i must say.
What if you are giving the chance to make #10,000 to #15,000 every blessed day just working for 2 hours alone daily, what will you do?
Now you have the chance to achieve that, just meet with me on the 16th of August 2014 and i will show you live training on how to do all this…. 1. Live trading on how to make between $20 to $50 daily trading binary.com
2. Live practical on how to make between #5,000 to #10,000 daily betting on virtual football using merrybet.com and nairabet.com
3. Step by Step training on how to start mini importation biz with as little as #12,000 capital and turn it to #25,000 every single month.
Yes this is the secret that made me # 2million within 25 days. To be a part of this GREAT NAIJA WEB SUMMIT Click the link below now to reserve your seat.
Note- Only 50 space available Click Here Now”.
This is what Jeremy Phisher calls Scam Messages That Prey on Your Emotions. This scammer is promising you N300,000 within a month if you made N10,000 per day whether you’re educated or not.
Shortcomings of the message:
No address, hidden Click through…it’s targeted at getting your email address and other contacts information about you so that he can establish you as possible contact in his future scam.
Don’t try to follow the “Click here” instructions. When it’s not click here, some of them use shortened URL. Steer clear!
He claims he makes N2 million less than 30 days. It’s to lure you to click.
Urgency, he says 50 spaces are available. That’s one of the tricks of phishing message-you’re not allowed to think twice.
26. Celebrities’ pictures encoded with virus
How crazy are you about your favourite celebs? Some of these pictures are rarely used in romance scam, but they could be used to “spit” malware into your device. This happens while downloading a picture that has been encoded with virus.
Some of them will try to entice you about a collection of nude pix of any popular other celebs that are known to have a seemingly sexy body.
I still don’t know why some people are crazy about nude pictures of celebs.

 27. Call-to-action trick

Another method they use is to lure you that you’ve completed a process you didn’t know of. Then you’re inspired to complete the process by following a link. E.g:
“Hey,
According to our records, Step 2  in the setup process is has been completed.
Follow the instructions below to finalize your account registration.
Click Here for Final Step to Complete Your Account Setup Now”
Thanks.
 28. Custom Impounded Car Scam
This is rampant in Nigeria, when supposedly custom impounded vehicles are put up for sale on facebook pages. 
The scammers prey on the prospective car buyers who are interested in getting extremely cheap vehicles. Such auction may never be found on the official site of the Nigeria Custom Service, but you either get this ad as spamming message on facebook, or fake website to mimic the custom’s. A mouth-watery prices are usually included which are aimed at spurring you to take action.
This is an abridged auction fraud gotten from facebook:
“Custom impounded cars for sales at cheaper and affordable price, interested buyers should please contact our zonal office or call 080….
ToyotaMatrix=N300, 000; Toyota Prado=N500,000; Toyota hiace Bus=N350,000
Toyota Avalon=N300,000; ToyotaCorolla=N300,000 Mazda=N 250,000
Honda Accord end of discussion =N350,000; Highlander=N450,000. Murano=N400,000, Pathfinder=N500,000; ML350=N500,000.”
You don’t need to be an auto dealer before you know that Murano isn’t as cheap as N400, 000 if isn’t a scrap considering the automotive policy of the federal government, which has led to increments in all the prices of goods imported into the Nigeria.
So, don’t be fooled.
  
 29. Scholarship Programme Scam
This is mostly targeted at students seeking admission, who are crazy about studying overseas.
One of them I stumbled upon reads thus:
Dear friend are u interested in studying in Germany?
Or doing ya business in Germany? Then this is for u … Learn German in less than a month just like this page to see full details… The new law in Germany now is that u must @least have good command of the German language before getting a visa to Germany ..be wise don’t miss this opportunity …pls this is no joke … Remember to share among ur friend perhaps interested . Thanks.”
The first question I ask is:
“How can somebody who is propagating scholarship finds it difficult to weave two simple sentences together without mistakes?
Also, the message emanated from a fake facebook page created for that purpose: https://m.facebook.com/deutscheshausife
30. Fake recharge card bonus
Someone tells you that it’s possible to get additional N1,600 if you loaded just N400. He then gives you a code to use if you really want to enjoy the goodies.
“Hello, MTN is at it again. Recharge 200 to get 1,000, 400 to get 2,000; load 750 to get 3750
I have been using it for days now, i am having 56,320 in my mtn account balance, follow this step to do yours, buy mtn card 200 or 400 or 750 or 1,500, and go to ur message & type this the card serial number*the card 12 digit pin*….”
Any attempt to follow the instruction of this kind of message will land your recharge card swapping to the scammer’s line.
The promo of any network services will either be on its website, or you get SMS from your provider. Even if you get SMS from your provider, verify it by calling the customer care line in order to be sure that such promo is real. Stay away from cheat, it always have its consequences.
31. Credit card scam
Credit card scam can take these forms: another person getting access to it through spyware; giving out your security code to a scammer; getting access to your PIN.
Also, a scammer can pose a domain name agent thereby tricking you to give your credit card details for payment purpose, but he uses such info to prey on you.
Protection: one of the best ways toprotect your credit card is to avoid sending your card details to someone you do not trust.
32. Domain name scam
The forms of this scam are:
Domain name registration scam: someone poses as a real agent asking you to send your credit card or debit card details so that he pays on your behalf while the money is charged directly from your account.
Bogus domain renewal notices from a company you’ve not registered with, hoping you go ahead to pay using your financial card.
How to avoid domain name scam

  1. Don’t be in a haste to login through the bogus link the scammer sends to you. 
  2. Use the dashboard of your real registrar. 
  3. Never give out your credit card details to a stranger irrespective of the persuasion.

Online Fraud Reporting
Unveiling the source of some phishing emails requires the technicalities of experts, some e-mail addresses you can forward such suspicious mail to are:

What of if it’s a transaction phishing e-mail from my bank?
 Don’t click on it no matter the “urgency tone” of the message. Report and forward the message right away to your bank.
If you ready clicked it.

  1. Run a deep scan on your system with a reliable anti-virus. 
  2. Reboot (don’t just restart) your device or system 
  3. Change the password of any contact you must have submitted to the fake site. 
  4. Contact your financial institution if the information you provided could be linked to your account number.

How to stay protected online

  1. Don’t’ be anxious to click on links in a suspicious e-mail, or any links sent through text messages. 
  2. Abide by the best 20 practices for mobile/online banking  
  3. Don’t deal with an unfamiliar firm. And if you have to, make sure you dig into the credentials of such company. 
  4. Don’t pay in advance for services. 
  5. Takeprecautionary measures against different kinds of frauds. Categories of fraud, according to Federal Bureau of Investigation, include:

  • Telemarketing,
  • Nigerian Letter,
  • Identity theft, 
  • Advance fee schemes among others.

Elements of fake e-mail message
It is very difficult for someone who knows little or nothing about fraud to say specifically the difference between the real one, and fake.
However, experts say things to look out for in such fraudulent e-mail are:

  • If it’s requesting for your personal information. 
  • If it’s generic, something like: “Hi,” “Hey” “Hello.” 
  • If it’s urgent…”click now before it expires,” “this is the only available slot available.” 
  • Fake links 
  • If it is mimicking the URL of a real website. Let’s assume that your real banks’s URL is www.fishbank.com, then a scammer may use something similar to that e.g www.fishsbank.com. So, this kind of URL is deceitful, and if care isn’t taken you may unknowingly enter your details into the fake site. 
  • Changing your reference is always difficult. Phishing Scam site and their cohorts make it difficult for you to unsubscribe. Even if you did, they still keep sending you such scam hoping that one of their tricks will get your fingers clicking.

One of the articles of Microsoft, identify fraudulent e-mail and phishing schemes, discusses other tricks of cybercriminals to get your details
Were you able to make it to the end of this article?
Here is what you do:
Share your phishing scam stories.
If you’re a security expert, share your expertise on how to prevent phishing scam.
Share it on your favourite social media.
Like Mobile Banking Watch Facebook Page to share your experiences concerning scam messages you got lately.

Topics