The red flags that tell you an email, call, or text is a scam

Modern-day scammers utilize the emails, phone calls, and text messages to initiate fraud. In the Philippines, there are different types of scams that make use of these platforms to trick people into giving sensitive information. Scammers also utilize phishing tactics and pretend to be a relative based abroad or mimic trusted institutions like banks and government agencies to gain access to your account passwords and credentials.

Here are the red flags that should arouse your suspicion in digital platforms like email, social media, and websites:

• Signs of urgency- The sender’s message shows signs of urgency that you should immediately act upon, usually prompting a speedy response from unwitting targets. An example of this are ultimatums which can read like, “Warning! We detected some suspicious activity in your account. To prevent permanent deactivation, please reply within 24 hours.”

• Sketchy URLs and hyperlinks- Links purport to be legitimate but can actually be links to malicious software. Hover the cursor over any suspicious links to see its address. Fraudulent activities use unfamiliar website addresses that often have a series of numbers and/or letters.

• Suspicious sender information- No visible or recognizable signs of legitimacy that authenticate the sender’s identity, such as email signatures or contact information.

• Inconsistencies in branding- These can give away a scammer because no matter how sophisticated their spoofing tactics may be, there are fine details that don’t escape the critical eye. An example of this can be pop-up windows claiming to be from your computer or anti-virus software.

• Grammatical or typographical errors- Mistakes in spelling and punctuation, poor syntax, or faulty sentence construction are also dead giveaways of a scam waiting to happen. An example of this can read like, “Warning! We detacted some suspicious activities on your account and to prevent it be Permanent deactivated…. please replies on or before 24 hours.”

• Clickbait headlines- Titles on social media platforms, banner ads, or articles that seem sensational or out of this world are often scams that lead to malware and other viruses.

Fraud in the Philippines is not only limited to phishing online. Smishing activities, which basically use the same fraud tactics as phishing but are done via SMS, also exist. Here are the tell-tale signs that a text message is a scam:

• Suspicious numbers- The sender’s mobile phone number looks suspicious, as standard phone numbers from trusted institutions and companies often use unique numbers and identifiers.

• Requiring you to perform an action- The text message usually tells you that something is wrong with your account, and resolving the issue will require some action done on your end. The message may include a phone number to call, a link to a website, an app download, or an email address to contact.

• Asking for personal information- The sender asks you to provide personal information, such as your name, address, account number, or password. Always remember that a trusted company or organization, such as banks, government offices, or financial institutions, will never request for such sensitive information over text.

Another important thing to note with phishing and smishing expeditions is that the more sophisticated scammers will use automation to their advantage, which means that generic-looking messages are templated and blasted to hundreds, if not thousands, of emails and phone numbers. If effective storytelling is not their forte, casting a wide net just adds to their chances for success.

Phone call scams, which aren’t as pervasive as they used to be, are still used by fraudsters. Given that it requires extra effort on the scammer’s end, it is often more targeted and premeditated compared to email and text scams. Using the same precautionary measures are just as effective in thwarting budol-budol and dugo-dugo modi operandi.

Protecting yourself from fraud

Metrobank, in cooperation with other banks, companies, and organizations, launched Scam Proof–an educational initiative that aims to create a safer online environment for Filipinos by spreading awareness on financial fraud and how to prevent it.

Apart from this platform, you are also encouraged to visit the Fight Fraud page, which provides helpful information about the different types of fraud and proactive steps that you can take to protect your hard-earned money from fraudsters and scammers.

Here are some ways to protect yourself from phishing and other forms of scams:

• Protect your computer, smartphone, or tablet from cybersecurity threats by using and updating security software. Regularly checked app permission and restrict sensitive information access to contacts, calls, messages, location, files and camera unless you trust it.

• Protect your online accounts by using multi-factor authentication, which offers additional layers of security to ensure that your email, social media, and bank accounts are not easily compromised by hackers and scammers.

• Protect your files by regularly scheduling a day to back up your data on an external hard drive or cloud storage, in case you lose access to any of your devices to a fraudster.

• Limit the personal information you are sharing on social media as this may be used for spear phishing which targets their victim using personalized scams.

• Protect yourself by not replying to unverified sender or suspicious message. Never click on any link, install or download any app or unknown attachments, and do not provide sensitive information. If necessary, block the number; mark the email address as spam that tries to scam you.

• Practice safe browsing; always start your online banking session by typing in the official website instead of clicking any link that redirects you. A phishing site address may be similar to an official website with subtle difference which is hardly noticeable. If mobile application is available, download it from official mobile app store and use it to monitor your transactions.

Among other things, sharpening your awareness and presence of mind when caught in the face of fraud is key to not falling victim. Once you’re targeted, don’t hesitate to report the scammer’s phone number, email address, or online accounts to the respective authorities.

For more information on fraud and cybersecurity habits and practices, feel free to visit Scamproof.ph or send an email to info@scamproof.ph.