|
Phishing Is no Vacation: How to Avoid the Bait
We've all gotten those emails in our inbox. They seem official. They're (supposedly) coming from a company we trust. So when they start asking us to verify our personal information, it doesn't seem all that suspicious. Or does it?
As the Internet becomes a larger part of our daily lives, scammers are finding clever ways to gain our trust and our information. Fake emails, also known as spoof or phishing emails, are becoming increasingly common and can be tricky to spot. Phishing emails or phone calls come from crooks posing as legitimate businesses in an attempt to steal your identity. Generally, the email or caller will ask for your personal information or direct you to a Web site or login page that looks authentic but is not.
So, how can you determine what's legitimate and what could put you at risk? Esurance has some tips to keep you safe:
Check the return address.
Sometimes you can spot a scam before you even open the email. Scammers will often send emails claiming to be from legitimate companies; however, a good warning sign comes from the name in the "from" line. For example, if you receive an email from esurancecustomerservice@hotmail.com, or info@esurance.insurance.com you'd have reason to be suspicious. Valid Esurance email addresses always end in "esurance.com." (Although other words may come before "esurance," nothing should come between "esurance" and ".com.")
Don't give out personal information over email.
If you receive an email that asks for your credit card number, social security number, password, or other sensitive information, it's a good indication it's a spoof. Email is not a secure way of transmitting personal information. Companies that have your security in mind, like Esurance, will never ask for personal information through an unsolicited email.
Double-check phone numbers.
Emails containing fake customer service numbers are also becoming more common. If you receive an email asking you to call about your account, be sure to verify the number on the company's Web site or on a past billing statement before you call. Likewise, if you receive an unsolicited phone call asking you to verify your account information, tell the person you'll call them back using a phone number you know to be legitimate.
Proofread.
We may not have all gotten an "A" in grammar, but paying attention to spelling and sentence structure can be worth your while. Many spoof emails are translated from other languages, and sentences are often awkward or even nonsensical. Misspellings are also common because they help scammers avoid spam filters.
Don't open attachments from unknown sources.
No matter how appealing the offer may be, attachments from unknown sources can contain viruses or spyware. Signs of spyware can include increased pop-up advertisements, unwanted changes to your computer settings, and slower program performance. Spyware is more than just a nuisance, however. It also poses a threat to your security because it's made to collect personal information off your computer.
Report phishing/spoof emails.
If you come across an email that you're confident is a spoof or phishing attack, your first instinct may be to unsubscribe from the email list; however, unsubscribe links are actually a way for the scammers to find valid email addresses. It's best to delete the email and report it to both the
Federal Trade Commission (FTC) and the company that's being misrepresented. At Esurance, you can inform us by sending an email to customerservice@csr.esurance.com.
If you're still unsure whether an email is the real deal, the best thing to do is to call the company and ask. Likewise, if you know the correct URL for the company, you can simply type it into your Web browser rather than clicking on the email link. These small precautions can make all the difference when it comes to your security.
|
