Phishing attacks are fraudulent attempts to obtain sensitive information by masquerading as trustworthy entities, and they have evolved beyond emails to include text messages (a tactic known as “smishing”) and phone calls (“vishing”). These methods exploit the personal nature of our communication devices, making them particularly effective for scammers.

Recognizing Phishing Attempts

Common Indicators:

• Unsolicited Contact: Receiving unexpected messages or calls claiming to be from reputable organizations, such as banks or government agencies.
• Urgent or Threatening Language: Messages that pressure you to act immediately, often warning of severe consequences if you don’t comply.
• Requests for Personal Information: Any solicitation for sensitive data, including Social Security numbers, passwords, or financial details.
• Suspicious Links or Attachments: Messages containing links or files, especially from unknown sources, should be approached with caution.

Recent Trends in Phishing Scams

Recent reports highlight a surge in sophisticated phishing scams:

• Holiday Shopping Scams: During the holiday season, there has been an increase in scams targeting shoppers through their mobile phones. These scams include random calls with AI generated pre-recorded messages and personalized texts using victims’ names and numbers. Scammers impersonate bank agents, manipulating victims into providing sensitive details like PINs and full banking credentials. The Sun
• ‘Smishing’ Attacks: The United States Postal Service has warned customers about “smishing” attacks during the holiday season. These fraudulent text messages attempt to steal personal information by luring victims into providing it. USPS emphasizes that they will never send unsolicited texts with links and advises customers to request tracking updates directly through their official channels. New York Post
• Voice Cloning Scams: Scammers are using AI generated deepfakes and voice cloning to impersonate family members and extract money. The FBI and cybersecurity experts recommend creating secret passphrases within families to validate identities during suspicious interactions. These passphrases should be unique and not easily associated with personal information available online. Wired

Steps to Take if Targeted

1. Do Not Engage: Avoid responding to unsolicited messages or calls. Do not click on links, download attachments, or provide personal information.
2. Verify the Source: Contact the organization directly using official channels to confirm the legitimacy of the communication. Do not use contact information provided in the suspicious message.
3. Report the Incident:
   • Text Messages: Forward the message to SPAM (7726) to report it. Consumer Advice
   • Phone Calls: Report unsolicited calls to the Federal Trade Commission (FTC) at ReportFraud.ftc.gov.
4. Monitor Financial Accounts: Regularly review bank statements and credit reports for unauthorized activity.
5. Update Security Measures:
   • Passwords: Change passwords for affected accounts, ensuring they are strong and unique.
   • Enable Two-Factor Authentication (2FA): Activate 2FA on all accounts that offer it, adding an extra layer of security. 1st Source Bank
6. Educate Yourself and Others: Stay informed about common phishing tactics and share this knowledge with friends and family to enhance collective awareness.

Preventative Measures

• Be Skeptical of Unsolicited Communications: Legitimate organizations rarely request sensitive information via text or phone.
• Use Security Software: Install and maintain reputable antivirus and anti-malware programs on your devices.
• Regularly Update Devices: Keep operating systems and applications up to date to protect against vulnerabilities.
• Create Family Passphrases: Establish secret passphrases with family members to verify identities during unexpected or suspicious communications. Wired

By remaining vigilant and adopting these practices, you can significantly reduce the risk of falling victim to phishing attacks and protect your personal information from cybercriminals.