The advent of COVID-19 made remote work far more palatable for many. Even though the virus no longer poses a global threat, people now find the concept of remote work much more acceptable and appealing. This situation has opened the doors for threat actors to impersonate false employers, and the deception usually begins with a simple text message.
A significant percentage of people list their employment information on valid job sites. They may indicate that they seek remote work and even add comments on their social media. Criminals specifically target these individuals, and they have become fairly sophisticated in their approach and successful in stealing people’s money.
Anatomy of a Task Scam
Whether solicited or unsolicited, the individual receives a text message offering the prospect of a lucrative remote work job. When pursued, the organisation presents itself as legitimate, complete with a well-designed website. The remote position often sounds attractive, with seemingly credible details. Even when lightly researched, it may still appear genuine.
The job typically begins well, with small payments made through platforms such as PayPal, cryptocurrency, or wire transfers. The duped individual usually feels confident that they have secured their dream remote job, until the “employer” starts highlighting problems in the work that require payments. These payments usually begin with small amounts and gradually increase over time.
If questioned about legitimacy, the “employer” often provides credentials that appear to have official approval from state or national government organisations. In reality, these documents are complete forgeries, and unless one possesses expert knowledge, it is difficult to determine their validity.
Many victims have fallen prey to these threat actors, often losing anything from thousands of pounds to their entire life savings. Attempts to reach out to authorities rarely succeed, as the perpetrators usually operate across multiple countries.
Protecting Yourself from Task Scams
Question and verify—then verify again. Even when initial research appears positive, continue to dig deeper into any remote work offering. These messages and emails may not come from who you think they are.
If you receive a link via text message or email, do not click on it. Instead, open a browser and search for the organisation’s official website. Check for online reports of misconduct by the organisation. If you are listed on job sites, review feedback from others who may previously have been exploited. If your bank contacts you about fraud, use the number printed on the back of your card to call their fraud department directly.
Never give out your personal identification details under any circumstances.
Remember, these threat actors operate professionally. They may employ technologies such as AI and review your social media profiles and job listing information. Their goal is to appear local, looking and sounding as though they live in the same area as the people they want to exploit.
“DaVinci Cybersecurity maintains up-to-date information on the latest methods cybercriminals use in their attacks. We work diligently to inform and educate as well as assist in ensuring that people are aware of the types attempts that are made to steal their proprietary data and their finances.”
– Sharon Knowles, CEO DaVinci Cybersecurity
Source:
