Thursday, September 22, 2011

Tips and Steps to Determine an E-mail 419 Scam (Part I)

So, now with a bit of knowledge on 419 Sob Story Scams and Spam, here are some tips and questions to ask yourself when dealing with an e-mail that you believe could potentially be a scam.


Quick Note: I decided to make the tips into three separate entries so that it is not one large chunk of text, even though it still probably is. The first part consists of the first set of tips, the second part contains the second set, and the third is one big tip that had a bit more fleshing out than the rest and overlaps other safety tips, though they will be discussed and mentioned more in detail in their respective topics.

- Did you find this e-mail not on your inbox but in your bulk or spam folder?
While scam e-mails can either be on your inbox (as most of mine have landed on), some e-mail providers might already recognize a scam e-mail and immediately place it in the spam folder. If you notice that the e-mail is retrieved from the spam folder, then it might be a strong indication that it is a scam, and coupling it with other procedures for verifying the authenticity of the e-mail, you can tell if you have or haven't been in a scam. However, do not assume ALL e-mails in the spam folder are always spam (as legitimate sites sometimes warn verification e-mails might fall into the trash bin at times) or that all scam e-mails are only retrieved from the spam folder. There are so many, and dozens land onto your inbox and never set foot into your spam folder until you press that button to delete and send to the trash bin.

- Does the online IP address match the location claimed to have been sent from?
If you're more versed with the Internet, there are a variety of ways on how to detect spam e-mails by seeing if the locations they have claimed match the IP region address that shows the exact location from where the e-mail had been sent from. If you've come across an e-mail that claims to be from the United Kingdom for example, and you find out that the IP directs it from Nigeria, the mismatched facts might be an diciator that it is a fraud. It is a lie? Unless the person is on "vacation" (but are they really?), the IP address will direct you into the first steps into seeing if this lie is the first of many others contained within that e-mail. Microsoft Outlook and other resources are able to show the properties function of the e-mails themselves to detect the IP addresses, and from some digging on Google, you are able to visit sites to input that IP address and detect the location. Other applications are also available online, as well as tutorials, and also on other good anti-419 fraud resource sites. While it is tough to generalize since these scams can originate from everywhere, the scams that most are familiar with originate from Nigeria or Russia but are most certainly not limited to these locations, yet if the IP directs you to a location such as Nigeria, where it is a common location for fraud and the location already (along with other indicators in the e-mail) is a lie, then you have most likely encountered a scam.

- Is this e-mail asking for personal information right off the bat?
But sir, we have just met! Wouldn't you find it odd for someone immediately e-mailing you asking you for your personal identity information, ranging from credit card to Social Security or Driver's License Number? That is the equivalent of a stranger walking up to you and asking for your credit card number. If the person is already asking for your information with little to no information about why and what for, then you ought to stop and think before you even dare to press that reply button. If you have already responded to an e-mail without thinking it was fishy yet they suddenly approach you asking for information, proceed with similar caution. Scams can range from the sob story and lotto ventures, but others can simply initiate conversations with, "Contact me for a possible venture" and after a few e-mails start by asking for info. Likewise, with other online dating and Internet shopping services, be wary of people attempting to start small talk and leading up to asking for personal information without a secure third party transaction that will protect your private information from them. Never give out your personal information to someone that you do not know nor anyone that you do not trust.

- Look for https: as part of the official links to any secured banking or transaction site.
Fradulent e-mails can look quite like the real thing but fall short when noticing a website's name does not contain the https: (which computes as keeping information secure when using login usernames and passwords and other personal infromation). Typical public sites contain http:, yet banking sites and other sites that are intended for transactions or the exchange of any personal information use https: (secured) to make sure that your information is protected. Inputing personal information on an http: site can put this information at risk to third-party persons and or is being inputed to a place that has not been verified as secure for transaction of exchange of information. And most likely than anything, this will indicate that you are either dealing with a scam or an underdeveloped website that could put your computer at risk of harm. If you come across a site like this, proceed with caution and think before you input information.

- Notice subtle differences.
Is there a word mispelled or strange grammar and syntax that you've never seen? There are dozens of fake banking and Facebook sites but sometimes, it's little things, such as the juxtaposition of the logos, an inconsistency of mispelled words or oddly-worded phrases that might make you wonder if you're on the real thing. It's important by then, before inputing any information, that you also take a lot at the web address bar and see if you're on the real Facebook.com or on Facerbookiez.com, which if it is is mimicking the header style and images of the site, is a strong indication of a fraudulent site and scam.

Especially when you're quickly typing out web addresses or sites, you may mispell a word or two and result in a different site like Facerbook . com or something mispelled that take you to a website that looks a lot like the real thing, but it's obviously a fake. Always take a moment to check and make sure, or also, it's handy to bookmark or have quick icon shortcuts already handy to avoid typing out the name and mispelling and redirecting. It also helps you keep away from other scamming sites that not only are scams but could also contain vicious forms of malware.

- Think about it. Are you receiving an e-mail from the Bank of America about your "account" when you only use Chase?
That is the strongest indication of a scam. Common sense is the best friend in this case, telling you that if you know right off the bat that the e-mail is claiming something that you know not to be true, such as not having a Bank of America account or having bought a lotto ticket or entered a contest, think before you even click that e-mail.


Continued in Part II.

No comments:

Post a Comment