by Emily Wu
Attorney, Federal Trade Commission
Let’s say you get an email about a charge to your credit card for something you aren’t expecting or don’t want. Your first instinct may be to immediately call the company or respond to the email and to stop the payment. Scammers know that, and are taking advantage of it in a new phishing scheme.
People tell us they’re getting emails that look like they’re from Norton, a company that sells antivirus and anti-malware software. (Tip: the emails are NOT from Norton.) The emails say you’ve been (or are about to be) charged for a Norton product — maybe an auto renewal or new order. If this is a mistake, the email says, you should call immediately. (Tip: don’t.)
If you call, you’ll be connected to a scammer. Some scammers might ask you to “verify” your credit card information, while others might say they need your password to remote into your computer so they can remove the Norton program. But if you let them, they could install malware, block you from getting to your own files, and sell you worthless services.
If you get an email or text you’re not sure about:
- Don’t click on any links.
- Don’t use the number in the email or text. If you want to call the company that supposedly sent the message, look up their phone number online.
Remember:
- Never give your password to a stranger on the phone, even if they claim to be from a company you recognize.
- If you did give out your password, change it right away, update your computer’s security software, run a scan, and delete anything it identifies as a problem.
- Make your passwords long, strong, and complex.
- Don’t give your bank account, credit card, or personal information over the phone to someone who contacts you out of the blue.
And if you do get a fake email like this, help your community by reporting it to the FTC at ReportFraud.ftc.gov.