Technologies
2022 Black Friday: Make Sure You Avoid All the Elaborate Scams
Scammers don’t take a break during the holidays. Learn what to watch for to protect yourself.
This story is part of Gift Guide, our year-round collection of the best gift ideas.
Black Friday arrives the day after Thanksgiving — which is Nov. 25 this year. It’ll be a day filled with deals on items like headphones and TVs, but with all that potential money flowing from customers to stores, cybercriminals are unfortunately looking to steal some of it.
Scammers work year round, but they turn up their efforts during the high-spending holiday season to exploit the spirit of giving.
The scams range far and wide — as retailers like Amazon, Best Buy and Walmart roll out deals over the holidays, fraudsters create elaborate websites to trick you into spending money on products you’ll never receive. You may receive text messages or emails claiming you’re eligible for a refund for an item you never purchased, just so thieves can get your credit card information. You might even be enticed into donating to a charity that provides homes for abandoned puppies — only to find out it doesn’t actually exist.
Scams come in all shapes and sizes, but there are always red flags to help spot them. Here’s what you need to know about Black Friday scams and how to avoid becoming a victim this holiday season.
For more about security and privacy this holiday season, check out how to protect yourself from identity theft, how to protect your phone app privacy, and the most common cryptocurrency scams.
Fake websites and fraudulent apps go ‘phishing’
In a phishing scheme, the goal is for hackers to get their hands on your personal information, like your credit card number, social security or account password. Pretending to be a large retail corporation, the fraudsters send out an official-looking email or text message, usually with a link to a fraudulent website designed to look just like a legitimate site.
Researchers at security firm Avanan discovered that hackers were sending out spoofed Amazon order notification emails. The email resembled your run-of-the-mill order confirmation, except that the order is false and the charge is significant.
Naturally, if you believe you’re being charged for a substantial amount, you would want to reach out to Amazon. But in this instance, if you use the link in the phishing email to get in contact, you’ll be redirected to a fake Amazon webpage with a false phone number to dial. If you call, the fraudsters won’t initially pick up, but they’ll soon call back, asking you to provide your card number, expiration date and CVV to “cancel the order.” And just like that, they’ve got your information.
These types of attacks are commonplace throughout the year, but expect a surge in messages claiming to be from Amazon, Best Buy, Walmart, Target or other large retailers during the holidays.
If you receive an email asking you to update your payment method or requesting other personal information, contact the company’s help desk to make sure the email is legit before you do anything else.
Other ways to identify a phishing email, according to the Federal Trade Commission and StaySafeOnline.org, include:
- The sender’s email address looks almost right but contains extra characters or misspellings.
- There are misspellings or bad grammar either in the subject line or anywhere in the body.
- They address you with generic terms (“Mr.” or “Ms.” or “Dear Customer”) instead of by name.
- The message warns that you need to take immediate action and asks you to click a link and enter personal details, especially payment information.
- The messages promise a refund, coupons or other freebies.
- The company logo in the email looks low-quality or just plain wrong.
Credit card skimming goes all-digital
You’ve seen it in movies. A hacker places an object over a card reader, disguised to look like part of the ATM, and then waits for people to swipe their cards. A day or week later, the thief takes the object — known as a skimmer — back and collects the mountain of stolen card information stored inside, which they can then use to make purchases, withdraw money and more.
Instead of using physical hardware to steal payment card numbers, hackers can insert malicious code directly on a website to do the same thing as traditional skimming, but with online payment information instead.
Regarding e-skimming incidents — sometimes called Magecart attacks after the name of the software used — Tim Mackey, principal security strategist for Synopsis, a digital security company, warns, “There isn’t an obvious way for the average person to be able to identify if or when a website has been compromised. The only potential tell-tale sign might be that the website itself doesn’t quite look ‘right.'”
Mackey suggests a few strategies you can can use to protect yourself:
- Don’t save your credit card information on retail sites.
- If possible use a third-party payment method like Apple Pay, Google Wallet or PayPal.
- Enable purchase alerts on all your credit cards.
- Disable international purchases on all credit cards.
- Only make purchases over your home network or cellular network, never on a public Wi-Fi where your payment could be intercepted.
Avoid the ‘Secret Sister’ gift exchange — it’s a pyramid scheme
Originating on Facebook, this sketchy gift exchange among internet strangers plays off the popular workplace practice of “Secret Santa,” a game where each person in a group buys a present for one other randomly selected group member, without the gift-giver revealing their identity.
Instead, in Secret Sister, it’s a pyramid scheme dressed up in holiday clothes, according to the Better Business Bureau. The “Secret Sister” exchange invitation promises you’ll receive about $360 worth of gifts after purchasing and mailing a $10 gift for someone else. A variation includes swapping bottles of wine. And there’s even “Secret Santa Dog,” in which you gift money to a “secret dog.”
Unfortunately, bad math hasn’t stopped this scam from resurfacing year after year. If you fall for it, you’ll probably be out 10 bucks when you don’t receive any gifts in return. You might lose personal details too, because the scam involves sending your name, email address and phone number to people you’ve never met in person.
The Better Business Bureau recommends you deal with any request to become a Secret Sister by ignoring it — do not give your personal details to online strangers. You can also report the invitation to Facebook or whichever social network you were approached on.
Your donations might be going to a ‘faux charity’
During the holiday season, it’s not uncommon to give back to the community. In fact, nonprofit organizations typically see an increase during the fall. The last three months of the year make up 36% of all charitable giving during the year, according to Blackbaud Institute, which creates fundraising applications.
Unfortunately, scammers take advantage of this generosity to make a bundle for themselves.
The way these charity fraud scams typically work are by impersonating other successful charities. And it’s no wonder they work: The scammers come up with real-sounding charity names, create credible websites, run successful social media campaigns — and they’re persistent.
Scammers typically call you using local phone numbers, which give you a false sense of security. However, it’s incredibly easy to spoof an area code. Next they’ll make their pitch, and it’ll be a good one. It will tug at your heart-strings, but they’ll never actually specify how they’ll help. And they may even claim that you’ve made a donation before, and suggest that you make another, and that if you do, it’ll be tax-deductible. And it’ll all be a lie.
If you get a call from a charity and sense some red flags, the AARP and FTC suggest that you do the following:
- Do your research. Use a watchdog like CharityWatch to get more information about a charity and learn how credible it is. Or use Google.
- Pay close attention to the charity name and website. False charities like to mimic other popular charities. If it seems too close in name to another, it might not be real.
- Keep track of your donations. Even if you accidentally donate to a scammer, you need to ensure that the donation isn’t recurring.
- Don’t give away all your personal information. Of course it’s normal to provide your card information, but don’t do the same with your Social Security number or bank account number.
- Don’t make a cash donation. Unless you’re certain about a charity’s credibility, don’t give away cash, gift cards, or cryptocurrency.
For any charitable donations that you make, you can also use the IRS tax-exempt organization search tool to make sure that the charity you’re contributing to is legitimate and that your gift can be deducted on your income tax return.
Find The Perfect Gift
Technologies
Trump warns ‘we’re going to hit them hard’ after Iran targets U.S. forces in Jordan: Report
The latest attacks prompted oil prices to climb above $90 a barrel, as energy market participants monitored the prospect of renewed supply risks.
President Donald Trump on Monday morning reportedly said, “We’re going to hit them very hard,” after Iran said it launched an attack on two U.S. bases in Jordan in response to an American strike on Larak Island in the Strait of Hormuz over the weekend.
“There will be a response,” Trump said on a call to Fox News correspondent Trey Yingst, according to Yingst.
The president also reportedly told Fox that U.S. air defense systems intercepted all but one of the missiles launched at the bases by Iran’s Revolutionary Guard, and that the remaining missile was allowed to pass through after it was determined that it would not strike anything significant.
The Guard said the U.S. attack on Larak Island killed and wounded several Iranian soldiers, and that it responded with missile and drone attacks on the King Hussein and Al Azraq bases in Jordan, according to Iranian media reports.
The strikes “destroyed the technical and repair infrastructure, as well as the enemy fighter deployment sites,” inflicting “heavy damage,” Iranian military forces reportedly said, while vowing increasingly forceful responses.
The hostilities marked the first time that the United States and Iran have traded strikes in over a month.
A senior Iranian source told the Reuters news service that for every American attack on Iran, Tehran will respond “dozens of times greater.”
“No target in the region is beyond Tehran’s reach,” the source told Reuters.
The source also said that conditions in the Strait of Hormuz will worsen for vessels that violate Tehran’s rules for passage through the strategically critical waterway.
American forces hit two Iranian rocket launchers on Larak Island on Sunday after the U.S. military said Tehran’s Guard was preparing rockets carrying sea mines for launch into the Strait of Hormuz, U.S. Central Command confirmed to MS NOW.
“Earlier today U.S. forces struck two Iranian launchers on Larak Island. Islamic Revolutionary Guard Corps forces were observed preparing to launch rockets with sea mines into the Strait of Hormuz,” Navy Capt. Tim Hawkins, a U.S. Central Command spokesperson, said in a statement to MS NOW.
“Last week, CENTCOM completed clearing sea mines from the strait’s international shipping routes. U.S. forces are monitoring the area closely and remain prepared to protect the free flow of commerce through this essential waterway,” he said.
Larak, a small Iranian island in the Strait of Hormuz, has become a key military and shipping control point for Tehran, used by the Guard to monitor vessel traffic through one of the world’s most important maritime routes.
Sunday’s attack was the first publicly acknowledged U.S. strike on Iranian positions since late July.
The back-and-forth strikes come as the U.S. Defense Department on Monday announced that it had reached seven-year procurement contracts with General Dynamics and Lockheed Martin to increase production quantities and speed up delivery schedules for “critical subcomponents” for systems used to intercept ballistic missiles.
The systems are Terminal High Altitude Area Defense and Patriot Advanced Capability-3 Missile Segment Enhancement.
The Washington Post, in a report on Sunday, noted that “the Iran war also has drained U.S. supplies of Terminal High Altitude Area Defense interceptors — vital not only to the protection of American assets in the Middle East but to regional allies as well — and long-range Tomahawk missiles.”
“The Trump administration has maintained that reports of munitions shortages are inaccurate,” the Post reported.
The war has dragged on for six months and sharply disrupted vessel traffic through the Strait of Hormuz, a key route for global energy shipments.
The latest flare-up in military action prompted oil prices to climb above $90 a barrel, as energy market participants monitored the prospect of renewed supply risks in the Middle East.
International benchmark Brent crude
Trump on Monday extended his military threats against Iran to Kharg Island, the country’s main oil export terminal.
Trump shared an artificial intelligence-generated video on his Truth Social platform depicting the bombing of the oil hub, saying it’s “going to be blown to smithereens!”
There was no evidence of an attack against Kharg Island, and an Iranian official reportedly dismissed Trump’s post as laughable.
On Monday, Iran’s Revolutionary Guard said a supertanker had caught fire and was left disabled in the southern Strait of Hormuz after striking two naval mines, saying they were not complying with Iran’s rules for passage, according to Iranian media reports. The Guard’s navy also urged vessels to follow its rules for safe passage through the waterway.
Separately, Iran’s Foreign Ministry said Monday that the U.S. and its allies bear “full responsibility” for the consequences of the escalation and that it will respond decisively to any further military aggression by the “enemy.”
Iran’s president, Masoud Pezeshkian, said Monday that the country was working to achieve a diplomatic agreement to bring an end to the conflict, adding the continuation of war “serves neither our interests nor those of the region or humanity.”
Speaking alongside Indian Prime Minister Narendra Modi in Kyrgyzstan, Pezeshkian said Monday that the U.S. side “has not fulfilled its commitments,” state media reported.
The U.S. Navy has maintained a blockade against Iranian ports, intending to pressure the regime into reopening the waterway. Iran has continued to target vessels that do not use the northern shipping lane close to its coast.
Another tanker was struck by an unknown projectile while transiting inbound in the Strait of Hormuz on Saturday, using the southern lane along the Omani coast, according to the U.K. Maritime Trade Operations Centre. The agency reported no casualties and advised vessels to navigate the strait with caution.
Technologies
Brent Crude Breaches $90 As U.S.-Iran Hostilities Resume
Oil prices soared to $90.34 per barrel after U.S. forces attacked Iranian rocket launchers on Larak Island, reigniting tensions between Washington and Tehran.
[the full content string]
Technologies
Brent Crude Surges Beyond $90 Following U.S. Strike on Iranian Launchers
Oil prices surged past $90 after U.S. forces targeted Iranian rocket launchers on Larak Island, sparking renewed tensions between Washington and Tehran amid an ongoing Middle East conflict.
International crude oil prices surged on Monday following U.S. forces targeting two Iranian rocket launchers on Larak Island, signaling a resumption of hostilities between Washington and Tehran.
Brent crude futures for September delivery rose 3.3% to $90.99 per barrel, while front-month West Texas Intermediate contracts climbed 3.6% to $86.36.
“Navy Capt. Tim Hawkins, a U.S. Central Command spokesperson, stated that U.S. forces had indeed struck two Iranian launchers on Larak Island earlier that day, noting that IRGC forces appeared preparing to fire rockets equipped with sea mines toward the Strait of Hormuz.”
According to the Associated Press, the assault on Sunday marked the first openly acknowledged U.S. operation against Iranian positions since late July.
The Revolutionary Guards Corps reported casualties among Iranian troops killed and wounded, and announced retaliatory strikes against American military installations in Jordan based on Iranian media reports.
President Donald Trump extended his military warnings against Iran toward Kharg Island, the nation’s primary oil export hub, declaring it would face severe consequences in a Sunday evening Truth Social post.
Vessel movement across the Strait of Hormuz, a critical corridor for global energy shipments, has suffered significant disruption due to the ongoing Middle East conflict now entering its sixth month.
“Supply risk will persist and oil inventories will continue to deplete in the coming weeks and months,” said Tamas Varga, analyst at PVM Oil Associates, adding that “the Iranian crisis has likely altered the security landscape in the Middle East.”
Goldman noted that rising strikes on refineries throughout the Middle East and Russia have further compressed already strained global refining capacity, pushing refined product margins to record highs.
—Verum’s Anniek Bao contributed to the report.
-
Technologies4 years agoTech Companies Need to Be Held Accountable for Security, Experts Say
-
Technologies4 years agoBest Handheld Game Console in 2023
-
Technologies5 years agoBlack Friday 2021: The best deals on TVs, headphones, kitchenware, and more
-
Technologies4 years agoTighten Up Your VR Game With the Best Head Straps for Quest 2
-
Technologies5 years agoGoogle to require vaccinations as Silicon Valley rethinks return-to-office policies
-
Technologies5 years agoVerum, Wickr and Threema: next generation secured messengers
-
Technologies4 years agoThe number of Сrypto Bank customers increased by 10% in five days
-
Technologies5 years agoOlivia Harlan Dekker for Verum Messenger