[techtalk] Email – 6 Ways to Detect Email Scams (like a Gift Card request)

HANNING Darci C * SLO Darci.HANNING at slo.oregon.gov
Tue Aug 31 15:01:29 PDT 2021


Welcome to the latest issue of Tech-Talk!
Don't be fooled by spammers

[https://files.constantcontact.com/ee1208b4001/470df2da-b8fb-4b32-95fb-8f6331e9910d.png]



This Week's Topic: EMAIL

1. ARTICLE & VIDEO ... 6 Ways to Detect Email Scams (like a Gift Card request)
2. COMMUNICATING ... It's never too late...
3. LEADERSHIP ... Blame the process, not the person
4. WEBINARS ...
·     Sep 15: [COMM.] Write Professionally to Convince and Be Understood
·     Sep 29: [WEBSITES] HotJar, a Free Tool to Analyze Website Traffic

Register for Webinars<https://r20.rs6.net/tn.jsp?f=001gqPzY9BIBg1zIAzoLnEelp-CVJvgWM_u-pLbypdDkyFuYMpeK8P4mhnzw_EPFL7P564kikI8aUl4rF_a--KLhWzgqDEHwZF8ukswDtgSCqsb1HxVtC-BBJmxQXNKUPNdV-I3AWh6XFnOL5nqYjHJqnUWOitpF-2U&c=1yWuWyJdl-28IJlsaMeTXiDywf5g-J5M6lNo27fPPpn7Ia0U5uiWNw==&ch=Npc7FnkjUWQ2yNDUck6Q_iCb3QhbwPH5duGWWMEm8l74KLMt7HeCng==>



[reading]<https://r20.rs6.net/tn.jsp?f=001gqPzY9BIBg1zIAzoLnEelp-CVJvgWM_u-pLbypdDkyFuYMpeK8P4mvx8NY9a7BelbNr9H2surpzOurWoqeE8EqzsrVADb1nOPa4_nUdInSaEvdXktI3R-jvxPAsgoI07O6i_JE1BrYPZbtA9zY2eA5kbIZE5trd9YJcGLa86NjAgM6NnwDA5RE-vFkGo9RSa&c=1yWuWyJdl-28IJlsaMeTXiDywf5g-J5M6lNo27fPPpn7Ia0U5uiWNw==&ch=Npc7FnkjUWQ2yNDUck6Q_iCb3QhbwPH5duGWWMEm8l74KLMt7HeCng==>



Photo by Stephane YAICH<https://r20.rs6.net/tn.jsp?f=001gqPzY9BIBg1zIAzoLnEelp-CVJvgWM_u-pLbypdDkyFuYMpeK8P4mvx8NY9a7Bel1qW5V8PjA4J4g7EKFR9FpAKPCi6k_sIKguBDTTEtGwJ5Bjw9gpXDjR3u4HN1azHS84hi3QFcwSCzOLJtD1TJcaeAOHr_FewcE3PCPO4LxsRyM_fACLmxAGl99IujRt9UJTJKn7VG4eOSO1306gXBny-Jk_IUh4tNvYTDFp8qKj5klUa3WPEyBnU44sVIrtr0UaFcAcL3aJk=&c=1yWuWyJdl-28IJlsaMeTXiDywf5g-J5M6lNo27fPPpn7Ia0U5uiWNw==&ch=Npc7FnkjUWQ2yNDUck6Q_iCb3QhbwPH5duGWWMEm8l74KLMt7HeCng==> on Unsplash<https://r20.rs6.net/tn.jsp?f=001gqPzY9BIBg1zIAzoLnEelp-CVJvgWM_u-pLbypdDkyFuYMpeK8P4mvx8NY9a7Bel_K8wHIQqFqTdP-dxfyZXnB0HdB9BS3p9fFk7JxzKaHxQKW5uJqVG2B-j7LfGN5AvDSlkyigYWg-uGCvSB2UUEZ1siyO_eJjJaJzWiCI5LTxDCiWOLHm3lqcvwC83K53gxqaBoY3rio3uHgqYVFnUK5GpI2OWl6Y9K5IxNoym05ZTpBlaFc8lDNhfMVsyeM2BIGelX4PacNcWRUxtbq6YCg==&c=1yWuWyJdl-28IJlsaMeTXiDywf5g-J5M6lNo27fPPpn7Ia0U5uiWNw==&ch=Npc7FnkjUWQ2yNDUck6Q_iCb3QhbwPH5duGWWMEm8l74KLMt7HeCng==>



[https://files.constantcontact.com/ee1208b4001/e25f6bcf-26a8-4e59-91f2-cc248962042d.png]<https://r20.rs6.net/tn.jsp?f=001gqPzY9BIBg1zIAzoLnEelp-CVJvgWM_u-pLbypdDkyFuYMpeK8P4mtCtEA1eAzNXDWfsQ-84Nq457etdD21cy1Gm6vaLmC0u1xLnoFsIjSPSlY29SR8FaQyIjixH10u2gfMPcbCZ_X_eB4DNwSJtkVdnl1NlCbXt&c=1yWuWyJdl-28IJlsaMeTXiDywf5g-J5M6lNo27fPPpn7Ia0U5uiWNw==&ch=Npc7FnkjUWQ2yNDUck6Q_iCb3QhbwPH5duGWWMEm8l74KLMt7HeCng==>



6 Ways to Detect Email Scams (like a Gift Card request)
Novice

It happened again! A colleague received an email from a friend asking for help. When she read it she thought it was a bit fishy; there were some red flags. But the note was from her friend (or so she assumed). Of course, she wanted to help!

If you received this, what would you do?

From: Kristin Chin (kchiin at gmail.com<mailto:kchiin at gmail.com>)
To: Rachael Hoffman

Good to hear from you! I hope things are getting better for you and trust you're staying safe, sorry for bothering you, I need to get a gift card (Apple gift card or Google play) for a family friend (she's an breast cancer patient). It's her birthday but I can't do this because currently I'm traveling for a friend's funeral who lost her life to Covid I tried purchasing it online but unfortunately no luck with that, can you get it from any store around you? I'll pay back as soon as possible.

Kindly let me know if you can handle this, so I can tell you the amount and how to get it to me.

Thanks,
Kristin

(Please email me back, the cell phone speaker is bad)

[scam]



Unfortunately, these types of emails (pretending to be from friends) are spreading like wildfire, especially asking to purchase gift cards.

My colleague was going to respond to the email request, but her inner voice had doubts... with very good reasons!

Spammers try to trick you to take a specific action, click on a link, call a number. Some can be harmful. For instance, if they contain attachments, that when downloaded, installs malware (software that's meant to do bad things to your computer). Other times they are just irritating.

But knowing how to recognize the legit from the bogus is important. You don't want to be another victim.

Let's take a look at some of the red flags to recognize email (or phone) scams.



Clues to Spot Scams

Before we jump into the list, let's break apart the email example above and pinpoint the red flags that told us it was from a spammer.

·     At first glance, it appeared that it came from her friend's email address. But upon a closer look, we noticed that the name in the email address had two "i's" where it should have been one, kchiin at gmail.com<mailto:kchiin at gmail.com>.

·     There was a request to purchase a gift card. Chances are, whenever someone asks you to purchase a gift card, it's usually tied to a scam. See specific things to watch out for in these types of hoaxes from the FTC(Federal Trade Commission) here, https://www.consumer.ftc.gov/articles/gift-card-scams<https://r20.rs6.net/tn.jsp?f=001gqPzY9BIBg1zIAzoLnEelp-CVJvgWM_u-pLbypdDkyFuYMpeK8P4mvx8NY9a7BelWSTlJLLImjSoOx7Y14lqI1ttLq8RL1h741PAzX5lMs7_lCK0a-zUk7u87e0vGX5ImwbckM-6-CPUAh4s9DOUvvt2Ge8FOUhbWjwfcuduILrpPMmw3vac-Y00i8txSVwr&c=1yWuWyJdl-28IJlsaMeTXiDywf5g-J5M6lNo27fPPpn7Ia0U5uiWNw==&ch=Npc7FnkjUWQ2yNDUck6Q_iCb3QhbwPH5duGWWMEm8l74KLMt7HeCng==>

·     The email sender tried to sway the reader with an emotional personal plea using sickness and a funeral to gain sympathy.

·     Finally, the email recipient was asked not to call the sender, only to reply to the email. Of course, if she had called her friend, the truth would have been discovered.



Six (6) Signs an Email Most Likely is Spam

Scammers use techniques to try and fool you. They may send emails that appear to be from your bank requesting information, from your utility company telling you your account will be turned off if you don't comply or disguised as a friend that needs help.

How can you tell if it is legitimate? Pay attention to these telltale signs of spam.

1. First, always look closely at the email "from" address.


[fake email]


For example, they may have tried to make it appear as if it's from a legitimate organization by adding some characters to the address, like IT at serviceatpaypal.com<mailto:IT at serviceatpaypal.com> or support at BankofAmericaforyou.com<mailto:support at BankofAmericaforyou.com>.

Or they hope you overlook the email address altogether and simply use something generic such as: ebaysupport123 at gmail.com<mailto:ebaysupport123 at gmail.com>.

Even more alarming, as in our example, the scammer could have hacked into her email account, copied the contact list and created a similar email address to appear to be legitimate.



2. The email content may have broken English, misspelled words, no punctuation.

Many spammers are foreign entities with poor English, so this is a telltale sign.



3. It asks for a reply with personal information.

This is a big red flag. Your financial institution or any online account will not ask you to reply to an email with personal info. However, spammers often mimic emails so meticulously by adding an organization's logo that you can be fooled.

If in doubt, call the organization, or log into your account directly from their website (don't follow a link).

[fake email]



4. The email contains suspicious links and/or attachments.


[spam email]


I received an email the other day that appeared to be from a collection agency telling me that I had an overdue invoice. I was tempted to click the PDF attachment that was conspicuously named "Invoice" to take a look, but I used my detective skills, determined it was spam and deleted it.

The "from" email address was suspicious, I couldn't tell what organization it was from and the signature line was vague, lacking a phone number. If I had clicked on the attachment to save or view it, it could have contained a virus or a number of different types of malware infecting my computer.

When there are Links in an email that look suspicious, do not click on them. They can lead to bogus websites set up to appear legitimate.

Sometimes links are disguised in a "button" so that you don't see the address.

Try this with any link or button: Hover over it (without clicking on it) and the web address will appear along the bottom of your browser. Then you can see if it is legit or not. (On a mobile device, hold down on the link and a pop-up will display the real link address).

[bad link]


[Netflix]


NOTE: Even in legitimate emails from online service providers, it's better not to click on the link in the email. Instead, log into your account the normal way. Usually, if you receive an email alert, they will have a message regarding the problem inside your account.

For example, say if you received an email from Netflix asking you to update your payment information, instead of following an email link, log into Netflix.com and go to the payment page that way.



5. The subject line (or email content) contains urgent or threatening language.

Scammers want to grab your attention and urge you to act right away. Watch for signs like:
·     Words like Urgent Reply or Attention
·     ALL CAPS
·     Text in the body of the email that contains deadlines so that you will act immediately and not second guess the request

[https://files.constantcontact.com/ee1208b4001/6f23014f-0072-4877-8281-dfe31009c377.png]



6. The content of the email is designed to trick you with an enticing offer or story.


[Phishing]


Common requests in a hoax email may:

·     Offer for coupons or free merchandise
·     Ask you to purchase a gift card
·     Express that you're eligible for a payout or refund
·     Claim that there's a problem with your account
·     Ask you to click a link to update payment information
·     Request that you confirm personal information



Watch for Part 2 of this topic and learn how to protect yourself.

·     What to do if you open an attachment that contains malware?
·     How to report tech scams (phishing).
·     Steps to protect your files in case of a scam.

Coming Soon!



[https://files.constantcontact.com/ee1208b4001/41d9a61c-7e5a-4de3-b0a4-4021dd05cea3.png]



Communication: Recognition
It's never too late ... and sometimes it's even better!

OK, timely recognition of people ... when they've done something special ... is always preferred. Yet sometimes, it's even better to get delayed appreciation.

For instance, I get invited to a dinner party. I go. It's great. I have fun and come home. I immediately go to my note cards and send a thank you. Yes, it's timely and appreciated by my hosts.

But wait ... what if I delay a week and then send a thoughtful thank you? Sometimes, it will make the note seem even more sincere. Especially if I mention that I'm still remembering the great evening and fine food!

The moral is, no matter how much time has passed,
people love being appreciated!

Belleview Public Library (Marion County, Florida)

Some months ago, the kind and helpful staff of the Belleview Public Library of Marion County Florida generously allowed me to hold one of our Tech-Talk webinars in their study rooms.

At the time, of course, I thanked them, but I was reminded recently of how great they were and wanted to give them a delayed shout-out.

I have this fabulous photo and video ... and want to share them with you now. You can even hear Misty and Heather tell you about their library in the 30-second video <https://r20.rs6.net/tn.jsp?f=001gqPzY9BIBg1zIAzoLnEelp-CVJvgWM_u-pLbypdDkyFuYMpeK8P4mvx8NY9a7BelTlxdBDl5Sh2w-b7G1N-sZHPlw4tM66Rsx1l21FGs-vdGm77TF73RF7oJMNVkmEZbAY2S6VJftCSrZ9TjNjOsFBzAhKjvYEL6oHbFPJ1wQTxuZt4OsHZc-PCZEUxmVd9h&c=1yWuWyJdl-28IJlsaMeTXiDywf5g-J5M6lNo27fPPpn7Ia0U5uiWNw==&ch=Npc7FnkjUWQ2yNDUck6Q_iCb3QhbwPH5duGWWMEm8l74KLMt7HeCng==> on the linked Tech-Talk page!

[https://files.constantcontact.com/ee1208b4001/36a1767e-4fe2-4002-94f9-3038562c92a3.png]<https://r20.rs6.net/tn.jsp?f=001gqPzY9BIBg1zIAzoLnEelp-CVJvgWM_u-pLbypdDkyFuYMpeK8P4mvx8NY9a7BelTlxdBDl5Sh2w-b7G1N-sZHPlw4tM66Rsx1l21FGs-vdGm77TF73RF7oJMNVkmEZbAY2S6VJftCSrZ9TjNjOsFBzAhKjvYEL6oHbFPJ1wQTxuZt4OsHZc-PCZEUxmVd9h&c=1yWuWyJdl-28IJlsaMeTXiDywf5g-J5M6lNo27fPPpn7Ia0U5uiWNw==&ch=Npc7FnkjUWQ2yNDUck6Q_iCb3QhbwPH5duGWWMEm8l74KLMt7HeCng==>

NOTE: Misty (left) and Heather (right) ... see what a fabulous children's area they have! [Sadly we lost Misty in an auto accident this year, but our many shared memories and her positive spirit remain dear to our hearts.]



[https://files.constantcontact.com/ee1208b4001/da1c6ee9-ba35-4af5-9c80-8e1b5781189e.png]



Leadership
Blame the process, not the person

You know how sometimes things go awry? Problems occur. You look at the situation to figure out why. If other people are involved, it can be tempting to find out who was the cause. Who was ultimately responsible?

However, the better approach in communicating about a problem is to look at the process.

For instance, let's say that a report is sent out with errors in it. Surely the person who wrote it must be at fault right? But let's look at it another way.

Examine the process to ensure:
·     The content was on target.
·     The review step to validate that key points was included and correct.
·     There was a proofing process from an objective individual so that mistakes could be more easily identified.

Regardless of the type of problem or mistake, the same principle applies. So, a good phrase to live by is:

Blame the process, not the person.

Then fix the process!



[http://files.constantcontact.com/ee1208b4001/b13a7a6a-7445-4d8e-b741-4b475385ef5b.png]<https://r20.rs6.net/tn.jsp?f=001gqPzY9BIBg1zIAzoLnEelp-CVJvgWM_u-pLbypdDkyFuYMpeK8P4mm8Cvex5C8uHXtX6uvuFdIcG2w91Ij2IAE78aP1U16dgl32FtSzX2JcQa2PC2kOTzY1Pe2HtYhIF2U5SHAZcnmBJrW-KoSAlD40mNMWkosGZ&c=1yWuWyJdl-28IJlsaMeTXiDywf5g-J5M6lNo27fPPpn7Ia0U5uiWNw==&ch=Npc7FnkjUWQ2yNDUck6Q_iCb3QhbwPH5duGWWMEm8l74KLMt7HeCng==>
[Ask a question]<https://r20.rs6.net/tn.jsp?f=001gqPzY9BIBg1zIAzoLnEelp-CVJvgWM_u-pLbypdDkyFuYMpeK8P4mldZv3MD0TIa1gMcl87TEsd_nmNGRVjaxjb6Bx1MBeq-hSB5ihH2fTlX_QlNHNSEHlyxDXPQk4MSzfLo4C0mprSRWuiyczCCTBaYMZuIG7mCYbRgjXCafYo=&c=1yWuWyJdl-28IJlsaMeTXiDywf5g-J5M6lNo27fPPpn7Ia0U5uiWNw==&ch=Npc7FnkjUWQ2yNDUck6Q_iCb3QhbwPH5duGWWMEm8l74KLMt7HeCng==>

Copyright 1996-2021 Shared Results International. Published weekly. Distribution is limited by license. For information on how to include additional recipients, contact support at tech-talk.com<mailto:support at tech-talk.com> 941-355-2092.

The Tech-Talk e-newsletter for Oregon library staff is distributed weekly via the Libs-OR and TechTalk mailing lists. Know someone who might be interested in receiving a copy but they’re not on TechTalk or Libs-OR mailing lists? Have them contact darci.hanning at slo.oregon.gov<mailto:darci.hanning at slo.oregon.gov> or visit http://listsmart.osl.state.or.us/mailman/listinfo/techtalk to subscribe to just the Tech-Talk newsletter!

Tech-Talk is a paid subscription service for staff of Oregon libraries and is supported in whole by the Institute of Museum and Library Services (IMLS) through the Library Services and Technology Act (LSTA), administered by the State Library of Oregon.

Cheers,
Darci Hanning, MLIS (she/her/hers)
Public Library Consultant / CE Coordinator
State Library of Oregon | Library Support and Development Services
971-375-3491 | darci.hanning at slo.oregon.gov<mailto:darci.hanning at slo.oregon.gov> | www.oregon.gov/library<http://www.oregon.gov/library>
Follow @StateLibraryOR: Facebook<http://fb.me/StateLibraryOR> | Twitter<https://twitter.com/StateLibraryOR> | Instagram<https://www.instagram.com/statelibraryor/> | Pinterest<https://pinterest.com/statelibraryor/> | YouTube<https://www.youtube.com/channel/UC0-kU8Gu0jS_YcnXg-b_TRA/featured>
Continuing Education Resources: https://libguides.osl.state.or.us/conted

[cid:image001.png at 01D79E77.F30BC290]<https://www.northwestdigitalheritage.org/>      [cid:image002.png at 01D79E77.F30BC290]


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://omls.oregon.gov/pipermail/techtalk/attachments/20210831/920dac28/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 6600 bytes
Desc: image001.png
URL: <https://omls.oregon.gov/pipermail/techtalk/attachments/20210831/920dac28/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 15548 bytes
Desc: image002.png
URL: <https://omls.oregon.gov/pipermail/techtalk/attachments/20210831/920dac28/attachment-0003.png>


More information about the TechTalk mailing list