With record numbers of people working from home due to COVID-19, scammers are capitalizing on the disconnect between employers and their employees. Last month, New York Attorney General Letitia James sounded the alarm about the “Boss Scam,” in which fraudsters are impersonating a real executive target employees and tricking them into purchasing gift cards under an array of scenarios. Posing as the boss, the scammers contact workers by phone or email,  and — feigning a work emergency — put pressure on the employees to act quickly.

The scam works because fraudsters assume their targets are more likely to engage with phishing emails sent from a familiar person in a position of authority. Posing as the boss also puts pressure on the worker, prompting them to act with a greater sense of urgency and — against normal better judgment — skip due diligence. The Federal Bureau of Investigation estimates that $2.3 billion has been lost to these kinds of email scams over the past three years. Scammers use public information from companies’ websites and LinkedIn profiles to personalize their communications and add legitimacy.  

One consumer in New York reported to Fraud.org that a scammer contacted her via phone claiming to have her boss on the other line. They then instructed her to purchase eight Google Play gift cards worth $100. The consumer purchased four in total before being warned it was likely a scam by a helpful cashier. A consumer in Texas was also contacted by someone telling him his boss was on the other line. The scammer impressed upon him that, if he did not pay quickly, his boss would be subject to expensive fees. The scammers instructed him to take the money from his cash register and put it into his personal bank account. The consumer then sent the scammer the money from his cash register and the entirety of his bank account, totaling $1,360, via MoneyGram. The scammers immediately took the money, and the victim was unable to get it back.

While it’s hard to push back at someone you think is your boss, here are some tips for spotting and avoiding this scam: 

• Just because an email says it’s from your boss, it may not be. If you are in doubt about the authenticity of an email request, call your boss on the telephone and verify the request before taking any action.
• Don’t click on links or attachments. Scammers may use attachments or links that look official (labeled as “invoices,” “purchase orders,” or some other official-sounding name) in order to install malware or take over a computer for ransomware attacks. 
• Slow down and do your research. Scammers may use aggressive tactics like urging you to act quickly and threatening you with repercussions to your job. Slow the conversation down. Give yourself time to verify the information they provide and contact your employer on your own.  
• Know that no legitimate business takes payment through gift cards. Money sent via these hard-to-track methods cannot be easily recovered. If someone calls you asking for payment via gift cards, it is almost certainly a scam. 

If you suspect that you or someone you know has become a victim of the “Boss Scam” or any other fraud, report it at once. You can file a complaint at Fraud.org via our online complaint form. We’ll share your complaint with our network of law enforcement and consumer protection agency partners who can investigate and help put fraudsters behind bars. 

Bitcoin. Ethereum. Dogecoin. These are just a few of the thousands of so-called cryptocurrencies that have emerged in recent years as a medium for the exchange of goods and services. These currencies rely on blockchain technology, essentially a digital ledger where all transactions involving a virtual currency are stored. Cryptocurrencies are not government-regulated currencies the way that U.S. dollars, euros, yen, or pounds sterling are. However, they are increasingly being used by everyday consumers and, unfortunately, scammers. 

Due to the nature of peer-to-peer currency transactions, fraud is becoming more common within cryptocurrency markets. According to the Federal Trade Commission, 7,000 complainants have reported losses of more than $80 million due to cryptocurrency investment scams since October 2020. According to the FTC, consumers aged 20-49 are five times more likely to report losing money on investments in cryptocurrency than older age groups.  

“Mario,” a consumer from California who recently contacted Fraud.org, is typical of the complaints we are receiving. “I did my first investment of $625.00 in Bitcoins, then I did an additional investment of $12,2000 using Bitcoins, and I was supposed to receive my profit the next month,” wrote Mario. “When I was trying to complete my profit withdrawal, the system came in with an error. After that, I tried to contact the cryptocurrency company without any response or success.” 

Cryptocurrencies’ instantaneous transactions, global reach, and relative anonymity have resulted in them being used as a payment method in many fraud cases such as giveaway scams, imposter websites, and phishing emails. Giveaway scams occur when accounts posing as celebrities promise to immediately multiple the money you invest in cryptocurrencies. People are often lured to websites that look like opportunities for investing or mining cryptocurrencies, offering larger returns for larger investments. Initial coin offerings (“ICOs”), the first offerings on a particular cryptocurrency for sale, are often vehicles for fraud, used to hack investors’ crypto-wallets and steal their legitimate cryptocurrencies. 

Reduce your risk of falling victim to cryptocurrency fraud. Here’s how:

1. Remember the old adage: If it sounds too good to be true, it usually is. Be skeptical of websites and people promoting large returns on investments. Don’t trust offers that come from messages or posts on social media websites. If someone is asking for even a small amount of your cryptocurrency, it is likely a scam. Never send cryptocurrencies to giveaways or online prize promotions. Be aware that such requests may come under the guise of identity verification.  
2. Be protective of your personal information. Never give out your two-factor authentication security codes or passwords. Never give support staff remote access to your machine, as this provides them with full access to your computer and online financial accounts. 
3. Research. Verify that email addresses are legitimately connected to the cryptocurrency company. If there isn’t a small lock icon indicating security near the website’s URL bar, think twice. Double-check the website’s URLs to ensure that you’re visiting a trustworthy website. Look into any entity soliciting you on social media. Contact the company if you have any doubts. 

If you or someone you know has been a victim of a crypto scam or any other type of fraud, we urge you to file a complaint at Fraud.org via our online complaint form.

As vaccination efforts continue to ramp up, scammers have found a new way to keep the COVID-fueled fraud wave going: counterfeit vaccine cards.

Though a billion vaccine shots have been administered throughout the world, not enough of the world’s population has been vaccinated to stop the spread of COVID-19. Many businesses and organizations are now requiring proof of vaccination, leading to the rise of counterfeit vaccine cards. Online advertisements for fake vaccination cards are popping up all over sites like eBay and Etsy, ranging in price from $20 to $60. Demand for fake vaccination cards may rise as more organizations require proof of vaccination to do things like travel on an airplane or attend events.

The rise in sales of fake vaccine cards led 45 states attorneys general to call on Twitter, Shopify, and eBay to stop the sale of false and stolen vaccine cards. Pennsylvania Attorney General Josh Shapiro said his office was seeing a huge market for the fake cards, undermining public health.

In addition to fake vaccination cards, the Federal Trade Commission warns that scammers are doubling their efforts to peddle fake vaccine appointments in order to defraud people out of money and steal their identity. In reality, neither the COVID-19 vaccine nor appointments to be vaccinated have any cost to consumers. Fraudsters are exploiting the unfamiliar territory of booking a vaccine appointment to extract information from unsuspecting victims, such as Social Security numbers and bank account information.

Use the following tips to avoid falling victim to COVID-19 scams and to help stop scammers:

1. Don’t pay for the COVID-19 vaccine or to book an appointment. Regardless of your health insurance status, you do not need to pay to book an appointment or to receive the coronavirus vaccine. The only cost associated with the vaccine is administrative, and the organization administering your vaccine will reach out to your health insurance company directly. If you are uninsured, the Health Resources & Services Administration has programs available to cover the cost of a vaccination. If someone is asking you to pay for a vaccine or an appointment, it is most likely a scam.
2. Do not share personal health information with people you don’t know. Legitimate vaccination locations will not ask for personal information like your bank account, credit card information, or Social Security number. If you have questions about what is appropriate, check with your local health department or contact your doctor.
3. Don’t share fully legible images of your vaccine card on social media. People are understandably excited to share with their friends and family that they have been vaccinated, but sharing your vaccine card on social media opens the door for fraudsters to steal your identity. If you do plan to share your vaccine card online be sure to cross out sensitive information like your full name, birthday, and dates you received the vaccine.

If you or someone you know has been a victim of a stimulus check scam or any other type of fraud, we urge you to file a complaint at Fraud.org via our online complaint form.

As the new year has dawned, there is, at last, some light at the end of a very dark tunnel of bad COVID-19 news. The COVID-19 vaccines are starting to be distributed to the healthcare workers who have been on the frontlines of the pandemic, as well as to other at-risk Americans. In the coming months, the vaccine will become available to millions more members of the general public. While this is undoubtedly good news, there is likely to be far greater demand than supply for the vaccine, at least in the early stages of the distribution campaign. This will create a perfect opportunity for scammers to latch on to consumers’ understandable desire to be vaccinated as quickly as possible. 

Already, we are seeing warnings from law enforcement agencies like Interpol and the Federal Trade Commission that organized crime groups are gearing up to take advantage. If experience from previous pandemics like the 2014 ebola outbreak and the 2009 H1N1 epidemic are any guide, scammers will seek to take advantage of public interest in the outbreak to sell phony “cures” or to offer consumers bogus vaccines in exchange for a fee. We anticipate a flood of emails, text messages, and robocalls trying to trick the public into giving up sensitive personal information. 

One of the best ways that consumers can defend themselves against scammers seeking to profit off our interest in the COVID-19 vaccine is to get educated about the red flags of likely fraud. Some common schemes we anticipate scammers using include: 

• Want early access to the vaccine? Pay us. The vast majority of Americans will not need to pay any out–of–pocket costs to access the vaccine. The distribution processes for the vaccine will be decided largely by state governments, and we anticipate consumers will receive guidance from state health officials on where they land in the vaccine queue. If someone claims they can offer you “guaranteed” access to the vaccine in exchange for a fee or personal information, it’s a scam. 
• You don’t need to be on a list to get the vaccine. Check with your doctor or your local public health agency for details on how and when you can get the vaccine. Any emails, text messages, or phone calls asking for personal information to “add you to the list” to be vaccinated are likely scams. 
• Watch out for websites or advertisements offering “alternatives” to the vaccine. Surveys show that significant percentages of Americans may be wary of being vaccinated. Scammers who offer to sell you “alternative cures” to COVID-19 are just trying to scam you. Beware, too, of websites that offer COVID-19 “treatments,” for a fee. 

If a scammer contacts you offering to help you get access to the COVID-19 vaccine, we want to hear about it! You can file a complaint at Fraud.org via our online complaint form. We’ll share your complaint with our network of law enforcement and consumer protection agency partners who can investigate and help put fraudsters behind bars.