Check out the top Discord, SMS, and email phishing scams of the week! Would you be able to spot the scams?

Discord Nitro Phishing

We’ve reported on Discord bitcoin giveaway scams before, and now scammers have discovered a new tactic to exploit you on Discord — with Discord Nitro!

Discord Nitro is a paid service for a better Discord experience with lots of extra benefits. Scammers contact you on Discord, claiming that they’ve got an extra Discord Nitro account and that you can claim it via an attached phishing link, leading you to a fake Discord login page:

SMS Phishing

Disguising themselves as big brand names, scammers will try to lure you into clicking on attached phishing links they include in text messages, aiming to steal your personal information. All the credentials you enter on the phishing page will end up in scammers’ hands. These are some of the variants of the scams we’ve noticed this week:

1. FedEx Package Delivery

In FedEx shipping scams, scammers prompt you to click on phishing links leading to a fake FedEx login page. They say you have missed your package or that there are issues with the delivery:

• hi delia, fedex is delivering your order today! to verify delivery address, please enter your information here now >><URL>
• frm:fedex87150 msg:courier driver couldn’t deliver your parcel today, <URL>
• frm:96092452-Notifications-MSG: We got your package in storehouse <URL>
• frm:676442-Fedex MSG: Due to no safe place to leave it the package no 88778688953 was returned to the repository,! <URL>

2. Walmart COVID-19 Relief Program

Walmart is sending out COVID-19 relief? No! We’ve written about COVID-19 stimulus / bonus scams before. Scammers impersonate Walmart and falsely claim that you can apply for their COVID-19 relief program via a link they send:

• Your $1,820 is now available from Walmart COVID-19 Relief Program, Apply here: <URL>

Again, the link will take you to a fake login page or online form that requires you to submit personal information (to the scammers)!

3. iPhone 13 Survey Scam

iPhone 13 remains a hot topic, and there are more and more scams featuring it as a “reward.” If you receive messages claiming you’ve won an iPhone 13, don’t take the bait! The link attached in the SMS will lead you to an online survey page where you will eventually have your personal data, such as credit card numbers, stolen by scammers.

• hey its me Jeffery Please remember to schedule <URL>

4. Gift Card Survey Scam (Tesco, Argos, and Primark)

Besides iPhone 13, scammers utilize other rewards to lure you into clicking on the phishing link. In the latest gift scam, scammers tell you that you can win gift cards for famous brands like Tesco, Argos, and Primark by filling out an online survey:

• Todays 3 iPad winners: 1st – Kimberly J. 2nd – YOU (Eduson) 3rd – Hank Jr. Read more here: <URL>

No matter which rewards you choose, you will be led to a fake PayPal login page. Remember, again, scammers can record the credentials you enter here and hack into your PayPal account!

5. Google Security Alert Scam

Google security alert via text messages? It’s a scam! Posing as Google, scammers tell you that there are security issues with your Google account and instruct you to check the status via the attached link:

• google: unusual activity on your account. check and confirm with us: <URL>

The link, a phishing link, takes you to a fake Google login page. By now you know what will happen: don’t type in your account and password!

6. American Visa Lottery Scam

Scammers also create fake American Visa lotteries, falsely claiming they are giving away Green Cards. On the fake registration page, you will be asked to provide personal information:

7. WhatsApp Survey Scams

Scammers tell you that WhatsApp will stop working on your device and you have to share a scam message with your WhatsApp contacts to reactivate the service. Or, scammers claim that they are giving away 50GB of internet for WhatsApp’s anniversary campaign:

Email Phishing

Phishing scams also appear in fake emails.

1. USPS Package Delivery

We’ve seen various package delivery scams. Posing as USPS, scammers send a fake delivery notification and prompt you to view details via an embedded button. Guess what? The hyperlink is a phishing link, leading you to a fake USPS login page.

2. LinkedIn Job Search Scam

Looking for jobs online? Be careful of fake email notifications from LinkedIn! If you take a closer look, you will find that the sender’s emails address is NOT a legitimate LinkedIn email.

3. WhatsApp Voicemail Scam

“You have a new voicemail!” Don’t click on anything! Fake WhatsApp emails urge you to click on the button to listen to the voicemail. As we’ve mentioned before, the button is a phishing link and you could end up exposing your WhatsApp login information or other personal data.

How to Protect Yourself

• Double-check the sender’s mobile number/email address.
• Free gifts or prizes are always a major red flag.
• Reach out to an organization’s customer service directly for help and support.
• NEVER click links or attachments from unknown sources. Use Trend Micro ScamCheck to detect scams with ease!

Don’t forget to add an extra layer of protection to your device with Trend Micro Maximum Security! It includes Web Threat Protection, Ransomware Protection, Anti-phishing, and Anti-spam Protection to help you combat scams and cyberattacks. Click the button below to give it a try: