MetaMask, USPS, Netflix, Costco, PayPal, and MORE — Top Phishing Scams of the Week

    MetaMask, USPS, Netflix, Costco, PayPal, and MORE — Top Phishing Scams of the Week
    Shutterstock

    This week we’ve found a large number of scams that you need to watch out for, including ones relating to MetaMask, USPS, Netflix, Costco, PayPal, and MORE. Would you have been able to spot all the scams?

    Impersonating famous brands, scammers send out fake text messages containing phishing links and try to entice you into opening them with various lies. Below are some examples.

    Fake Security Alert

    These phishing links will take you to fake login pages that will end up asking you for personal information and login credentials:

    #1 – Metamask Restriction Email Scam

    A few months ago, we reported on fake MetaMask emails containing phishing links — and now they are circulating again. Telling you that there is “something unusual” about your MetaMask wallet, scammers try to convince you to click on the attached link to “Review Activity” and secure your account:

    Spot the Scam_Metamask Restriction Email Scam_20220909

    They even provide the legitimate MetaMask web address (domain: metamask.io) at the bottom of the email to make it more convincing. However, if you click on the button, you will be led to a fake MetaMask security alert page:

    Spot the Scam_Fake Metamask Page_20220909
    Fake MetaMask page

    Sample fake MetaMask URL:

    • londonorg[.]vacad[.]net

    If you proceed as instructed, the page will ask you to enter your MetaMask credentials (phrase, keystore, or private key) to recover your account.

    Spot the Scam_Fake Metamask Page_Recovery Phrase_20220909
    Fake MetaMask page

    If you fall for this trick, scammers can hack into your MetaMask wallet and transfer every “bit” away. What’s worse, since cryptocurrencies are decentralized, it would be nearly impossible to get them back! Be careful!

    Avoid Phishing Scams with Trend Micro Check

    Trend Micro Check is a browser extension and mobile app for detecting scams, phishing attacks, malware, and dangerous links — and it’s FREE!

    After you’ve pinned the Trend Micro Check extension, it will block dangerous sites automatically! (Available on Safari, Google Chrome, and Microsoft Edge).

    TMC_CTA_Extension_2022

    You can also download the Trend Micro Check mobile app for 24/7 automatic scam and spam detection and filtering. (Available for Android and iOS).

    TMC_CTA_Mobile_2022

    Check out this page for more information on Trend Micro Check.

    #2 – Netflix Payment Declined Text Scam

    Fake Netflix text messages about issues with your payment and subscription have been reoccurring as well:

    Spot the Scam_Netflix Payment Failed Scam Text_20220909
    Sample Netflix phishing text message. Source
    Spot the Scam_Netflix Payment Failed Scam Text_2_20220909
    Sample Netflix phishing text message. Source
    • NETFLIX: Your membership has been cancelled as payment failed. Please update your card details to keep your membership. <URL>
    • Type your message Your Netflix subscription attached to XXXX have been suspended due to a billing error please update your personal data <URL>

    The attached phishing link will take you to a fake Netflix page that collects all your login information, which enables scammers to take control of your account and steal your identity. Beware!

    In other cases, phishing links will also often lead to online survey pages that state you can claim a gift by filling out an online questionnaire.

    #3 – PayPal

    This one is another in a long list of PayPal scams. Did you receive anything recently?

    • Paypal: we found a suspicious transaction, for security reasons we have disabled your account. please secure and verify your account from the following link: <URL>

    The link won’t let you secure your account, it will only lead you to a fake online survey page designed to record all your personal information. Watch out!

    Spot the Scam_PayPal Survey Scam_20220909
    Sample PayPal phishing pages
    Spot the Scam_PayPal Survey Scam_Phishing Page_20220909
    Sample PayPal phishing pages

    Gift Card Scams

    Free gift cards are surely too good to be true, right?

    #1 – Costco

    We’ve reported on Costco scams several times before. This week, scammers have started to feature gift cards as a reward, prompting you to fill out an online survey to claim a $40 gift card:

    • 1 of 2 FRM:<URL>|sms_id_FUO293 MSG:Since youre a valuable customer of Costco we have a gift valued at $40 just for you for your (Con’t) 2 of 2 time. Just acknowledge this 3 question survey and you will be compensated. [link](End)

    The (phishing) page says that you can win a prize worth up to $100 after you complete the survey:

    Spot the Scam_Costco Survey Scam_20220909
    Sample Costco phishing pages

    As mentioned, you could end up exposing your sensitive information, including banking details. Don’t get scammed!

    Spot the Scam_Costco Survey Scam_Phishing Page_20220909
    Sample Costco phishing pages

    Delivery Scams

    Scammers love to pose as delivery companies. After all, most of us find ourselves waiting for packages every now and then!

    #1 – USPS Text Scam

    Falsely claiming that there are problems with your package’s delivery, scammers instruct you to click on the attached phishing link to correct your delivery information:

    Spot the Scam_USPS Phishing Text Message_20220909
    Sample fake USPS text message. Source
    • USPS: User, we have problems with your shipping address, please update your information. Tracking Number: US1896901185421. Update Here: <URL>

    You can tell what’s going to happen: the link will take you to a fake USPS tracking page (a phishing page):

    Spot the Scam_Fake USPS Tracking Page_20220909
    Fake USPS tracking website. Source

    Sample fake USPS URL:

    • usps[.]ist/Address

    Note: Check the web address. The genuine domain is tools.usps.com.

    How to Stay Safe from Scams

    • Pay close attention to URLs — are they legitimate?
    • Double-check the sender’s mobile number/email address.
    • Free gifts and prizes are always a major red flag.
    • Go to the official website/application instead of using links from unknown sources.
    • Never click on links or attachments from unknown sources. Use Trend Micro Check to surf the web safely (it’s free!).
    • Add an extra layer of protection to your devices with Trend Micro Maximum Security. Its Web Threat Protection, Ransomware Protection, Anti-phishing, and Anti-spam Protection can help you combat scams and cyberattacks. Click the button below to give it a try:

    As ever, if you’ve found this article an interesting and/or helpful read, please do SHARE it with friends and family to help keep the online community secure and protected. Also, please consider clicking the LIKE button below.

    Post a comment

    Your email address won't be shown publicly.

    0 Comments

      This website uses cookies for website functionality, traffic analytics, personalization, social media functionality and advertising. Our Cookie Notice provides more information and explains how to amend your cookie settings.