#Email phishing

[noriretherford]

Hm.. just a heads up to my fellow artists re: an email scam going around. I wasn't sure when I first received it a few weeks ago, but there were enough red flags that I ignored it.

A friend just received the same email (signed by a different name), which confirms the scam, and then I found a reddit post warning about the same thing. Don't engage if you get this email. :/

"My name is Vincent Harris, I am an academic event organizer and I'm hearing impaired, i hope you treat me like any of your other customers and my disability doesn't affect our dealings. I got your contact details online, I need the service of an artist or illustrator/cartoonist to work on a project for an upcoming workshop, I'll give the idea of what I need to be illustrated/drawn and you can get back to me with the price to get it done, I'll pay your fees up front if you want. Please get back to me for more details. Warm regards. Vincent."

A couple hours after the first email, I received this message through my website contact form (allegedly from a different person), but I figured they were related:

"How are you today? I hope this email email finds you well! This is JEAN HART an academic event organizer. I’m privileged to be writing you this, I’m intrigued by your skill and creativity I’ve seen on your website.

I got your contact details online. I need the service of an illustrator/animator or cartoonist. I’m willing to work with you as I know you’d be a great fit for our forthcoming coming workshop, I’ll give you the ideas of what needs to be illustrated/drawn so you can get back to me with a quote to get it done, hopefully we can take it from there. Pls get back to me for more details - Best regards, Jean"

Followup from this reddit thread:

[redbuddi]

SCAM ALERT!!!

This morning I woke up to this email

Scary right? It looks as though all of a sudden I owe over a thousand dollars to some studio I've never heard of. This would be enough to make anyone jump to correct the situation. But if you get this email or ones like it, stay calm, do not call the number, and do not click ANY of the links.

This email is fake. I logged into paypal through normal means and there was no such invoice sent to me. While obviously I didn't call the number or click the links to check for sure, this is most likely a classic phishing scheme. Essentially if you click any of the links or call the number, you will be asked for your login information in a way that looks legitimate, but once they confirm your login they will disconnect you, change your password, and have complete access to your paypal.

tl;dr, If you get the email pictured above or anything similar, delete it immediately. Do NOT call the number it provides. Do NOT click on any of the links it contains.

[ticklish-ace]

I’ve received some very kind messages asking if I’m open to talking and I wanted to give a general answer here so that it’s easy to find!

I’m a full time worker in addition to a full time student who’s on track to fit seven semesters of classes into only two. My free time and energy are pretty limited.

I also haven’t figured out how to respond to “Do you want to chat sometime?” when I don’t have any sense of the person, their interests, or their vibe. I’m much more likely to respond to people I’ve publicly interacted with before because then I’ll actually have things to talk about with them! Otherwise, I don’t really know what to say.

I’m much more open to chit chatting with fellow lees/women 🫶 Send me pictures of your cats, tell me what kind of tea you’re drinking today, show me what you scored at the thrift store! Brag to me about your sessions!

[somethingusefulfromflorida]

Every few months I'll get an email from my bank warning me of some new phishing scheme, and they always include a link, "CLICK HERE TO LEARN MORE."

Nice fucking try! Can't get me that easily.

[lurking-latinist]

just received a phishing email which began with the greeting "Dear Staff, Students, and Non-Staff." covering all their bases I guess

[nixcraft]

[coolbeesbro]

So I set up my new stuff on Etsy hoping I'll have better luck there and biting the bullet on listing fees, and already I've had 2 scammers in my inbox that start off making it sound like I just got a sale.

This is just 1 since I didn't think to screenshot the other before I marked it as spam, but that's just downright cruel. Taking advantage of someone who you can see hasn't made any sales, especially right now, takes a special kind of evil.

Although this goes without saying, just in case this is a PSA to others that sell on Etsy, do not follow any link or type any URL's that they ask you to.

Taking this opportunity to point this out (I didn't pick up on these parts before until I saw a video on TokTok) notice how they ask me to type in COM and not .com? It's usually small things like this that trick people into trusting it, because it look similar enough to be legitimate that some people (myself included at one time) won't think twice about it. Likely, this link would lead to somebody hacking into your device or account to steal information such as credit card and banking info that you might have attached or saved. The scary thing is, you may not even know you have one right away.

This also applies to other phishing scams, mainly pertaining to PayPal (I've gotten these emails many times). They (the hacker and not PayPal) send you a message that looks just plausible enough to trick somebody into thinking you just made a purchase, won't give any form of specification, and will have an attached PDF "receipt" that they ask you to click on. This usually tricks people into doing so because you think, "Hey, I didn't make any purchases with PayPal, what was ordered?" you click on it then BAM they can get into your system. I unfortunately did this myself once and my phone slowly stopped working over the course of a year, I started getting a lot of texts trying to get me to follow suspicious links, calls from the "FBI" and "IRS", and I had to change the passwords to all my accounts because the person even tried hacking into my actual PayPal account. My phone would get absurdly hot, and the full battery would last 4 hours at best.

Never click on a PDF document from any sketchy emails, because a virus can and will infect your device (computers and phones) by hiding malicious code in it. These forms of attack are usually in the form of spyware to track what you do on that device and collect your private information so the hacker can commit fraud or identity theft. It could also download ransomware and lock you out of your device unless you pay them, and also threaten to leak private information (some of which being outing someone LGBT+, leaking nudes, and doxing) to scare you into giving them what they want.

There's a way you can always tell if it's a scammer, and that's by checking the actual email. PayPal emails are always going to be one of these two: service@paypal.com or member@paypal.com. If you cant remember making a payment and get an email from one of these, it can still be a scammer that can change 1 or 2 letters subtly. For example: Service@paypal.com, member@PayPal.com. If you have any suspicions, just go straight to your PayPal account and check for any bills/receipts there. If you don't seen anything, it's best to report those emails to PayPal directly so they can either verify it as one of theirs (it won't be if it differs at all from the two I showed) and work towards flagging and taking it down for others later down the line who may be tricked.

Anyways, this has just been a PSA since something good can come from the asshole who sent me this message. Hope this can help at least 1 person.

[the-last-dillpickle]

Unpopular opinion (maybe?) but I think people make Garak OP when it comes to his tech and hacking skills

[sweaterkittensahoy]

In hilarious IT news today:

We have to do the annual phishing training at work. IT sent out an email notifying everyone that the training would be coming from a third party and gave us the name of the company.

The company's email looked so sketch that several people reported it to IT for a possible phishing attempt. Personally, I think everyone who reported does not need to go through the training again.

[harellan]

Lmao do they think I’m stupid?

[bird-of-blinkies]

SCAM/PHISHING EMAIL PSA

there have been emails going around, often implying/saying it's from something you'd subscribed to. sometimes you can tell right away it's a scam, but other times they have been getting increasingly sneaky. they also are getting around ALL of my gmail spam filters, and additionally, there is an option to "unsubscribe" built into gmail now, which can lead you to clicking a dangerous link!

do not click "unsubscribe!"

if you get a promotional email from someplace you don't remember subscribing to, or had previously unsubscribed to, look at it carefully. there are some key signs something is wrong:

the email is from a random gmail account. not any official company one, or anything to do with the service/products being advertised

there's a long space between the unsubscribe button and the email contents

the email can be "from" a company you know (such as McAfee Advisor, which also sends emails similar to what these companies do anyways), or something you've never heard of.

below are some photo examples of ones i have personally received!

yours will not show up as spam. it will arrive in your normal inbox.

i have gotten plenty more convincing emails than this one lately, so please please be careful!

finally, here is the gmail unsubscribe button.

Do Not Click This If You Receive A Phishing/Scam Email.

it is tied to whatever link is written by the emailer with "unsubscribe" on it, and will automatically open it for you in your browser. these links do not unsubscribe you to anything, they are just phishing tools.

don't let dangerous links into your internet home! report as spam and block

[reye-chan]

lol someone tried to scam me

got this email today and, as someone who has exactly three things on autopay and uninstalled norton the moment i got my current laptop FAR MORE THAN TWO YEARS AGO, i immediately knew this was sus

so, just to see, i called the number and got the most irritable sounding indian guy ever (why is it always an indian guy? does india have the market cornered on people trying to pull refund scams? step it up, rest of the world ffs)

me: hi i got an email about a norton auto renewal i didn't sign up for

him: okay may i have your invoice number?

me: (rattles it off) and i thought it was strange because i don't use norton

him: well we have a lot of different things under our name...

me: yeah and i don't use them :)))

him: uh so you need to open your computer to fill out the request to stop the payment...

me: i gave you the confirmation number so you should have all the info to cancel it :))

him: uh

me: is this a scam? :D

(he hangs up)

i had my fun haha

[mercurialsmile]

Can’t believe if I have to say it but… if someone you don’t know and have never interacted with sends you a link to a website you CANNOT verify as safe do NOT click the link.

People can spoof websites to make them look like popular and trusted sites. Then they can steal your data. And sell it.

Y’all need to learn basic internet safety I’m sorry.

Think of it like this… if someone you don’t know out of nowhere emails or texts you a link to donate money to them, no matter what story they attach, would you click on it? Or would you report it as junk mail or as a phishing email/text?

I WOULD HOPE THE LATTER!

It’s the same online on a public platform.

Do NOT click links from people you DO NOT KNOW. It doesn’t matter if someone else vetted them supposedly or not. You don’t know that person either! The only person you can trust to keep you safe online is yourself!

Do not respond to possible phishing messages. Do not click on suspicious links to other websites. If you would mark it as spam or junk if it was a text message or email, treat it the same way on tumblr

[atomiccryptid]

tmagp / fnaf crossover where instead of jonah, the third text to speech voice in that windows nt 4.0 computer is william afton

[disdaidal]

Btw I got a call from Paypal this morning, which sounded a helluva lot like an automated message (a female voice spoke in English, but it sounded distant, almost robot-like). And this voice said something similar to "we have received a request to withdraw money/funds from your Paypal account" (the requested amount was around a hundred-something) and "if you want to cancel it, press 1".

I hung up immediately. The phone number on my screen showed (+359) and "Bulgaria". I'm Finnish.

After ending the call, I immediately googled the message that I had heard on the phone, and it seems like a lot of Paypal users have gotten similar emails from 'Paypal' (I'm no stranger to such scam emails myself), but none of them mentioned a phone call. So I searched for that number and couldn't find it—or at least nothing that suggests that it's 'potentially harmful'.

I thought about reporting it to PayPal (still might), but somehow I doubt that'll do anything. I also checked my Paypal account activity in case of any new suspicious activity and transferred my money to another bank account (not linked with PPL) just in case.

I'm sure it was just a phishing attempt and nothing serious happened because I didn't respond, but you really can't be too careful these days.

Anyway, if you use Paypal and get emails or phone calls like this, don't answer them. Don't give them any information. Just hang up and delete those emails and/or mark them as spam. If you're not sure if they're legit, go to the Paypal official website and contact their support. They should know.

[fincrif]

How to Protect Yourself from Personal Loan Phishing Scams

In today’s digital world, personal loans have become more accessible, allowing borrowers to apply online and receive funds quickly. However, this convenience has also led to a rise in phishing scams, where fraudsters attempt to steal your personal and financial information by posing as legitimate lenders. These scams can result in identity theft, financial loss, and fraudulent loan applications in your name.

If you’re planning to apply for a personal loan, it is essential to understand how phishing scams work, the warning signs to look for, and the best ways to protect yourself.

1. What Are Personal Loan Phishing Scams?

A phishing scam is a fraudulent attempt to trick individuals into providing sensitive information such as bank details, Aadhaar number, PAN card, OTPs, or login credentials. Scammers typically impersonate banks, NBFCs, or online lending platforms and contact borrowers via emails, phone calls, SMS, or fake websites.

Once they obtain your information, they can:

Steal money from your bank account

Take a loan in your name

Misuse your identity for financial fraud

Access and sell your personal data on the dark web

2. Common Types of Personal Loan Phishing Scams

2.1 Fake Loan Approval Emails & SMS

Fraudsters send emails or SMS messages claiming that your loan has been pre-approved or that you qualify for a low-interest personal loan. These messages often contain links leading to fake lender websites designed to steal your personal information.

2.2 Fake Loan Websites & Apps

Scammers create websites and mobile apps that look like real financial institutions. They trick users into entering personal and banking details, which are then used for fraudulent activities.

2.3 Fraudulent Customer Service Calls

You may receive a phone call from a scammer pretending to be a bank representative. They claim you must provide your OTP, Aadhaar, PAN, or bank details to complete your loan application. Once you share these details, scammers can withdraw money or take loans in your name.

2.4 Loan Processing Fee Scams

Fraudsters promise quick loan disbursal with no documentation but demand advance processing fees or a loan insurance fee. Once the fee is paid, the scammer disappears, and no loan is disbursed.

2.5 Social Media Loan Scams

Some scammers advertise fake loans on Facebook, Instagram, or WhatsApp and ask potential borrowers to contact them privately. Once engaged, they request confidential details, leading to identity theft.

3. Red Flags to Identify Loan Phishing Scams

3.1 Offers That Sound Too Good to Be True

If you receive an offer promising guaranteed loan approval with no credit check, zero documentation, or extremely low-interest rates, it’s likely a scam.

3.2 Unsolicited Loan Messages

Legitimate lenders do not send random SMS, WhatsApp messages, or emails offering personal loans. Be cautious if you receive messages from unknown numbers or email addresses.

3.3 Fake Loan Websites

Before applying for a loan online, always verify the website’s domain name. Scammers often create fake websites with slightly modified spellings of real lenders to trick borrowers.

3.4 Requests for Upfront Payments

No genuine lender will ask for advance processing fees before loan approval. If a lender insists on upfront payments via UPI, Paytm, or Google Pay, it’s a scam.

3.5 Pressure to Act Immediately

Scammers create urgency by saying things like, "Limited offer – Apply now!" or "Your loan will be canceled if you don’t act fast." A real lender will give you time to review the terms.

3.6 Request for Personal Information Over the Phone

A legitimate bank or NBFC will never ask you for OTPs, passwords, or CVVs over the phone. If someone does, hang up immediately.

4. How to Protect Yourself from Loan Phishing Scams

4.1 Apply for Loans Only from Trusted Lenders

Always apply for a personal loan through registered banks, NBFCs, or reputed online lenders. Here are some safe options:

�� IDFC First Bank Personal Loan 🔗 Bajaj Finserv Personal Loan 🔗 Tata Capital Personal Loan 🔗 Axis Finance Personal Loan 🔗 Axis Bank Personal Loan 🔗 InCred Personal Loan

4.2 Verify the Lender’s Website

Check if the website URL starts with "https://" (secure site).

Look for official lender details on the RBI website or lender’s official website.

Avoid websites with poor design, spelling errors, or unusual domain names (e.g., "axisbankloans.xyz" instead of "axisbank.com").

4.3 Never Click on Suspicious Links

Do not click on links in unsolicited emails or messages claiming to be from a bank or NBFC. Instead, visit the official website by typing the URL manually.

4.4 Avoid Sharing Personal Information Online

Scammers may ask for your Aadhaar, PAN, or bank details via email, phone, or WhatsApp. Never share sensitive information with unknown sources.

4.5 Enable Two-Factor Authentication (2FA)

Use 2FA on your banking and email accounts to protect against unauthorized access. This adds an extra layer of security if your password is compromised.

4.6 Check Reviews & Ratings Before Downloading Loan Apps

Before installing a loan app, check:

App permissions (Avoid apps that ask for access to contacts, photos, and messages).

Reviews and ratings on Google Play or App Store.

If the app is registered with an RBI-approved lender.

4.7 Monitor Your Bank & Credit Report Regularly

Check your credit report and bank statements for unauthorized loan applications or suspicious transactions. If you spot any fraudulent activity, report it immediately.

5. What to Do If You Are a Victim of Loan Phishing?

If you have fallen victim to a loan phishing scam, take these steps:

1️⃣ Contact Your Bank Immediately – Report any unauthorized transactions and request to block your account if necessary. 2️⃣ Change Your Passwords – Update your internet banking, email, and loan account passwords immediately. 3️⃣ File a Cyber Crime Complaint – Report the fraud to the Cyber Crime Portal (www.cybercrime.gov.in) or call the National Cyber Crime Helpline (1930). 4️⃣ Report to RBI & Consumer Forum – If you have been tricked into a fake loan scheme, report it to the RBI and National Consumer Helpline (1800-11-4000). 5️⃣ Monitor Your Credit Report – Check for unauthorized loans taken in your name and dispute them with credit bureaus like CIBIL and Experian.

Stay Alert & Borrow Safely

Personal loan phishing scams are on the rise, but you can stay protected by being vigilant. Always verify loan offers, apply only through trusted lenders, and avoid clicking on suspicious links.

For safe and secure personal loan options, apply here: 👉 Compare & Apply for a Personal Loan

By staying cautious and informed, you can protect yourself from loan fraud and ensure a safe borrowing experience.