Online and computer frauds

Phishing

Fraudsters will “fish” private information out of a person through email.

• You will receive an e-mail pretending to be form a legitimate source e.g. your Bank, Telephone company, Revenue or other reputable company.
• The email may contain a link or attachment requesting you to click on the link or download the attachment to complete a specific action such as “re-activate your account”, “update your security details” etc.
• Once you have taken this action you may be brought to a fake website where you are required to input a range of personal and security details e.g. Internet Banking details, your password or your personal access number etc.
• Once the details are given away the criminal has your Internet Banking details and can log into your internet Banking as you and transfer funds from your account.
• This fraud may be used in conjunction with Vishing or Smishing (see Telephone frauds). Where criminals will follow up with a phone call. As they may already have some of the information you have just provided they may seem convincing.

How can you protect yourself?

Using up-to-date good quality internet security software is a must but you should also protect yourself in other ways:

Your Banking

• Free Wi-Fi is readily available but it may not be secure even when it requires a password. If you use public Wi-Fi you are risking your online identity and your banking details.
• Keep a record of all your online transactions.
• Make sure that you conduct your financial transactions only on a secure webpage using encryption. Look for a closed padlock in the status bar, and see that the URL starts with a “https” instead of just “http”.
• Change passwords regularly– we recommend that you use a separate email address and device for your banking needs.
• Be aware of unsolicited emails asking for bank card or PIN numbers and never divulge this information.
• Be aware of phoney emails/websites that try to trick you into giving personal information including mobile telephone numbers, mother’s maiden name and date of birth etc. Try to use a known web address.
• Never send money to or share the details of a money transfer with someone that you do not know.
• Where a site shows the last time that you logged in, always check that this reflects the last time you accessed the website.
• Always type in the web address www.open24.ie and logon to your internet Banking from there. Avoid saving links to your favourites or clicking on non-permanent tsb sites or emails as they may be compromised by fraudsters and bring you to a fraudulent website.

Your Device – Computer/phone

• Make sure you have the latest security updates on your computer or phone.
• Install a personal firewall to protect your device contents.
• Install an anti-spyware programme, and password protect your device.
• Never leave your device unattended when you are logged into your account.
• Take extreme care when allowing applications access to your device particularly if you are requested to download applications.
• It is important to have your anti-spyware, spam filters and anti-virus software on your device. Keep it up to date!
• Avoid using the internet in public places, like internet cafes.
• Keep your passwords private and change them often.
• Always clear your browser caches regularly.

Your Identity

• Be extremely cautious about the type of information that you make public.
• Never post your personal details such as telephone number, date of birth, address or employment details on Social networking sites.
• Learn about site security privacy features on social networking sites and set them to a level you are comfortable with. Be careful who you allow to be your ‘friend’ or join your network.
• Take extreme care when allowing applications access to your pages.
• You should never hand over your username, password, account number or any other personal or confidential information.
• Be careful when talking to or messaging strangers – you don’t know who they really are and never send money to an unknown source.

Shopping online

• Keep a record of all your online transactions.
• Opt out where you can - companies may send you marketing mail or share your details in mailing lists with other companies.
• Check the URL when you are providing payment details for an online purchase; the "http" should turn into a "https".
• Check the lock symbol on any website's homepage to see if it's genuine before entering your security details.
• Be aware that purchases from private sellers may be more at risk than those from registered businesses. Buy from well-known companies where possible.
• Take care when downloading files such as music, software etc. These files may be infected or have “malware” programs attached.

Emails & Texts requesting information

• Be skeptical – It’s better to err on the side of caution. Unless you are 100% sure that a particular message is genuine, assume it is not.
• Check the email address. Is it the same as the email address you usually receive emails from, or is it just similar?
• If you receive a notification from your bank (SMS/In App message) with a passcode required to complete an action or transaction please ensure that you fully read and understand the message before using the code provided.
• Be careful if there is an urgent call to action in the e-mail such as ”Security Alert”, “Your account has been blocked”, “If you don’t respond your account will be closed”. Criminals want you to act quickly and without taking due care.
• Do not click on links, download files or open attachments in an e-mail unless you are sure of its authenticity.
• Only open an attachment when you are expecting one, when you know what they contain and you are confident it is from a genuine source.
• If you are unsure, pick up the phone, call a secure number from a legitimate source and validate the message. Remember, a genuine individual/company may have had their e-mail compromised.
• If your browser has a pop-up blocker, you should use it.
• Do not copy any website addresses from a pop-up window into your browser, as a legitimate company will not ask you for your information in a pop-up window.

Unsolicited Virus, Infected Email or "Order Received / Invoice Processed"

Virus Infected unsolicited email claiming to inform Email users about anything from “Order Received / Invoice Processed” and variations thereof. This invites unsuspecting users to a website where a virus is downloaded which may subsequently infect the PC. As with any unsolicited communication, you are advised to delete any suspicious communication if unsure of the origin/source.

Trojan Viruses

A Trojan is a computer program that appears legitimate (you may not even know that it is on your PC), but performs some illicit activity when it is run. It may be used to locate password information or make the system more vulnerable to future entry or simply destroy programs or data on the hard disk.

Spoofing

Fraudsters will make a fake website or email or telephone number that looks like the genuine one that a person may use regularly. They can acquire personal information, passwords, account/credit card numbers, and online details etc.

PC Support Fraud

Criminals will attempt to gain access to your computer by calling up and saying you have a problem with your computer. They often claim to be from large legitimate corporations and will either ask for a payment to fix your computer or ask you to download a software patch. In the first case they will steal your credit cards details and in the second instance they will infect your machine with spyware or malware that will provides access to your machine bandwidth to support other attacks.

Social Networking Friend Requests

Scammers take advantage of this social time of year by sending out authentic looking friend requests via email. You should not click on the links in the email but sign into your social networking site and look there for friend requests. If you click on a link it could install malware on your computer. Beware of related scams such as "Help I’ve been Mugged!", this is when you receive a fake distress message from someone in your network requesting money as they have been robbed whilst travelling.

Social Network Virus

This is very basic and involves a friend posting a link on your social network wall page or in the status update. This gives the impression that the site is a safe site to visit. However, in some cases it is the result of malware and could result in the download of viruses on your machine.