Although people might be late with holiday shopping this season, that doesn't mean they shouldn't be on high alert about where and how they shop.
While people are out shopping for loved ones, scammers are out trying to steal their valuable information.
Some scams are done via hardware, while others can be done online.
Here are nefarious activities you should be aware of, especially during the holiday season.
According to the FBI, skimming involves illegally installing devices on or inside ATMs, point-of-sale (POS) terminals, or fuel pumps to capture card data and record cardholders' PIN entries.
Criminals then use this data to create fake payment cards, enabling them to make unauthorized purchases or withdraw funds from victims' accounts.
While credit card skimmers are meant to go unnoticed, there are methods to detect them to safeguard your credit card information and help prevent identity theft. One effective strategy, according to LifeLock, is the SCAN method, which guides you on what to check for when using an ATM or other unattended POS terminals.
If the machine appears suspicious, report it to an available clerk if one is near and find another location to use.
If you're getting weird texts and phone calls and phone numbers you don't recognize, there could be smishing attempts to scam you.
Smishing is a form of phishing, the fraudulent practice of sending messages disguised as a reputable source to induce individuals to reveal personal and/or financial information, such as social security numbers, credit and debit card numbers, and account passwords.
Smishing, specifically, is done through text messaging.
A victim of smishing typically receives a deceptive text message from a scammer pretending to be a government agency, bank, or other institution, like the USPS.
If you believe you have received a deceptive message from a sender disguised as the USPS, report the message via email to [email protected]. Take the following steps to file a report:
The U.S. Postal Inspection Service will contact you if further information is needed.
If you receive a smishing message unrelated to the USPS, forward the message to 7726 and file a report with the Federal Trade Commission or the FBI's Internet Crime Complaint Center.
Holiday scams: Did you get a package you didn't order? It may be a brushing scam.
Yes, the USPS offers package tracking via text message, but customers must register to initiate the service. The USPS does not send tracking texts or emails without a customer requesting them, the U.S. Postal Inspection Service states.
Depending on the information requested, tracking texts from the USPS may vary, but generally, all texts include the following:
Per the USPS, an example text message for an expected delivery may look like this:
USPS 01123456789123456789, Expected Delivery by: Monday, September 11, 2017. Reply STOP to cancel.
USPS tracking texts never include clickable links.
People can request text message tracking by sending their package's tracking number to 28777 (2USPS). The reply will contain the latest tracking update.
Individuals seeking more specific tracking information should send the package's tracking number to 28777, along with one of the USPS's keywords. Keywords tell the USPS what information an individual is looking for, such as expected delivery, when and where a package is available for pickup, and all past activity related to the package.
A list of keywords is available on the USPS website at usps.com/text-tracking/welcome.htm.
Brushing is another type of fraud scammers may use during the holiday season.
Brushing is when a person receives a package containing items not ordered or requested by the recipient. While the package may be addressed to the recipient, the package often doesn't include a return address. The intention of brushing is to give the idea that the recipient is a verified buyer who has written positive reviews online. Hence, the scammer is writing fake reviews in your name. Fake reviews help boost product sales.
While brushing may appear like a victimless crime, the reality is that the recipient's personal information may have been stolen. A fake review may also encourage others to purchase items that aren't worthy of a glowing rating.
If you think you may be a victim of brushing, there are several steps you can take. If you have not opened the package, write "RETURN TO SENDER" on the box, and the USPS will take care of it at no charge. You can also throw away the package, or if you like what's inside, you can keep it. It's legal to keep unsolicited merchandise.
But perhaps most importantly, change your account passwords, closely monitor accounts for unexpected activity, and notify authorities.