COVID-19- Beware of Contact Tracing Imposters

The Federal Trade Commission (FTC) has recently issued a warning about scammers sending text messages posing as local or state public health officials conducting contact tracing.

Local or state public health investigators conduct contact tracing by calling people who have been contacted by someone who has come down with certain diseases such as COVID-19. The contact tracing comes after the investigators have interviewed the patient with COVID-19 to find out where they have been and who they have been in contact with. The goal of the investigation and the contact tracing is to stop the spread of the disease.

During the contact tracing call, the public health staffer notifies individuals of the possible exposure. They also provide guidance on how long to quarantine, symptoms to watch for, and what to do if they fall ill. Public health workers are required by law not to reveal the identity of the person with COVID-19 and to protect the personal health information of the people that they call.

While conducting investigations, staffers will ask for date of birth, address, gender at birth, race, and ethnicity. They may also ask for information about where you work, your duties at work, travel history, and information about your illness. Interviewers will not ask for Personally Identifiable Information (PII) such as your Social Security number, financial information, or immigration status.

Initial contacts are almost always conducted with a phone call. Investigators may follow up with text messages or phone calls to ensure home isolation is going well, answer questions, or help with referrals.

The FTC says it has received complaints of scammers sending text messages, pretending to be public health investigators, with links to click on. You should be suspicious of any unexpected text message claiming to be from a public health district. And be suspicious of clicking on any links from unexpected text messages.

Snohomish Health District:

www.snohd.org/blog.aspx?iid=33

The Seattle Times:

https://www.seattletimes.com/seattle-news/health/washington-trains-more-than-2100-callers-as-it-expands-contact-tracing-to-battle-coronavirus/

Federal Trade Commission:

https://www.consumer.ftc.gov/blog/2020/05/covid-19-contact-tracing-text-message-scams

COVID-19 UTILITY SCAM- PUD Warns Customers

The Snohomish County PUD issued a warning today about scammers posing as PUD officials demanding payment of alleged late electric bills.

According to a Facebook post, the PUD has received several reports in recent days of the scammers calling PUD customers telling them that if they did not pay within 30 minutes, the PUD would disconnect them.

The PUD says that it will not call customers with such threats. If you receive a call like this hang up. You can verify anyone calling you or at your door who claims to be from the PUD by calling the PUD’s customer service number, (425) 783-1000.

Snohomish County PUD:

https://www.facebook.com/snopud/photos/a.10150288598688148/10157254539673148/?type=3&theater

GOLD JEWELRY SCAM- They’re Baaaaaaaaack!

Everything is not coronavirus related. You may remember press reports last year of groups of people stopped at off or on ramps to the freeway asking motorists for money so that they can fill up their gas tank. Sometimes they offer to sell a “gold” bracelet, necklace, or other jewelry in trade. The gold jewelry turns out to be fake. Sometimes there are children in the car. They may also have approached people in shopping parking lots.

Well, apparently, they are back. In recent days, there has been talk of citizens being approached by people asking to trade jewelry for gas money along freeway ramps and in parking lots throughout Skagit and Snohomish Counties. Some areas where they have been seen, as reported on social media, include Arlington, Edmonds, Lynnwood, Everett, Bothell, Smokey Point, Marysville, Totem Lake, and Mill Creek.

This has become enough of a problem that Washington State Patrol (WSP) has begun an investigation. In a posting, the WSP has described the activity as that of a “known criminal enterprise” and “… a nationwide issue that has trickled into our area.”

To help with the investigation, the WSP is asking for any information about this enterprise, including dash-cam video of the incidents.

If you have any information that can help the WSP please contact WSP Trooper Heather Axtman at heather.axtman@wsp.wa.gov or (425) 583-9978.

Here is a description of how the gang operates from reports from last year,

KIRO TV:

https://www.kiro7.com/news/local/wsp-suspects-selling-fake-gold-on-freeways/953439157/

COVID-19 IDENTITY THEFT- What To Do If You Are a Victim

With all of the reporting about scammers filing for unemployment, creating fake web sites mimicking the Employment Security Department web site, and posing as contact tracers, your identity could be at threat to be used to steal from the federal or state governments, or for many other nefarious purposes.

If you do become a victim of identity theft there are definitely things that you need to do to protect yourself. In case your identity has been used in unemployment theft take the following steps,

·         Get organized, keep a file. Have a file folder where you can keep notes about the incident, who you have contacted, reports that you have received, any police reports you have filed, emails, and any other documentation related to the incident.

·         Contact your employer’s human resources department.

·         Contact the Washington State Employment Security Department.

o  Phone- (800) 246-9763

o  Online- https://esd.wa.gov/unemployment/unemployment-benefits-fraud

·         File a police report with your local police department, online or with a non-emergency number.

o  Snohomish County Sheriff’s Office-

§  Online Crime Report- https://www.snohomishcountywa.gov/301/File-an-Online-Crime-Report (Note: the online reporting web page will ask you to call 911 if you are reporting that your identity was stolen)

§  Non-Emergency Number- (425) 407-3999

o  King County Sheriff’s Office-

§  Online Crime Report- https://www.kingcounty.gov/depts/sheriff/on-line-reporting/on-line-reporting.aspx

§  Non-Emergency Number- (206) 296-3311

·         Contact the three major credit bureaus. Tell the bureaus that a fraudulent unemployment claim was made with your identity. Have the case number of the police report ready to give them. Also, have one of the credit bureaus place a fraud alert on your identity.

o  Experian- (888) 397-3742

o  TransUnion- (800) 680-7289

o  Equifax- (888) 766-0008

o  Get free credit reports

§  https://www.annualcreditreport.com/index.action

§  Phone- (877) 322-8228

o  Consider a credit freeze- https://www.consumer.ftc.gov/articles/0497-credit-freeze-faqs

·         File a report with the Federal Trade Commission (FTC).

o  This FTC web site let you report an identity theft and has checklists for recovering from ID theft-

ohttps://www.identitytheft.gov/

·         Consider setting up an IRS account.

o  https://www.irs.gov/payments/view-your-tax-account

For information on protecting your identity, check out the end of this article,

The Seattle Times:

https://www.seattletimes.com/seattle-news/what-to-do-if-your-name-is-used-by-unemployment-fraudsters-taking-advantage-of-coronavirus-crisis/

COVID-19 UNEMPLOYMENT SCAM UPDATE- Crime Ring Targets Washington Unemployment Payments

Brian Krebs of the Krebs on Security blog reports that a well-organized Nigerian crime ring is targeting the Washington State unemployment system, as well as unemployment systems in other states, to steal funds intended for legitimate unemployment claims.

Brian Krebs is a long-time journalist who specializes in cyber-security issues.

A Secret Service internal memo says that the ring uses Social Security numbers and other personal information from identity theft victims to file for unemployment payments. The memo also notes that “a substantial amount of the fraudulent benefits submitted have used PII from first responders, government personnel and school employees.”

The ring has unemployment checks sent to a variety of addresses throughout the United States. Oklahoma addresses seem to be popular destinations for the checks. Krebs on Security quotes an Oklahoma Bankers Association official as saying that earlier this week member institutions started seeing transfers of funds tied to unemployment claims for people in Washington. Many of the transfers were in the $9,000 to $20,000 range with one transfer for over $29,000.

The ring apparently uses money mules to launder the funds. The mules are recruited from online romance scams or work from home scams that prey on lonely people or people in need of money. In the case of a romance scam, the fraudster will ask the victim to do a favor of accepting some funds in their bank account, often couching it as for a charitable organization or purpose. Then the mule forwards the funds to an account controlled by the fraudster. This intermediate step launders the money, taking risk away from the fraudster, placing the mule at risk.

Other states that have been affected by this scam so far include North Carolina, Massachusetts, Rhode Island, Oklahoma, Wyoming, and Florida.

This activity shows that current scam organizations have the capability to quickly take advantage of a new situation such as COVID-19. The method being used is similar to scam operations that file fraudulent income tax returns with the IRS to receive refund checks.

Shutting down an operation like this may be difficult, even for a national law enforcement agency like the Secret Service. The scammers are in a foreign nation where our law enforcement does not have jurisdiction. The nation may not cooperate or may not be able to cooperate in helping shut down the ring. The Secret Service may be able to discourage potential mules by revealing to them the true nature of their relationship or if necessary, placing charges against them. But the scammers can find other victims to do their dirty work for them. Another strategy is for each state to tighten up their security to not allow easy access to their unemployment system.

                                                                          

Krebs on Security:

https://krebsonsecurity.com/2020/05/u-s-secret-service-massive-fraud-against-state-unemployment-insurance-programs/

The Seattle Times:

https://www.seattletimes.com/seattle-news/crime/u-s-attorney-urges-washington-to-fix-vulnerabilities-that-may-have-made-state-the-top-target-for-unemployment-benefits-theft/

FBI:

https://www.fbi.gov/file-repository/money-mule-awareness-booklet.pdf/view

COVID-19 CONTACT TRACING SCAMS- Another Way for Fraudsters to Get Your ID

The Olympia Police Department has sent out a warning about scammers posing as contract tracers to obtain personal information.

This is the first indication of scammers possibly using the contact tracing system to try to conduct ID theft. In the last week or so, police agencies and the press have reported scammers filing for unemployment in other people’s names and setting up fake Employment Security web sites. If reports continue, this will be a demonstration of an additional technique in the fraudsters bag of tricks to steal your identity and your money.

Olympia PD warns that if someone calls you claiming that they are a contact tracer and they ask for your Social Security number or a credit card number, they are a scammer. Hang up!

Olympia PD also reminds citizens that contact tracers usually call, they do not text or email. So be suspicious of any texts or emails claiming to be from a contact tracer. DO NOT click on any links from these texts or emails.

Contact tracers conduct investigations to slow and prevent the spread of infectious diseases. In Washington State, most investigations and contact tracing is conducted by local health districts. When a health district finds out that someone has contracted an infectious disease, such as COVID-19, they will ask the individual where they have been and who they have been in contact with. In the case of COVID-19, they want to know about any one the individual has been in contact with within 6 feet for 10 minutes while they were infectious. Interviewers will then call the contacts to inform them about a potential exposure to COVID-19 and to suggest that they self-quarantine.

The Washington State Department of Health says that interviewers will ask for your date of birth, address, gender at birth, race, and ethnicity. They will never ask for your immigration status, Social Security number, financial information, or marital status.   

KIRO TV:

https://www.kiro7.com/news/local/police-warn-contact-tracing-scams-washington/53KH4FWLDJHPPBF77F3R5NJ7KA/

Washington State Department of Health:

https://www.doh.wa.gov/Emergencies/NovelCoronavirusOutbreak2020COVID19/CaseInvestigationsandContactTracing

While this article is oriented toward Florida, it does give a very good description of how contact tracing works and what to look for to determine if the call is legitimate or not,

Miami Herald:

https://www.miamiherald.com/news/coronavirus/article242682501.html

COVID-19 UNEMPLOYMENT SCAMS- Watch for Fake ESD Web Sites

The Washington State Employment Security Department (ESD) reports on its Facebook page that it is receiving reports of fraudsters setting up fake web sites impersonating the ESD web site.

Fraudsters set up fake web sites to harvest personal information from unsuspecting victims. Mimicking the ESD web site is a perfect tactic during this time of the COVID-19 and the associated economic downturn. With the overload of the ESD phone number and web site, it is easy for a fraudster to get some personal information from people looking for the real ESD web site.

The fact that fraudsters are setting up a fake ESD web site shows that they are using a multi-pronged approached to take your money and your identity. Faking the web site is on top of filing for unemployment payments in other people’s names and shows that they will use as many techniques as they can to take advantage of COVID-19.

ESD says that it will never ask for your personal information, such as your Social Security number, outside of its own, secure web site. It recommends that you check the URL before entering any information. The URL for the ESD eServices site is

                      https://secure.esd.wa.gov/home/

Also, if you think that you have become a victim of unemployment fraud go to,

                      https://esd.wa.gov/unemployment/unemployment-benefits-fraud

Washington State Employment Security Department:

https://www.facebook.com/WashingtonESD/photos/a.198714200253072/1938843506240124/?type=3&theater.

KING TV:

https://www.king5.com/article/money/your-money-your-future/unemployment-fraud-on-the-rise/281-e988f645-b08c-40a8-ae92-39e419f3c231

COVID-19 SCAMS- Unemployment Insurance Fraud

Scammers apparently are targeting unemployment payments to get money intended for honest citizens who need help. Taking a page from the IRS scam playbook where a fraudster files with the IRS for an income tax refund using someone else’s identity, press reports indicate that fraudsters are filing for unemployment in other people’s names. And sometimes they file with the names of people who are employed.

Several people have told the local press that they had received letters from the Washington State Employment Security Department (ESD) about their claims for unemployment benefits. Benefits that they did not apply for since they have jobs. The ESD notifications were the first indication that anything was wrong.

In the IRS scam, the fraudster tries to file for income taxes in the name of someone else before that person files for their income taxes. Using that person’s personal information, the fraudster files a fake return that results in a refund sent to the fraudster. Often the victim has no idea that anything is wrong until they receive a notice from the IRS that it has received a duplicate tax filing from the taxpayer.

The Seattle Times cited several examples of people with jobs receiving notices about their unemployment claims from ESD. It did not have any examples of people out of a job, filing for unemployment only to find out that someone has filed in their name before them.

With ESD slammed with an unprecedented workload, sorting out the frauds from the real becomes much more difficult for the agency and its clients. The Seattle Times cited several examples of citizens trying to contact the agency only to find busy phone lines and no response to emails.   

The unprecedented amount of money available for unemployment compensation along with the backed-up phone lines and web sites provides a natural attraction to fraudsters to steal from the government and therefore the taxpayers.

How the fraudsters obtained enough personal information to file claims is a good question for police and the public. Meeghan Black of the Bellevue Police Department asked, “Was mail stolen, was it a phishing scam, can we nail it down somehow locally and try to go after these guys that way?” Another avenue is data breaches. In recent years there have been record numbers of data breaches from financial institutions, retail chains, hotels, etc. Often the personal data gleaned from such breaches is not used right away. Those who have stolen the data may sell it to fraudsters years later, on the dark web.

If you discover that someone else has filed an unemployment claim with ESD in your name notify ESD immediately. For information on how to notify ESD go to,

                      https://esd.wa.gov/unemployment/unemployment-benefits-fraud

To protect your identity, the Identity Theft Resource Center recommends,

·         Watching for fraudulent filings for nutrition assistance, Supplemental Nutrition for Women, Infants, and Children, medical coverage, etc.

·         If you can, place a freeze on your credit report with the three credit agencies.

·         Carefully monitor your bank accounts, credit cards, credit reports, etc.

KIRO TV:

https://www.kiro7.com/news/local/prolific-imposter-fraud-identity-thieves-filing-false-unemployment-claims-with-stolen-id/STH7COOBBNAVPM4SOYR5CZD3EE/

Seattle Times:

https://www.seattletimes.com/business/fraudsters-are-faking-washington-unemployment-claims-amid-coronavirus-joblessness-surge/

Identity Theft Resource Center:

https://www.idtheftcenter.org/covid-19-pandemic-leads-to-unemployment-benefits-identity-theft/?utm_source=web&utm_medium=social&utm_campaign=ITRCMaySocial

COVID-19 SCAMS- Nintendo Animal Crossing Scam

The Better Business Bureau (BBB) has issued an alert to gaming consumers to be wary of scammers while playing the new Nintendo game Animal Crossing: New Horizons.

 Animal Crossing is a social simulation videogame where you and potentially other game players can create your own town with human-like animals. A draw of the game is to be able to play with other players online. It has become a hit, with many Facebook groups exchanging information about the game.

As a result of its online popularity, the BBB has received reports of scams related to the game. Scammers, who play the game, will try to trade real world money for in game funds, particular characters, or other perks.

The BBB recommends that gamers following these tips when playing Animal Crossing,

·         Beware of “Real Life” Transactions - Scammers can and have created listings on eBay or in Facebook groups, advertising wanted characters or items for sale. Once you pay with your own money, not in-game currency, the scammer disappears, and you’re left without your purchased items.

·         Know Your Friends - Set boundaries with players you interact with online. Only provide travel codes (called DODO codes) or send “best friend” requests to people you know and trust in real life. The “best friend” designation gives players a greater ability to make potentially unwanted changes to your town.

·         Create a Safe Space - If you must invite a stranger to your island, fence off areas that you don’t want a visitor to interact with - such as flowers, fruits, and other objects you don’t want stolen.

If you have someone in your household or a friend or neighbor who plays Animal Crossing, please pass this information on to them.

Better Business Bureau:

https://www.bbb.org/article/news-releases/22301-bbb-tip-dont-be-double-crossed-by-nintendo-animal-crossing-scam

COVID-19 SCAMS- Fake Websites

Scammers continue to use the internet to try to steal your money and your identity. Recently, the Wisconsin Better Business Bureau investigated COVID-19 websites and found websites that appear fraudulent.

It found fraudulent web sites selling sanitizers, disinfectants, masks, and other related products.

It also found that the fraudulent websites are often created recently and keep contact information to the minimum. The websites are taken down quickly, presumably after collecting money and/or personal information.

Starting its investigation from complaints that it received, the Wisconsin BBB reported on three of the sites as examples. In two of the sites, complainants ordered masks and did not receive them after ordering. One of the sites has been taken off the web. The sites either listed no address or phone numbers or fake addresses and phone numbers.

The BBB recommends that you take the following precautions when looking for COVID-19 related products,

·         Know who you are dealing with.  Check spelling and domain names. Google the website to see if others have been complaining. Look for other tell-tale signs such as poor grammar, lack of information, and capital letters in the middle of sentences.

·         Ensure the website address begins with https://. Also, check the address bar for a “not secure” message. A trustworthy online seller will have a secure domain, keeping your information safe from hackers. While some fraudulent websites may use https you at least know that the signal between your computer and the website is protected from hacking.

·         Check the age of a website’s domain. Use a website like Whois to check whether a website was established recently. Because crises like the coronavirus provide new avenues for scammers to take advantage of the public, they will often establish new websites that match current events.

·         Check for an about page and a contact us section. Scammers are creative, but they don’t often take the time to fabricate a full brand history like you would find on a company’s website “about us” page. They may fabricate contact information, but BBB recommends ensuring the phone numbers and email addresses are both legitimate and responsive.

·         Phishing emails often lack personalization. Legitimate companies communicate with customers using their name, but scammers do not often know their victims. Many email scams will begin with a non-personalized salutation, like “Dear sir or madam.”

·         Check a business at BBB.org. Whether the website offers face masks or toilet paper, verify its legitimacy before you make a purchase or provide your personal information.

·         Always pay by credit card. When purchasing any product or service through a website, always use a credit card as your payment method. If you pay by credit card online, your transaction will be protected by the Fair Credit Billing Act. If the product arrives defective or does not arrive at all, you can dispute the charge on your credit card and temporarily withhold payment while the creditor investigates them.

Better Business Bureau:

https://www.bbb.org/article/news-releases/22205-bbb-alert-phony-websites-popping-up-during-covid-19-crisis

ZDNet:

https://www.zdnet.com/article/thousands-of-covid-19-scam-and-malware-sites-are-being-created-on-a-daily-basis/

KGO-TV, San Francisco:

https://abc7news.com/7-on-your-side-coronavirus-fake-websites-covid-19-warning/5995593/