Not long after the COVID-19 crisis began, there was an significant uptick in unwanted phone calls and emails with all kinds of schemes trying to defraud people. It continues today. Here is some great information that useful in today's environment as well as at all times. Be safe!
The New York State Office of Information Technology Services (ITS) would like to remind users that malicious actors will use the coronavirus (COVID-19) pandemic to deliver malware, to steal money and/or personal information, or to spy on you through your smartphone’s features. We ask that users remain vigilant to COVID-19 related scams.
As the state with the highest rates of COVID-19 infections, New York is seeing a significant spike in coronavirus scams. These scams are coming in the form of malicious websites, text messages, phone calls, and phishing emails that are being used to infect user’s machines with malware or to defraud the user.
Some recent examples include:
- Fake coronavirus-based websites, such as corona-virus-map[.]com, coronavirus[.]app, and vaccine-coronavirus[.]com.
- Phishing emails claiming to be from the Centers for Disease Control and Prevention (CDC) and other reputable organizations offering information on the virus in links or attachments.
- Phishing emails asking users to verify their personal and financial information for charitable contributions or to receive coronavirus-related benefits, such as economic stimulus checks, airline carrier refunds, or general financial relief.
- Fake text messages offering information on the virus or resources related to coronavirus relief, such as iPhones, payday loans, or counterfeit virus treatments.
- llegal robocalls pitching fake treatments or work-at-home schemes.
We recommend that users take the following precautions to protect themselves:
- Use trusted sources, such as legitimate government websites, for up-to-date, fact based information about COVID-19. Check for misspellings within a link - for example, an address that should end with .gov ending in .com or .org instead. (Note, the World Health Organization uses a .int domain.)
- Exercise extreme caution when responding to individual pleas for financial assistance such as those posted on social media, crowd funding websites, or in an email, even if it appears to originate from a trusted source.
- Be cautious of emails or websites that claim to provide information, pictures and/or videos.
- Do not open unsolicited emails or click on the links or attachments in those emails.
- Never reveal personal or financial information in an email or to an untrusted website.
- Hang up on robocalls. Do not press any numbers.