# data[].attributes.headline
SCAMS on the INTERNET: Types, Advice and Where and Who to Go

# data[].attributes.subject
SCAMS on the INTERNET: Types, Advice and Where and Who to Go

# data[].attributes.body
"Fishing", alluding to the attempt to make users "take the bait" and who practices it is called phisher. In the world in which we live, we have at our disposal a tool that is changing the way of understanding life and business.
Internet, the network of networks, due to its ease of use and proximity, increases the number of operations and monetary transactions that are carried out but, unfortunately, the number of scams that are discussed through this medium as well.It is discovered in Madrid the existence of cybercriminals who supplanted the Police and the General Society of Authors, SGAE, through a virus that blocked the user's computer and demanded the payment of a fine of 50 euros for supposedly having downloaded songs from illegal way

In Granada, the appearance of four types of scams in job offers through the Internet is detected.

In Toledo five people were arrested for selling mobile phones over the internet that once paid, by money order or deposit account, never sent
related to phishing, additional protection methods are required. Attempts have been made with laws that punish practice and campaigns to prevent users from applying technical measures to programs. Phishing methods Phishing can occur in several ways, from a simple message to your mobile phone, a phone call , a website that simulates an entity, a pop-up window, and the most used and known by Internet users, the reception of an email. Let's see what forms of "fishing" there are: SMS (short message): The reception of a message where your personal information is requested. Telephone call: You can receive a phone call in which the issuer impersonates a private or public entity to that you provide private data. A clear example is the one produced these days with the Tax Agency, which warned that some people are calling taxpayers in their name to ask for data, such as their current account, which they then use to charge them for money. Web page or pop-up window: It is very classic and quite used. In it, it is simulated by visually impersonating the image of an official entity, companies, etc., seeming to be the official ones. The main purpose is for the user to provide their private data. The most used is the "imitation" of bank websites, the resemblance being almost identical but not official. Nor do we forget fake websites with flashy lures, in which unreal offers are offered and where the novel user provides all their data, an example was the one discovered by the Association of Internet users and denounced to the State forces: Web-Trap of recharges of mobiles created to steal

banking

Phishing BBVA

Phishing Box Madrid 1

Electronic mail: It is the most used and best known method by Internet users. The procedure is the reception of an email where they SIMULATE the entity or organism they want to impersonate to obtain data from the new user. The data is supposedly requested for reasons of security, maintenance of the entity, improve your service, surveys, confirmation of your identity or any excuse, for you to provide any information. The mail may contain forms, false links, original texts, official images, etc., all to be visually identical to the original website. They also take advantage of vulnerabilities in browsers and email managers, all with the sole purpose of the user entering their personal information and unknowingly sending it directly to the scammer, so that they can then use it fraudulently: stealing their money, making purchases, etc. .

Phishing Hotmail

Phishing Gmail 1

Phishing Gmail 2

Types and modalities of phising

Smishing: It is a computer term to denominate a new type of crime or criminal activity using techniques of social engineering employee text messages directed to the users of mobile Telephony.
Vishing: It is a fraudulent criminal practice where the Voice over IP Protocol (VoIP) and social engineering are used to deceive people and obtain sensitive information through telephone calls, such as financial information or useful information for identity theft. . The term is a combination of English "voice" (voice) + phishing. A clear example is the one produced with the Tax Agency, where it was noticed that some people were calling taxpayers in their name to ask for data, such as their current account, which they then use to make monetary charges.
Pharming: The exploitation of vulnerability in the software of the DNS servers (Domain Name System) or in the computers of the users themselves, which allows an attacker to redirect to domain name to another machine. In this way, to user who enters a certain domain name that has been redirected, will access in his Internet browser to the webpage that the attacker has specified for that domain name.

Most common scams on the Internet

Surveys in social networks: It is one of the most reported according to the consumer organization FACUA. They are often deceptive ads that arise while browsing social networks, where you are asked to perform a personality test or a satisfaction survey. They request the mobile number and they register the affected person in a "premium" message service, where they pay to receive advertising on their mobile. It can cost more than 60 euros per month and in most cases, the content that has been hired (links, polytones ...) does not even reach your phone.
False job offers: Concentrate 25% of Internet scams according to the National Institute of Communication Technologies (INTECO). There are several modalities. The most common is one in which the job they offer entails to payment in advance of small amounts, 40, 50 euros, for administrative expenses or sending documentation. A variant of this scam, and very dangerous, is when the victim acts as a "bridge" for the scammers to launder money without their knowledge. In the police jargon is known as «mule phising» Use the account number of the scam to make transfers to other accounts, for example of 3000 euros, in exchange for receiving a commission of 500 euros.

Nigerian letters: This scam consists in deluding the victim with a non-existent fortune that he has inherited and persuading him to pay a sum of money in advance, as a condition for accessing his prize. The handwritten letters are giving way to emails sent by scammers, mainly from African countries such as Nigeria, Sierra Leone or Ivory Coast.
Purposes for illegal downloads: This type of scam has recently been launched and is a massive shipment of malicious emails, on behalf of the Police, which requires the payment of 100 euros for having "allegedly" accessed the illegal content of pages of child pornography. From this scam, the recent virus that supplanted the SGAE and that consisted of demanding ends for downloading songs has emerged.
Sale of products online: The network is a great showcase where you can buy everything but sometimes some of those products are hooks of scams. It is very common the scam of the car for sale second hand, ads that look like bargains but then hide a surprise: "you have to advance to money for the transfer of the vehicle by ferry, since it is in the United Kingdom."
In addition, it is very typical also during the summer holidays, cheating with apartment rentals that do not exist and where the interested enter a signal in advance that never recover.

Tips to avoid scams on the Internet

Rules to defend against Phishing

Never stop applying the necessary patches in your operating system, thus avoiding the exploitation of the known vulnerabilities of the software. It installs the patches of software manufacturers after distribution, as hackers are able to quickly create malicious programs using prefabricated components to exploit the vulnerability before most people download the fix. A computer with all the patches behind a firewall is the best defense against the installation of Trojans and spyware.
Download the latest version of your browser to ensure it is also fully up to date and use the latest technologies.
The origin of an e-mail, the location of a page and the use of SSL encryption can be falsified. The padlock icons of browsers can also be Falsify You must be sure that the SSL is being used (look for "https:" in the URL) and verify the domain name of the site to know if the site is legitimate. However, due to the tricks of hackers, it is not possible to rely solely on these verifications as absolute safety signals of the communication or the site. Never click on links in an e-mail and always ignore the emails that request actions. , such as "Your account will be closed". Call the company in question through a phone number obtained outside the email. Be very careful when downloading any software from the Web: Spyware can "come up" from legitimate programs, or the software may contain capture programs of typing or screen scrapers to steal your information. You should completely avoid the free screensavers and other gifts. Also be careful when opening e-mail attachments - a video, graphic or PDF - even if it is from someone you know. A virus scanning software will protect you, defining if there are hidden viruses before you open the attachment. Use programs that automatically verify if a URL is legitimate before you access the site: You can also verify the legitimacy of a certain URL with a WHOIS search, such as www.DNSstuff.com, which has a search tool that displays domain / IP contact information for virtually any country. It uses an Internet access provider (ISP) that implements anti-virus technologies and policies. strong spam and anti-phishing: For example, AOL blocks known phishing sites so that customers can not access them. The SpamHaus organization lists the 10 worst ISPs of the moment in this category. Examine your bank and credit card statements after receiving them to verify if there is any unauthorized debit. If your account statement is delayed by more than two days, call your credit card administrator or your bank to confirm your mailing address and your balances. You have to be one of the first to adopt new technologies: Banks and Credit card companies are using new confirmation techniques to make online transactions safer. Therefore, do not stop taking advantage of them. The IT sector is also working on authentication technologies such as Sender's ID, Domain Name and S / MIME to drastically reduce the effectiveness of phishing attacks. Protect your computer with good security software and keep it up to date. : Hackers have databases that contain millions of e-mail addresses. They attack the vulnerability of e-mail applications and Web browsers, in addition to the vulnerability of design of certain sites. Who to turn to in case of fraud In case of suffering a scam or fraud over the internet through a website, before proceeding with a formal complaint to a government entity, the ideal is to collect all possible evidence or information exchanged with the alleged representative of the page, call emails, website advertising, vouchers, invoices, company data (if it was specified in the web page), etc. If you do not have a way to contact any representative of the web, and they do not give you a satisfactory solution, then formalize the report to the Police or the Civil Guard of your country. Both security entities have specific units to combat frauds and crimes through the Internet, have computer specialists who conduct investigations to follow the clues and determine the identity of the offenders. Visiting the respective website, you can find models and / or forms to proceed with the complaint, in this way they will facilitate the work. In the case of Spain, for example, the form to report fraud over the Internet to the police is as follows: Form to report fraud over the InternetRemember these detailsIf the scam was made through a website where users post their products and / or services in the form of an ad, ebay or free market, go to the site and see if they have any system of consumer protection. For example, eBay offers a system of dispute resolution and payment protection to people who have purchased products on their website with paypal. Another way to report these crimes or frauds online is to go to the consumer's office in your country (the names vary in each place). As I have said before, you must collect all the evidence that thongs at hand, it is vital, so that you have all the possible information regarding the site and the communication you had with them. There you submit a complaint for breach of service. If you can, go to a Consumers Association to receive advice and you can even file a lawsuit. If you used a bank for the transaction, you haves the option to try to return the purchase charge, for this you must go to the bank and ask for this refund even if it is a card payment. If the company has its headquarters in your country of origin you can have more luck with the claim, but if the company is foreign you have it more difficult, since the laws of your country are not applicable. In this case it is best to try to return the charge via bank. If you used another form of payment, always keep those receipts to go and report them to the police, although you will hardly recover your money. It is always recommended to distrust those sellers who only offer the Transfer as a form of payment and they do not give a contact phone or avoid talking on the phone under any excuse. Money should never be sent through Western Union, MoneyGram, Bidpay or similar, since transactions with strangers can not be guaranteed. Police data General Direction of the Civil Guard (Guardiacivil.es) Computer Crimes GroupEmail: crimestelematics @ guardiacivil .org (Send email) Technology Research BrigadeEmail: crimen.tecnologicos@policia.esSend emailWhere to learn moreUnited States Federal Trade Commission: The FTC works to prevent fraudulent, deceptive and unfair business practices in the market and provide information to help consumers to identify, stop and avoid such practices. To file a complaint or to obtain free information on topics of consumer interest, visit ftc.gov/consumer or call toll-free 1-877-FTC-HELP (1-877-382-4357); TTY: 1-866-653-4261 For more information, see the How to File a Grievance video available at ftc.gov/videosenespanol. The FTC enters complaints filed by consumers into a secure database and investigative tool called the Sentinel Network of the Consumer that is used by hundreds of compliance agencies of civil and criminal laws in the United States and abroad. Reception Center Internet Crimes Complaints: The Internet Crimes Complaint Center (IC3) is a group made up of the FBI and the National White Collar Crime Center that functions as a reception instrument. of complaints related to crimes perpetrated on the Internet to promote the investigation and development of complaints and refer criminal complaints to competent security agencies at the federal, state, local or international level and / or to the corresponding regulatory agencies to carry out the investigation consider relevant. Visit www.ic3.gov (in English). US Department of State: The mission of the US Department of State. is to establish a safer, more democratic and prosperous world for the benefit of the American people and the international community. As part of that mission, the State Department seeks to minimize the impact of international crime on the United States and its citizens, among these crimes include cross-border scams perpetrated on the Internet. For free information, visit www.state.gov.

Internet is a jungle, be very careful and avoid scams