Scam warning: REALTORS® being targeted for gift card spear phishing attack
At a glance (2 minutes)
- Scammers are impersonating brokers, office managers, and other people in authority to ask salespeople to purchase items like gift cards for them.
- Always double check email addresses and phone numbers from requests like this, and verify directly with the person making the request.
We’ve heard reports of scam artists targeting REALTORS®, asking them to buy gift cards on behalf of their Brokers or office managers.
This scam is a “spear phishing” attack, where the scammer attempts to mimic a person of authority in an office looking for one of their salespeople to purchase a gift card on their behalf – typically through text message or email.
They then ask for either the details on the serial number of the card, or a photo of the card. Using this information, they can cash in the card online.
Be vigilant, verify all requests
Scam messages often come with spelling mistakes and poor grammar and punctuation. They also often appear to come from unfamiliar phone numbers with strange patterns and area codes or email addresses with misspelled names or incorrect domains.
A spoofed or spear phishing message that appears to come from someone you know usually lacks that person’s tone or includes an out of character request. If you get a request like this, always follow up with the person directly.
If you think the message might be legitimate, respond with something like “I’m sorry but I don’t open hyperlinks or attachments from strangers. Please text me the address of the property you’re interested in and I’ll be happy to discuss further.”
Tips to avoid being scammed
Cyber criminals can use a variety of tactics. Here are a few cyber security tips you should always keep in mind:
- Keep your smartphone, computer, and other devices updated. This helps ensure that your device has the latest security patches.
- Only use trusted Wi-Fi connections and be suspicious of any network that does not require a password to connect.
- Take the time to change any outdated or simple passwords. Use strong, unique passwords on all your accounts.
- Be careful not to overshare on social media. Consider anything you post to be public information.
- Keep an eye on the activity in your banking and credit card accounts. Also, be sure to monitor your credit report on a regular basis.
- Be suspicious of emails you receive about online purchases. Check the status of your order directly on the website that you purchased from.
- If you receive a holiday greeting card in your inbox, verify the sender before clicking the link to view the card.
- Pay close attention to the websites that you order from. Only shop on websites that you know and trust.
- Watch out for giveaways and contests. Remember that if something seems too good to be true, it probably is.
