Good afternoon, everyone.

Today I want to let you know about a specific type of recurring threat that has been reported to me recently by several people.

Current Threats

• Fake Text Messages (smishing attempts)
  • This type of attack happens, stops, happens, stops, etc.
  • These text messages appear to come from delivery carriers, banking or account alerts, government entities, and even your coworkers or boss.
  • The “sender” likes to use this attack method because they can be very brief in the message sent because that is what is expected of a text message.
  • The message has a sense of urgency in hopes that you will act instead of think.
  • If you receive something from a supposed delivery carrier, you should go directly to their known site and look up tracking information if you are expecting a package.
  • If you receive a message from what appears to be your bank or a credit card company, call their known number.
  • This is a bad time of year for receiving fake text messages from the IRS, but keep in mind this is not how the IRS will contact you.
  • If the message appears to come from your coworkers or boss the message will likely tell you not to call but, instead, reply to the message.
  • If you do reply, the sender will tell you that they are in a meeting but they need you to do them a huge favor and to be very discreet.
  • The favor usually is to go purchase gift cards, then send the numbers and codes via text reply only.
  • The key to remember for any of these supposed senders is to think before you act.
  • Do not click on any links in the text message.
  • Do not reply to the message.
  • No matter who the sender is claiming to be, please verify if it is who they say they are by using only a known phone number or email address.
  • Unfortunately, there is no way to report these through OIT like phishing emails.
  • You can report the fake text messages to the FTC by going to https://reportfraud.ftc.gov, though.
  • You should delete the message and use the Report Spam option if your carrier offers it.
  • Block the number, even though it was likely spoofed.
  • And remember that if you reply to a fake text message this confirms your phone number is active, making it likely that you will receive more fake text messages.

I thank each of you for all the work you do and for being so cautious when it comes to potential scams. Protecting the Institute’s data is greatly appreciated!

Sandy