Idea Box: Beware of Online Scams: Protect Yourself, Your Business and Your Employees
We all want to think we can avoid online scams, but AI is making scammers more creative. Without you knowing, hackers can access your email and online accounts, as well as money wiring apps like Venmo or PayPal. While there are fraud protection programs you can pay for to monitor online activity. It’s still important to be aware of the newest ways scammers can access your information and protect yourself from these scams.
In December 2024, Experian credit monitoring posted an article about the top scams to watch out for in 2025 and how to avoid getting duped. This information is good for small businesses as well as all employees to keep their personal information, accounts and families safe. While there are many ways scammers are committing fraud, below are just a few to watch out for:
1. AI Scams – While AI has its perks, the ability to write more convincing scam emails and texts is not one of them. With AI photo generation and words, scammers are sending emails that sound more natural and convincing than ever. They can even imitate the voice or live video of someone you know.
If you get a random email or text that seems to be “phishing” for more information, click on the email address or phone number of the sender. Do not respond. Does it look like a legit address? If not, then block that sender and delete the message. Do not click on links within the email because this can start a download of malware. If you’re still not sure, go to the website of the company they are impersonating. There should be some way to contact the company (i.e., PayPal, Venmo, etc.) to verify whether or not this is a real message. Legit companies won’t ask for personal information to be sent over text or email.
2. Imposter Scams – Scammers are trying to impersonate a relative, loved one, or even a celebrity. This happens on social media frequently. Someone contacts you on private messenger for funds or information, and it doesn’t seem like something that person would normally do.
Always double-check the sender before responding to the email, private message, or contact. If the person is asking for money, it would make more sense to make a phone call for legitimacy versus sending a text or email. Never send personal banking information through email, text, private message, etc. Experian suggests creating a family password so that if someone should reach out to you and you aren’t sure if it’s real, they would need to use the family password to prove their identity.
3. Phone Scams – There are now robocalls that attempt to offer timeshares or warranties. Scammers can manipulate you to download an app to gain more access to your phone. QR codes can be rigged to make fake purchases or have you enter private information. Thieves are SIM swapping, which also allows access to your phone. Bots are controlling OTP (one-time passwords) by mimicking websites and sending codes to trick people into sharing codes, allowing scammers to access your account.
If someone contacts you who you don’t know, don’t respond or click on any information. You can always contact the organization directly to see if it is a real call. Log in to your Venmo or PayPal and double-check contact information (phone, email, bank account) to make sure the information has not been added to or altered. Turn on all alerts for notification should someone you don’t know make changes to your account.
Another way to protect your information is to regularly change your passwords on online accounts. Make them different passwords, or use a password program like Passkey to create passwords that can be stored and secured as you log on to a particular website. You can also turn on two-factor identification so that once you log on to a site, the site will either send you an email or text you with a code to verify.
Another suggestion for regular protection is to log on to email accounts and find the section in settings that lists devices that have access to your email. You may be surprised to find a device you don’t recognize that needs to be deleted immediately.
While it can be time-consuming, spending an extra few minutes to ensure your personal security is never a waste. If you have ever been scammed, the hours it takes to undo (if possible) the damage makes spending a few extra minutes worth it.