THE EMAIL YOU RECEIVED MAY BE FRAUDULENT: "PHISHING" SCAM USING BBB NAME
07/13/2008
London, ON - The Better Business Bureau is warning Businesses and Consumers of a (phishing) scam that is currently using the BBB Name and Logo. Fraudulent emails containing malicious links and viruses have been sent to businesses and consumers around North America claiming to contain information on a complaint filed with the Better Business Bureau. Your local BBB has received 50 calls in the past few days, although the calls started about a month ago. The emails claim to contain information on a complaint filed with the Better Business Bureau. None of the BBB's computer or email systems are involved in this hoax. The BBB and law enforcement authorities are working together to stop these continued attack.
The email reply address is fake, like those listed below. While phishers constantly change their tactics to date they have been using addresses similar to these for your return mail.
complaints@bbb.org, operations@bbb.org, consumer-complaints@bbb.org, fraud@bbb.org, idtheft@bbb.org.
Samples of the emails are:
"This is an automated email that confirms the registration of your complaint case # filed September 17/2007 concerning Online Identity Theft. While the BBB Online does not resolve individual consumer problems, your complaint helps us investigate fraud; land can lead to law enforcement action."
Or
"This is an automated email that confirms the registration of your complaint case number - filed by (Customer name) on September 23/2007 against (your company name) While the BBB does not resolve individual consumer problems, this complaint helps us investigate fraud, and can lead to law enforcement action."
There are many variations to this email but they are requesting you click on the attachment to see the complaint or for more information. The problem lies in this action. By opening the attachment the "phisher" can implant a malicious code or virus in your computer and then can steal information from your computer.
How to protect yourself: Do NOT click on any of the links or open any of the attachments.