Tell Them To Go Phish!, Part 3
I get a client on the line, in her 50’s. We do the normal security checks, and she then asks her question.
Caller: “Yes, you sent me an e-mail, but I have trouble filling in the form.”
Me: “I am looking at your file, but I see no e-mail. What was it about?”
Caller: “Oh, it’s that e-mail that you heard from the national tax office (Belastingdienst) that I can get a refund on my income tax and that I need to give both my bank account and my Tax number.”
Our company deals with housing and has nothing to do with refunds on income tax. Also, I have no idea what a tax number could be since that is linked to our Social Security numbers.
Me: “We don’t deal with income tax. Are you sure the e-mail was from us?”
Caller: “Of course, it says your company’s name right up here! So, I clicked the link, filled in my bank account and what I thought was my tax number, but the page said ‘error’ or so and asked me to do it again. But I am no good with computers; why is your company making this so difficult?”
Me: *Trying not to scream.* “Ma’am, that is a phishing e-mail! We don’t need your bank number; we already have it! And if you were to get a refund from your income tax, the national tax office would contact you. And they also know your bank number already!”
Caller: “A what mail?”
Me: “A phishing e-mail. Criminals try to trick you into giving them your bank numbers, so they can steal your money.”
Caller: “Oh, no, no, I have security from [Provider]. They wouldn’t mail me.”
Me: “That security can’t stop all e-mails.”
Caller: “They can’t? But… so they can e-mail me? Are they allowed to do that?”
Me: “They are not allowed to do that; that’s why they are criminals. Listen, if they have your bank number, one of the most used scams is that they call you, pretend to be your bank, and for security reasons they will send an employee or cop to your home to pick up your card. And for security reasons, they will also ask your PIN (code). Do not believe them; they are the criminals. Just call the cops.”
Caller: “Oh dear… I didn’t know about all of this! You’d think they’d mention this in the news or so…”
I hold my tongue because this is a very frequent news item.
Caller: “Well, I guess I will just delete the e-mail then?”
Me: “It’s best you do, ma’am.”
Caller: “Thank you. Oh, I now have something exciting to talk about when [Name] comes over for a cup of tea.”
Me: “You do that, ma’am, let them all know how you foiled their plans!”
Caller: “I will! Those nasty crooks!”
We say goodbye, and the woman hangs up.
I rush to our security officer to inform them about a phishing email in our name. Within ten minutes, a message is on our website. Our communications department is looking into a video that’s easy to understand for as many people as possible, language barrier or not.
I then went to a coworker who deals with people who might need assistance (i.e., dementia). While I do not think this lady was in mental need, I do think she was sheltered and might need some help in the digital plane.
Related:
Tell Them To Go Phish!, Part 2
Tell Them To Go Phish!
