IC3 annual report for 2011 released

The Internet Crime Complaint Center (IC3), a collaborative effort between the National White Collar Crime Center (NW3C) and the FBI, has released its 2011 Internet Crime Report. You can view or download the document here (this requires a PDF reader…if you don’t have one, I recommend Foxit).

It can be somewhat dry reading (fancy title page notwithstanding), but it includes some interesting data. The number of complaints received by the IC3 topped 300,000 for the third year running, a 3.4% increase over 2010 (but still down from the peak in 2009).

Work-at-home scams continue to be one of the top fraud types reported, though FBI impersonation scams brought in large numbers as well. I have some questions about this statistic, though: is the ratio of FBI impersonation fraud to other types reported to the IC3 genuinely reflective of their overall ratio “in the wild” (that is, including examples not reported), or is the incidence of this particular type of fraud being reported much higher than for other types because, if you get an FBI impersonation fraud email and you know it’s a scam, if you run a Google search on the scam, it’s going to direct you to the IC3 or FBI websites, where you’re asked to report it to the IC3?

I may be splitting statistical hairs here, but I’ve got an email address that gets just about every spam, scam and 419 email in the world (lucky me, eh?), and I’ve only seen one or two actual FBI impersonation messages over the past few years. Work-at-home schemes, on the other hand, simply run riot in my spam folder.

In any case, it’s a good overview of what schemes are currently most active, and at a mere 26 pages, it’s nowhere near as dull as most government documents.

There are ways to earn money online; start by ignoring almost everything on the Internet

It’s easy to get bogged down in all the negatives when you’re writing article after article about scam and fraud prevention. “Here’s how not to get taken,” you tell people, and leave it at that.

However, the truth is that not everyone on the Internet is trying to steal from you.

Okay, most, but not everyone. The key is to be able to tell the difference.

I read a nice article from CBS News today (Work at Home and Make Money – REALLY!) that not only gives great tips on avoiding work-at-home scams, but actually offers suggestions of legitimate companies that can help you earn money from home. I’ve never really seen that before.

One of the things you’ll immediately notice is that none of these companies scream about anyone making $5,000 per week. In some cases, you have to have some pretty good knowledge of a topic, or even certification. In others, you’re basically selling your stuff on eBay (if it’s just old stuff) or Etsy (if it’s something vintage or handmade).

Nobody is getting rich off these systems. If it’s fabulous wealth you’re after, you’re going to have to be a lot more inventive. But if your goal is simply to supplement your income, there might be something useful in the article.

Google files federal lawsuit against company for work-at-home scams.

You know those work-at-home scams that use Google’s name and logo?

It looks like Google is finally going after one of them. A federal lawsuit has been filed against a company called Pacific WebWorks, based in Salt Lake City, Utah.

The suit alleges that Pacific WebWorks has been using Google’s name and logo, without authorization, to sell a “work-at-home” scheme. Victims of this scam are charged repeated fees while receiving nearly nothing (or literally nothing) of value in return. Google is also demanding the company reveal an accounting of its profits.

The Better Business Bureau’s report (“F,” in case you didn’t already guess) for the company lists the following as websites operated by Pacific WebWorks:

www.pacificwebworks.com
www.profitcenterlearning.com
www.googlefastcash.com
www.gogglefastcash.com
www.homebizkit4u.com
www.moneyy.org
www.googlebizkit.com
www.profitstudiolearning.com
www.yourprofitgateway.com
www.esuccess2u.com
www.eauctionsuccess.com
www.yourwebsiterev.com

Do NOT visit any of the above sites!

But, take a moment to study the web addresses. You see words like “success” and “profit” and “cash” an awful lot in there. They even use a misspelling of “Google” (“gogglefastcash”). Why would a legitimate business need so many different websites, including some that use another company’s name?

Anybody else think this won’t just stop at a corporate suit? I see criminal charges looming for Pacific WebWorks. That’s good—it’s a criminal organization that needs to be shut down. I don’t mind jumping the legal gun and passing judgment here; this company has been running a scam, pure and simple.

“I’ll be judge, I’ll be jury,” said cunning old Fury:
“I’ll try the whole cause, and condemn you to death.”

—Lewis Carroll
Alice’s Adventures in Wonderland

How phishing and work-at-home schemes work together

I just read a really eye-opening report from the Internet Crime Complaint Center (IC3) about how phishing emails, fraudulent ACH transactions and work-at-home schemes can be connected.

It starts with a “spear-phishing” message. Spear-phishing is a targeting form of phishing, made to look like it comes from someone you know, possibly a friend or employer. This message, rather than the usual phishing angle (“click this link to verify your account information”) will either contain a malware-infected attachment, or will link to a website that infects the user’s computer with malware.

This malware includes a keylogger program, which sends a record of keystrokes back to whoever originated the scheme. Once the victim logs into one of their financial institution accounts, this information is relayed back to the crooks.

At this point, the crooks will use either wire or ACH transfers to remove money from the victim’s account. However, it doesn’t end here.

The next victims in the process are those who have fallen for some form of work-at-home scheme (usually “processing payments” or similar). The money stolen from the first victim is wired into an account held by the next victim, who then transfers it back to the criminals, thinking they are actually processing a “payment” from the original victim.

So, they’re not just logging keystrokes to steal money from one group, they’re using a second set of victims to launder the money for them.

It would be brilliant if it weren’t so slimy.

This got me thinking about US Surveys, Inc., whom I wrote about a couple months ago. In doing research on this obvious mystery shopper scam, I actually came across a few victims who, at least for their first “assignment,” had actually made around $100. “They wired $900 into my Citibank account, then had me wire $800 back to them.” It was only on their second “assignment,” when they were asked to wire their own money first, that they began to wise up.

I thought that was kind of weird at the time. Were they actually paying you the first time just to earn your trust? It seemed like an awfully big gamble, since people were realizing that it was a scam soon afterwards (not to mention the risk of someone just taking the $900 and running).

Now it makes sense. The initial $900 was probably money stolen from a spear-phishing victim. That $100 these people had made was their payoff for helping someone launder money. They weren’t being ripped off initially, but they were helping a criminal conceal the source of funds.

The second, “Now wire us your money first” assignment was probably just an attempt at an extra payoff on their way out the door; by that point, the original victim (whose money was being laundered in the first transaction) had most likely discovered the fraud and locked the account. Thieves have to move quickly from victim to victim these days.

What all this leads me to is the following:

  1. Keep your virus protection up-to-date
  2. Learn about different types of scams so you’ll know what to watch for
  3. Do not become involved in work-at-home schemes that involve “processing payments” or wire transfers; these are money laundering schemes; the only real ways to legitimately work at home are to start your own business, or to work for a company that allows telecommuting
  4. The multi-level integration of these different types of fraud is terribly sophisticated; this is organized crime
  5. Because of #4 above, your best bet is just to avoid, avoid, avoid. Lose any big ideas you might have about trying to “scam the scammers”
  6. If you are a victim of this type of crime, in addition to the standard credit locks and police reports, file a complaint with the IC3; your information could help federal law enforcement stop this type of crime in the future.

Online Scams Vol. 3: Work at home scams are everywhere

Crooks these days. They’re nothing if not adaptable.

Have you seen the number of work-at-home “jobs” being offered on the Internet these days? They know what’s up. A lot of people are losing their jobs and are looking for something new. And it’s a great American tradition—recession (or depression) takes your job, start your own business!

However, the fact is that most people don’t have the right kind of entrepreneurial “spark” needed to start a successful business venture. It takes a certain kind of grit, a deep belief in yourself and your “product,” the ability to hold your head high when faced with failure (and to learn from that failure and move on, instead of taking it personally and wallowing in it), and the kind of positive attitude that, frankly, tends to get obliterated when you’re worrying about how you’re going to pay the mortgage next week.

Let’s face it: starting your own business is way, way tougher than working for someone else. How many times have you seen someone start their own little store because they were “tired of working 40 hours a week,” and you check out their new digs and they’ve got no clear vision for their business, they’re trying to be everything to everyone, and they’re only open five or six hours per day because they’re trying to make owning a business easier than working for someone else? How long did they last?

And I think most of us, deep down, know that. “I’d love to work for myself, but yeesh! 18 hour days, seven days a week?” It’s okay to admit that you’re not a natural born entrepreneur (can you become one? Of course. You can become anything you intend). But most of us know—it is a path of great resistance.

Send in the Work-at-Home-Scam Clowns.

They sound great, don’t they? Stay at home, do some menial task that takes ten minutes, and let “the power of the Internet” (or something) do the rest. You’ll have so many Porsches by this time next year, you won’t know what to do with them all!

Of course I’m going to tell you they’re all completely full of baloney. Nobody is going to pay you hundreds of thousands of dollars per year for nothing.

“Oh, but they’re not paying you,” you’ll say. “You’re starting your own business!”

Well, at best you’re going to pay them a large amount of money for a “startup kit,” fees, or other such bull. You’re not going to assemble kits at home, you’re not going to enter any data, and you’re not going to get paid to stuff envelopes. You’re going to get ripped off.

Fraud.org (run by the National Consumers League) has a great article called “Tips for Avoiding Work-at-Home Scams.” I would recommend you take a few minutes to read the entire article, but the following is a summary of their tips:

  • Know who you’re dealing with
  • Don’t believe that you can make big profits easily
  • Be cautious about emails offering work-at-home opportunities (real companies do not recruit in this way. Ever)
  • Get all the details before you pay
  • Find out if there is really a market for your work
  • Get references for other people who are doing the work
  • Be aware of legal requirements (medical billing requires a license, for example)
  • Know the refund policy
  • Be wary of offers to send you an “advance” on your “pay”
  • Do your own research about work-at-home opportunities

I would amend that fourth tip slightly: just don’t ever pay someone else to work for them.

About.com also has a nice article on this topic: “Work at Home Scams.” I’d suggest you read this as well.

Finally, never, ever trust the phrase, “Other work at home sites are scams, but I found one that isn’t!” There are tons of fake blogs out there. I even found one by searching for “work at home scams.” It had a whole article, possibly culled from a trusted news source, about avoiding these traps. It claimed to be an article from a newspaper in Cleveland. As you read, you suddenly find you’ve been eased into a sales pitch about how “this one isn’t a scam!”

Do they need to make it any more obvious?