Identifying A Scam

The Two Traits That Make a Message Risky

And What To Do About It

The text seems harmless enough: “FedEx: Your package is undeliverable. Click here to confirm your delivery address.” You weren’t expecting a package, but maybe someone sent you a surprise? Moments like this are exactly where scammers thrive. Every day we receive messages asking us to do something; it’s part of being an employee, a contractor, a team member, or just a person who uses technology. Most of these messages are routine and harmless. But sometimes, a message arrives that carries hidden risk.

There are two specific traits that, when combined, make any message far more likely to be part of a social engineering scam. Not every scam message has both traits, but most do. Recognizing these traits can help you avoid being manipulated into doing something harmful to yourself, your organization, or your data.

Trait 1: The Message Is Unexpected

It doesn’t matter how the message arrives – email, text, WhatsApp, social media, a work chat channel, even a phone call or face-to-face interaction. If the message comes out of the blue, that’s the first red flag.

When you aren’t expecting someone to contact you, your guard should go up immediately. This doesn’t mean it’s definitely a scam, but it does mean you should slow down and evaluate it more carefully.

Trait 2: It’s Asking You to Do Something You Haven’t Done Before

Scammers rely on urgency and unfamiliarity to create confusion. Often, the message will ask you to do something you’ve never done before. It might sound urgent or sensitive. You might be told something bad will happen if you don’t act right now.

That unfamiliar action could be anything:

  • Sending a wire transfer
  • Sharing sensitive data
  • Logging into a “new” system
  • Approving a payment
  • Buying gift cards or cryptocurrency
  • Changing account details

If you’ve never done this before for that person or organization, pause. That’s your second red flag.

What You Should Do Instead

If a message checks both boxes: 1) it’s unexpected, and 2) asks you to do something new, here’s how to handle it:

Do NOT trust any contact details in the message.

Scammers include fake phone numbers, spoofed email addresses, and links that lead to convincing but fraudulent sites or call centers.

  • Use an alternate, trusted contact method to verify.
  • Call the sender using a phone number you already know or that’s listed on the official website (not from a search engine).
  • Visit the company’s official site by typing the URL yourself, not by clicking a link in the message.
  • Reach out via known, previously used, internal channels (like a Slack message or corporate directory lookup) to verify the request.

Avoid relying on search engine lookups for phone numbers.

Scammers are known to poison search results with fake contact info. If you must look up a number, do it on the organization’s official site.

Slow Down, Stay Safe

We live in a world where new, unexpected messages are normal. But now you know the two-question test for risk:

  • Was I expecting this message?
  • Is it asking me to do something new?

If the answer to both is “yes”, stop, verify independently, and don’t act until you’re sure it is a legitimate request.

Scammers don’t need to hack your systems if they can hack your attention. Slow down, ask the two questions, and take control before you act.

Addressing Current Events in Banking

Bank closures are in the news, which prompted us to address this topic for our customers and community.

Freedom Bank does NOT hold an investment portfolio, and therefore we are not impacted by the strain faced by the financial institutions currently under scrutiny. Our institution is well capitalized and has plenty of accessible liquidity.

Freedom Bank operates under an entirely different business model than the institutions that were recently closed. Our relationship-based business model is rooted in building long-term trust with our deposit and loan customers. Our method of investment is in our local economy via our loan portfolio. We are a small business ourselves, and we take pride in serving the unique needs of our customers and community. Freedom Bank is in it for the long haul to serve the needs of those who count on us for financial stability and prosperity.

The information below is publicly available information about Freedom Bank’s balance sheet, specifically regarding investments. We are well positioned to meet the banking needs of our customers.

If you have questions or concerns, please stop by or call 406-892-1776 to speak with an Officer or Don Bennett, Freedom Bank President.

Here are some helpful links:

Freedom Bank Balance Sheet Information about Investment Portfolio.

Source: Federal Financial Institutions Examination Council Central Data Repository’s Public Data Distribution
https://cdr.ffiec.gov/

Heightened Cyber Security Awareness

This current environment requires us all to be focused on resilience. Just as you fasten your seat belt before driving, take precautions before using the Internet to be sure you are safe and secure.

Image of bald eagle with words "Stay Vigilant. Heightened Cyber Security Awareness."

The National Cyber Security Alliance has some tips to help you stay protected online:

PERSONAL INFORMATION IS LIKE MONEY. VALUE IT. PROTECT IT.

Lock your devices, like your tablet and phone: You lock the front door to your house, and you should do the same with your devices. Use biometric authentication, such as facial recognition or your fingerprint, to lock your tablet and phone. Securing your devices keeps prying eyes out and can help protect your information in case your device is lost or stolen.

Think before you act: Ignore emails or communications that create a sense of urgency and require you to respond to a crisis, such as a problem with your bank account or taxes. This type of message is likely a scam.

When in doubt, throw it out: Clicking on links in emails is often how bad guys get access to personal information. If an email looks weird, even if you know the person who sent it, it’s best to delete.

Make passwords strong: A strong password is a sentence that is at least 12 characters long. Focus on positive sentences or phrases that you like to think about and are easy to remember (for example, “I love country music.”). On many sites, you can even use spaces!

Write it down and keep it safe: Everyone can forget a password. Keep a list that’s stored in a safe, secure place away from your computer.

SHARE WITH CARE

What you post will last forever: Be aware that when you post a picture or message online, you may also be inadvertently sharing personal details with strangers about yourself and family members – like where you live.

Post only about others as you would like to have them post about you: The golden rule applies online as well.

Own your online presence: It’s OK to limit who can see your information and what you share. Learn about and use privacy and security settings on your favorite websites.

You can learn more at stopthinkconnect.org.

COVID-19 Scams

Avoid Coronavirus Scams

Communities are doing a lot to support one-another in these unprecedented times, but unfortunately scammers are taking advantage of fears surrounding the Coronavirus (COVID-19). Some scams purport to be providing relief or cures. Some scammers are preying on the generosity of people and asking you to donate to victims or relief funds.

Please don’t fall victim to these frauds and crimes. Independently verify the identity of any company, charity, or individual that contacts you regarding COVID-19.

If you see these frauds being attempted or if you are victimized by these frauds, please report them to:

Some examples of COVID-19 scams include:

Unemployment Scams

The Montana Department of Labor & Industry (DLI) announced on June 12th, 2020 that the agency has prevented over $220M in fraudulent Unemployment Insurance (UI) payments since April 28. Scammers are utilizing information obtained from various large-scale data breaches (such as Equifax) to file for fraudulent unemployment claims. If you receive a UI identity verification letter and have not filed for benefits or believe you may be a victim of unemployment or identity fraud to report it at http://uid.dli.mt.gov/report-fraud immediately.

In some instances, the FTC says unemployment payments may be sent to the real person instead of the impostor. The criminal may attempt to contact the individual whose information they stole pretending to be a government official and say the funds were sent by mistake.

“If you get benefits you never applied for, report it to your state unemployment agency and ask for instructions,” the FTC said. “Don’t respond to any calls, emails, or text messages telling you to wire money, send cash, or put money on gift cards. Your state agency will never tell you to repay money that way. Anyone who tells you to do those things is a scammer. Every time.”

The Federal Trade Commission’s identity theft website at identitytheft.gov also provides resources and a detailed step-by-step process for reporting and protecting against identity theft.

Grants or Stimulus Payments

If you receive calls, emails, or other communications claiming to be from the Treasury Department and offering COVID-19 related grants or stimulus payments in exchange for personal financial information, or an advance fee, tax, or charge of any kind, including the purchase of gift cards, please do not respond. These are scams.

Phishing Scams

Scammers posing as national and global health authorities, including the World Health Organization (WHO) and the Centers for Disease Control and Prevention (CDC), are sending phishing emails designed to trick recipients into downloading malware or providing personal identifying and financial information.

  • Check the websites and email addresses offering information, products, or services related to COVID-19. Be aware that scammers often employ addresses that differ only slightly from those belonging to the entities they are impersonating. For example, they might use “cdc.com” or “cdc.org” instead of “cdc.gov.”
  • Do not click on links or open email attachments from unknown or unverified sources. Doing so could download a virus onto your computer or device.
  • Make sure the anti-malware and anti-virus software on your computer is operating and up to date.

App Scams

Scammers are creating and manipulating mobile apps designed to track the spread of COVID-19 to insert malware that will compromise users’ devices and personal information. Watch out for any links texted to your Android phone promising an app to track coronavirus.

Treatment Scams

Scammers are offering to sell fake cures, vaccines, and advice on unproven treatments for COVID-19. Check reputable sources like the CDC and WHO for factual information about treatments and prevention measures.

  • Be wary of unsolicited emails offering information, supplies, or treatment for COVID-19 or requesting your personal information for medical purposes. Legitimate health authorities will not contact the general public this way.
  • Ignore offers for a COVID-19 vaccine, cure, or treatment. Remember, if there is a medical breakthrough, you won’t hear about it for the first time through an email, online ad, or unsolicited sales pitch.
  • Check online reviews of any company offering COVID-19 products or supplies. Avoid companies whose customers have complained about not receiving items.

In-Demand Product Scams

Online sellers claim they have in-demand products, like cleaning, household, and health and medical supplies. You place an order, but you never get your shipment. Anyone can set up shop online under almost any name — including scammers.

  • Check out the seller by searching online for the person or company’s name, phone number and email address, plus words like “review,” “complaint” or “scam.” If everything checks out, pay by credit card and keep a record of your transaction.
  • If you’re concerned about the pricing of products in your area, contact your state consumer protection officials. Montana Attorney General Tim Fox can be reached at (406) 444-2026. For a complete list of state Attorneys General, visit naag.org.

Provider Scams

Scammers are contacting people by phone and email demanding payment for treatment of a friend or relative that they claim was hospitalized for Coronavirus.

Charity Scams

Scammers are soliciting donations for false “funds” for individuals, groups, and areas affected by COVID-19.

  • Research any charities or crowdfunding sites soliciting donations in connection with COVID-19 before giving. Remember, an organization may not be legitimate even if it uses words like “CDC” or “government” in its name or has reputable looking seals or logos on its materials. For online resources on donating wisely, visit the Federal Trade Commission (FTC) website.
  • Be wary of any business, charity, or individual requesting payments or donations in cash, by wire transfer, gift card, or through the mail. Don’t send money through any of these channels.

Investment Scams

Scammers are offering online promotions on various platforms, including social media, claiming that the products or services of publicly traded companies can prevent, detect, or cure COVID-19, and that the stock of these companies will dramatically increase in value as a result. These promotions are often styled as “research reports,” make predictions of a specific “target price,” and relate to microcap stocks, or low-priced stocks issued by the smallest of companies with limited publicly available information.

For the most up-to-date information on COVID-19, visit the Centers for Disease Control and Prevention (CDC) and World Health Organization (WHO) websites.

Source: https://www.justice.gov/usao-wdpa/covid-19-fraud-page

Source: https://www.consumer.ftc.gov/blog/2020/03/ftc-coronavirus-scams-part-2