(Getty Images)
You may be used to getting text messages and emails from your boss, which is why a recent texting scam is so effective. Scammers discover where you work and pose as the CEO or other executive. Be on guard and don’t share money or information – your own or your company’s.
Just two weeks into her role as the new Marketing Manager at BBB of Central and Western MA and Northeastern CT, Megan faced a situation that tested her instincts for caution. It all began with a mysterious text message purportedly from her boss and the president of the local BBB, Nancy, requesting her to purchase hundreds of dollars worth of Apple Giftcards.
At the BBB, where awareness of scams is high, Megan immediately recognized the signs of a potential scam. The text claimed that Nancy was away at a conference and urgently needed the gift cards for her presentation. However, Megan's proximity to Nancy's office was a saving grace. Without hesitation, Megan confirmed the message's authenticity by directly consulting Nancy.
Despite being new to the organization, Megan's proactive approach proved invaluable. By verifying the request with Nancy in person, she avoided falling victim to what could have been a costly scam.
This incident sheds light on the prevalence of scams targeting businesses, such as CEO fraud or business email compromise (BEC) scams. In these schemes, fraudsters impersonate high-ranking executives to deceive employees into taking actions that may compromise security or result in financial loss.
The request for Apple gift cards should have raised immediate suspicion, as legitimate business transactions typically do not involve payment through gift cards. Additionally, the urgency conveyed in the message and the claim of being away from the office are common tactics scammers use to manipulate victims.
Megan's experience serves as a reminder of the importance of vigilance and skepticism in today's digital landscape. By staying informed about common scam tactics and implementing verification protocols, businesses can better protect themselves from falling prey to cybercrime.
Educating employees about the signs of potential scams, encouraging open communication, and establishing clear procedures for verifying the authenticity of requests can go a long way in safeguarding against fraudulent activities.
How the scam works
You receive a text from a number you don’t recognize, claiming to be from your boss. The sender knows your name, where you work, and your boss’s name. It seems so real! The text message might read something like this: “Hi Chris, I’m tied up in a conference call right now, but let me know if you get this text. Thanks [your boss’ name].”
You’ll be asked to do a quick task if you reply that you received the text. This could be purchasing gift cards for a client or wiring funds to another business. In some cases, the scammer may ask you to send personal information to someone, often giving you a plausible reason to carry out the request.
No matter how believable the reason sounds, always double-check before acting. Once you send the money, gift cards, or information, it will be in the hands of a con artist.
How to protect yourself from impostor scams
- Don’t trust unsolicited messages from unfamiliar numbers. If your boss regularly communicates with you via text, save their number on your contact list. Don’t respond to potential impersonators reaching out from a different number.
- Be wary of unusual requests. If your boss has never asked you to buy gift cards, even if the request comes from a number you’ve saved, think twice. Scammers can potentially clone phone numbers and might have hijacked your boss’ number to target employees.
- Double-check with your boss personally. If a request comes from a strange number or doesn’t sound right, call or email your boss first, using their real contact information, rather than replying. It’s better to double-check than to rush into a scam. Plus, your boss will want to know if they are being impersonated so they can warn their other employees.
- If you suspect a scam, don’t reply. If you’re fairly certain a scammer has contacted you, don’t reply to the text message. Replying lets scammers know they have an active phone number and could leave you vulnerable to future attacks. Instead, block the number and delete the message.
For more information
Stay safe by reading the BBB’s tips on spotting fake text messages and avoiding impostor scams. Also, read BBB’s report about the rise of business email compromise scams.
If you’ve spotted a scam, whether or not you fell victim, report it at BBB.org/ScamTracker. Your report helps expose scammers' tactics and boost consumer awareness.
Stay current on the latest scams by subscribing to BBB’s weekly Scam Alerts email.
