Scammers are getting more convincing, but if you need a tool to unmask their cons, a simple domain check might be it.
The holidays won’t stop the scams, as indicated by our inboxes. Email and SMS have been a constant target for cybercriminals, and we’re not the only ones, as scammers look for more convincing ways to trick you.
A colleague recently popped up with one to kickstart the new year that was rather convincing, using the fake SMS ID scammers can trigger from online SMS sending services, and even registering a website domain that looked a little convincing, as well.
Slick scam pic.twitter.com/2kWXjh72ce
— 🧔🏻♂️ m i k e (@yomikestevens) January 2, 2022
The scam, which fakes a two-factor code being sent, seems to suggest someone has authorised a verification code in your name, and this is the way to check if it was you.
For some, it may be a little convincing, but there is a way we can unmask this scammer, simply by going behind the scenes of that link they’ve used.
WHOIS can be your friend
Every time someone registers a website domain — the www dot whatever — they have to enter some details. One is what they’ll pay, obviously because these things aren’t free, but the other set of details is who is doing it.
You can set these to private, mind you, and registration companies will redact them, but typically an actual business will include them. Banks will include them. Financial institutions will include them….
