Valid phone call or a fraud call?

In this post, we will cover little bits of information that can help you identify whether it's a valid phone call or a fraudster trying to lure you into a trap.

In today's world, we are digitally connected, and our mobile device helps us to get things done by providing multiple options. (Through calls, messages, emails, etc.)

At the same time, with or without our knowledge, we might be sharing some of our information with other parties, and how the different parties use it is something beyond our understanding.

A minimal awareness can help you protect yourself from many spam callers.

Identifying fraud/spam calls

Below are some tips for identifying spam or fraud calls.

1. They try to start the conversation with what they know, like your phone number, and they try to extract more information from you by asking for details.
2. The conversation starts with incorrect information. If you mention it as wrong info, followed by spammers will ask for your details to update their database.
3. If you try to ask for more information, the fraudsters keep providing you with generic information that may be of little or no use.
4. The spammer calls you and asks you to prove your identity before they can disclose some exciting offers or information.

Example: Call claiming from a government entity

One of the techniques is to claim they are calling from a government body and mention that you are in a problem for doing something wrong.

Scammers act as if they are helping you by doing a favor and keep pressuring you to transfer XXX$ amount immediately, so they can rectify it without you being penalized by a government body or going to prison.

In return, they will ask you to provide more details and prove your identity.

• Hang on to the call and verify with the service provider if it's valid.
• Make some online inquiries about the information provided.

Responding to Fraud/Spam calls

Do-Not-Disturb Service

Some operators offer the Do Not Disturb service, which will prevent spam & fraud calls to some extent. Enable it if available.

Using a Third-Party Service

One tip is to use an app or online service to identify the caller. These services do keep an updated list of the spam/fraud callers based on the user's feedback and using their proprietary techniques. Let's say Whoscall, showcaller, Truecaller, etc. Choose any service that meets your requirements.

A point to keep in mind is, as data is a new business model. We depend on online services for majority of our activities.

Drop the call

When you realize it is a ‌‌spam/fraud call, disconnect it. Though you can chit-chat for some entertainment or fun, they try to collect the piece of information to build your profile in their database. Also, later you may get more spam calls than expected.

Slow them down and check for legitimate business information and time to consider the purchase. The spammer will keep on adding pressure to commit right away.

Do Not Provide any Sensitive information.

Deny providing any information like your home address, Bank account information, Usernames, Passwords, OTPs, info on government-issued identity cards, etc.

You can always call back to genuine customer care service/organization to verify the information you received is accurate. Also, you can visit their nearest branch to confirm if it's nearby.

Do not follow any Instructions.

Sometimes to steal funds from your account, they may have gathered all details through various social engineering techniques or from the internet, and all they want is an OTP or a confirmation code.

• Avoid typing any PINs or Passwords when they insist on it.
• Do not pay any shipping or duty taxes for unknown gifts.

Are you already a victim?

Please report it

• Immediately report it to the respective organization and cybercrime department based on your locality/Country.
• For financial accounts, request that banks freeze up all your bank accounts, credit cards, etc., until it is sorted.
• Reset Passwords and enable Multi-Factor Authentication. (if available)
• Ensure passwords are reset for all the impacted accounts.
• Reset Devices (if necessary)

If you suspect any of the device might be compromised while clicking any unwanted links, then it would be safe to take backup of all important data and reset all devices.