New phishing scams that target activities, interests, or news events

New phishing scams are generated whenever there is a newsworthy event, such as a natural disaster, a national election, or a significant change in the world financial system.

Here are some other common types of scams that try to take advantage of interests or activities:

l   Fake e-cards

l   Fake job opportunities

l   Donation scams

Fake e-cards

E-cards are created the same way Web sites are; they're built on the Internet just like this page. So when you send someone an e-card, you send them a link to click, which takes them to the online greeting card you created for them.

This means an e-card you receive could actually be a phishing scam, spam or a spyware installer, or a computer virus.

How to avoid fake e-cards

l   Recognize the sender of the e-card. If you don't know the sender, do not trust the card. Legitimate companies have standard, obvious ways for you to recognize that the e-mail is not a fraud.

Make sure you check both the display name and e-mail address of the sender.

l   When in doubt, use alternative viewing methods. Do not click any links when you are not sure of the sender or intent of the e-mail.

l   Never download or click anything from an unknown source.

l   Be wary of an e-mail message or file attachment from someone you don't know or that seems suspicious.

l   Preview a link's Web address before you click it. If the link doesn't show an address, move your mouse pointer over a link without clicking it to see where the link goes. (The address should appear on the bottom bar of your Web browser.)

l   Don't accept an end-user agreement without reading the fine print first; you might inadvertently agree to install spyware or something else you don't want.

Online job-hunting scams

Phishing scams might also appear as phony job ads, used to convince job hunters to send them personal information. Scammers post their ads on legitimate job sites and often use familiar-looking or convincing company logos, language, and links to fake Web sites that appear to be those of real organizations.

These sites might also charge fees for services they will never render. Typically, after a few days the thieves close down the scam and disappear.

Best practices for online job hunters

l   Never provide any non-work related personal information such as your social security number, credit card number, date of birth, home address, and marital status online, through e-mail, over the phone, in a fax, or on your resume.

l   List your resume on a job site that allows only verified recruiters to scan them and uses a privacy policy.

l   Verify a prospective employer, recruiter, or recruiting agency through another source such as the Better Business Bureau or a phone book, and then contact them directly-or better yet, visit them in person at the company location during regular work hours.

l   If a prospective recruiter or employer requests a background check, agree to do so only after you have met with them at their company location during regular work hours.

l   Beware of anyone who asks you for money up front in exchange for finding work for you. You should never have to pay for "exclusive" job leads or for a job itself.

l   If you are paying for job placement services, don't provide credit card or bank information or engage in any monetary transactions unless done in person, onsite, with a prospective recruiter or job agency.

l   Carefully evaluate contact information in job ads or related e-mails, watching out for spelling errors, an e-mail address that does not feature the company's name, and inconsistencies with area or zip codes.

l   Create an exclusive Web-based e-mail address and account for all non-personal communication.

Donation scams

Natural disasters, political campaigns, and global health issues are often the focus of donation phishing scams.

Source: Microsoft