It's getting harder to spot scams, especially when they use technology to impersonate trusted sources like your bank, a government agency, or even a family member. Fraudsters use these sophisticated tactics to create a sense of urgency, tricking you into giving up your personal information or money.

Here's what you need to know about the most common impersonation scams and how to protect yourself.

Phishing, Vishing, and Bank Impersonation

These scams are all about getting you to act fast without thinking.

Phishing uses deceptive emails, texts, or instant messages that impersonate a company you trust, like your bank. These messages often contain a malicious link designed to steal your login credentials or account number. For example, a fake text might claim there’s a problem with your account and ask you to click a link to "verify" your details.

Vishing is a similar scam, but it uses a phone call. A scammer, posing as a bank representative or government agent, will call you with an urgent problem. They'll tell you the solution is to provide them with sensitive information, such as your credit card or social security number.

Bank Impersonation is a highly effective form of phishing and vishing. In these scams, fraudsters pretend to be from your bank. They might spoof their caller ID to make the call look legitimate and then claim your account has been compromised. They'll create panic and instruct you to transfer money to a "safe" account or provide your login details, PIN, or a one-time passcode (OTP) to "verify" your identity.

Remember these crucial points to protect yourself:

• Never share your username, password, token numbers or debit card pins with anyone, even if they claim to be from your bank.
• If you receive a request for your OTP, verify the legitimacy by contacting the bank directly using a known and trusted phone number or email address.
• Your bank will never tell you to transfer money to another account to protect it from fraud.
• Don't trust caller ID alone. If a call seems suspicious, hang up and call your bank directly using the official number from their website or the back of your card.

Browser and Notification Impersonation

Have you ever received a pop-up from your browser and wondered if it was legitimate? You should. Scammers are now using browser notifications to impersonate trusted services and trick you into taking harmful actions.

Here’s how they work: when you visit a website, it might ask if you'd like to allow notifications. If you click "allow" on a malicious site, or if a credible site is compromised, scammers can send you pop-up messages at any time. These can include:

• Fake alerts and demands, impersonating tech support demanding you pay a ransom to "fix" a fake problem.‍
• Malicious advertisements that impersonate legitimate brands to get you to download malware or give up personal information on a fake storefront.‍
• Malware disguised as a download, where clicking the notification automatically downloads a file that can crash your system or steal your personal data.

To protect yourself, be cautious about which sites you allow to send you notifications. If you've already given permission to a suspicious site, you can turn off its notifications in your browser's settings.

Protecting Your Information

Staying safe from impersonation scams requires a multi-layered approach to security.

• Use Strong, Unique Passwords: Use a unique, complex password for every account. Consider using a password manager to help you create and store them securely.‍
• Be Skeptical of Urgency: If a message or call creates a sense of panic or urgency, it's a major red flag. Legitimate businesses and government agencies rarely operate this way.‍
• Verify Independently: Hang up and contact your bank or the organization directly using a phone number you know to be real, such as the one on the back of your card, your bank statement, or their official website.‍
• Never Share Sensitive Information: Do not give out your password, PIN, or one-time passcodes (OTPs) to anyone who contacts you, regardless of who they claim to be.‍
• Report Scams: Report any suspicious activity to your bank immediately. You can also file a report with the FBI's Internet Crime Complaint Center (IC3) at IC3.gov or the FTC at ReportFraud.ftc.gov.

Want to learn more about cybersecurity? Visit our Security Center for additional resources and tips.