Sunday, July 01, 2007

Ways to stay safe on the Internet

Add to My Yahoo!

Here are some ways to stay safe on the Internet.

We're all concerned about identity fraud, and viruses on our computers. Of course a good anti-virus security program is the beginning, but even that can't protect you if you keep opening emails you shouldn't. Here are some tips to keep in mind about emails not to mess with. Just say NO!

1. The first clue is often a misspelling.

Since I coach people on writing and marketing on the Internet, this gives credence to my advice that you are judged by how well you write -- grammar and spelling included. That having been said, either the people who send these don't know how to spell, or they are purposely using misspelling to get around spam filters, etc. Whichever reason -- or another reason -- if there's a misspelling, just delete it.

2. The address of the email (as it appears in your inbox) may contain the names of people you send emails to, distorted, combined, or in a different order.

Let's say your partner is Paul, your sister is Amanda, and you bank at Kiwibank. Expect to see emails pop up addressed to Paul Amanda or Amanda Kiwi or Paul. Often two names are used.

3. Don't click any links in the email.

If you want to investigate, do not click on the link, just right click over it and "view source." Look through that screen. You will often see a completely different link. It may contain the words of the place allegedly contacting you, but not as the URL. For instance http://surf-turf.com/paypal . (That's just an example). Do not ever open a file with .exe on the end. Sometimes you can also right-click and check "properties."

4. Do not reply TO the email to ask them about it. Do NOT reply to the email.

Go to the alleged vendor using their correct email address, if you are curious. Clicking reply gives information about your computer.

5. You cannot tell for sure by looking at the header of an email where it is from.
IT pros inform us that IP addresses change. People can invent any email address, including your own, and make it look (to the naive person) that it came from there. It takes a court order to get the IP provider to give over such information. Just let it go. Common sense would tell you that anyone could use your computer at work, that since the IT guy you deal with in another state can "enter" your computer to do things, so could someone else ...

6. If it's too good to be true, it is.

This includes winning the lottery in any country on the planet, or being left the estate of someone anywhere in the world.

7. You will get more than one.

They tend to come in batches. You may receive 2 or 3 in the same day, addressed the same way and saying the same thing. Often this will occur when you do something different. For instance, I just emailed a new client in New Zealand yesterday for the first time, and today I am receiving spoofs from a bank with the ending .com.nz. Checking the source code I could see that it was not from the bank which is not fictitious On their legitimate site I found their contact email, forwarded the email to them without opening any links, and received a notice back from their security dept that it is "phishing", to ignore it, and what remedies to take if I had not ignored it.
8. Anybody wanting to transfer money to your account.

Often these will come from a "solicitator" or "attorney," or just from an individual.

9. Know your vendors.

I think it's safe to say -- and PayPal and Amazon and eBay generally say it -- they aren't going to be writing you to (1) change your password, (2) update your files, (3) confirm your account codes ... or anything else.

10. Send these emails, commonly called "phishing" and "spoofs" to your trusted vendor.
There is a spoof@____ for many companies, including ebay, PayPal and so forth. Forward the email there without opening it and they will write you back informing you if the email is a "spoof" or a "phish" and telling you what to do if you have already clicked a link, etc. (DON'T DO THAT - email them first if in doubt.) You can also go to a company's legitimate website (assuming there is one) and get a customer email address there. We hope that by forwarding these spoofs and phishes, the companies that are doing honest business can track down the perpetrators. But at any rate, keep yourself safe!

No comments: