It all started with a conversation between two longtime friends via SmileBook, a popular mobile messaging app…
SmileBook Conversation 1: The Setup
AUG 5, 9:45 AM
Sheila: Hey, sweetie. U not gonna believe this.
Got my hands on a 40,000$ government grant.
Beatrice: What? U kiddin?
Sheila: No, 4 real - EZ. I think you could get 1 - 2.
Beatrice: I never qualify for anything.
Health is bad — money issues.
No help – nowhere.
Sheila: Try it.
Beatrice: K
Sheila: Contact Phil Swipper. He’s the grant agent.
Just message him in SmileBook or call him.
888.555.1254. Do it today. : ) LMK
Beatrice: Okay. : )
------------
SmileBook Conversation 2: The Catch
AUG 5, 10:27 AM
Beatrice: Are you 4 real? I qualify?!!!?
Phil (Grant Agent): Yes, ma’am. All you need to do is
pay the upfront fee of 600$ for processing
the grant and the money is yours.
Beatrice: Fee?
Phil (Grant Agent): Normal processing fee. Just go to the store and buy 600$ in gift cards and you’ll have the 40K in a few days.
Beatrice: I don’t know.
Phil (Grant Agent): You want the fee grant money, don’t you?
SmileBook Conversation 2: The Close
AUG 5, 1:49 PM
Beatrice: Okay, got the gift cards.
Where do I send them?
Phil (Grant Agent): No need to mail them since that’ll delay processing. Just scratch off the code on the back and take a picture of the front and backside of the card. Send the pics to me.
Beatrice: Okay. Doing it now.
Phil (Grant Agent): Great! You’ll have your money soon.
------------
The next day, Sheila and Beatrice run into each other at the local community center’s aqua aerobics class.
Sheila: I’m telling you, Beatrice, that SmileBook message didn’t come from me.
Beatrice: But, look at this, Sheila. That’s you. That’s your picture in SmileBook. You sent me the message.
Sheila: Yes, but (Gulp)… I think someone hacked my account.
------------
A few minutes later…
SmileBook Conversation 4: Second Thoughts
AUG 6, 3:18 PM
Beatrice: I changed my mind.
Phil (Grant Agent): That’s okay. We understand. The money will go to someone else. We have a long waitlist.
Beatrice: What about my gift cards?
Phil (Grant Agent): Since you don’t have the money yet, no worries. Cards haven’t been activated.
Beatrice: Sigh. Thank you!!!
Phil (Grant Agent): You bet. : )
------------
A half-hour later…
In-store Conversation 1: The Reveal
Beatrice: Hi! I need to return these gift cards.
Store Clerk: I’m sorry ma’am, you can’t.
Beatrice: Why not? I haven’t used them. They haven’t been activated.
Store Clerk: (Scans the cards.) I’m sorry ma’am, but these cards have already been activated and spent.
------------
***************
While the private messaging scam can occur on any platform, it seems to be gaining momentum on Facebook, according to AARP. It starts when fraudsters replicate or hack a friend’s messaging app profile. Once they have the profile set up, they will start sending messages to account connections that might include fake grant notifications or other requests for private financial data. Either way, the goal of the scam is to separate you from your money by exploiting your online friendships.
Protect yourself from private messaging scams by:
- If you receive a shocking or surprising message from an online friend, don’t respond right away. Before clicking any links or sharing information, speak with your friend offline to confirm the message came from them.
- Be wary of simple messages like “Hi” or “Hey” without any follow up text. If this is not how your friend typically communicates or initiates conversation, proceed with caution. Scammers will attempt to engage using non-suspicious, but out of character communication.
- If you can’t reach your friend offline right away, ask questions. Make sure the person you’re messaging is really your friend and not a shady character. Ask questions only the real person could correctly answer, but don’t stop there. Press the sender for more information about the grant or other offer being presented.
- Report the activity to the private messaging app company. This can help reduce further attempts to perpetrate a particular scheme.
- Deny friend requests from strangers.
- Update your privacy setting in the app. Read the app’s Privacy Policy for details to determine the appropriate setting for you.
- Let your friend know that their account may have been compromised so they can take appropriate action.
- Never give out your login credentials or disclose any of your personal or account information over the phone or online, unless you have verified the authenticity of the individual or website.
-###-
