On the 5th day of Consumer Protection, you get an email or text message that’s supposedly from UPS or FedEx, complete with one of their logos — and it seems legit. It says your item is ready to ship but you need to update your shipping preferences. But here’s the lump of coal: the message is bogus and there is no package. Scammers are phishing for your information. And if you click on a link or download the attachment, you’re likely to end up with a virus or malware on your device that steal your identity and your passwords.
Avoid any holiday reindeer-livery confusion and follow these tips:
- The weakest link. Don’t click. If you get an unexpected email or text message, don’t click on any links — or open any attachments. If you think it could be legit, contact the company using a website or phone number you know is real. Don’t use the information in the email or text message.
- Mal where? Guard against malware. Make sure you keep your software up to date. Set your security software, internet browser, and operating system (like Windows or Mac OS X) to update automatically.
The purpose of this blog and its comments section is to inform readers about Federal Trade Commission activity, and share information to help them avoid, report, and recover from fraud, scams, and bad business practices. Your thoughts, ideas, and concerns are welcome, and we encourage comments. But keep in mind, this is a moderated blog. We review all comments before they are posted, and we won’t post comments that don’t comply with our commenting policy. We expect commenters to treat each other and the blog writers with respect.
- We won’t post off-topic comments, repeated identical comments, or comments that include sales pitches or promotions.
- We won’t post comments that include vulgar messages, personal attacks by name, or offensive terms that target specific people or groups.
- We won’t post threats, defamatory statements, or suggestions or encouragement of illegal activity.
- We won’t post comments that include personal information, like Social Security numbers, account numbers, home addresses, and email addresses. To file a detailed report about a scam, go to ReportFraud.ftc.gov.
We don't edit comments to remove objectionable content, so please ensure that your comment contains none of the above. The comments posted on this blog become part of the public domain. To protect your privacy and the privacy of other people, please do not include personal information. Opinions in comments that appear in this blog belong to the individuals who expressed them. They do not belong to or represent views of the Federal Trade Commission.