Warning to businesses: ID thieves have you in their crosshairs

Identity theft is a serious threat to businesses, not just consumers

ID-10074457 (1)With the recent news stories about retailers having their records compromised by hackers, Americans are focused on the dangers of identity theft. According to a 2012 survey from the Bureau of Justice Statistics, 14 percent of people age 16 or older, or 34.2 million people, experienced one or more incidents of identity (ID) theft in the past.

Identity theft isn’t just something that happens to consumers. Increasingly, criminals are targeting businesses as well. Better Business Bureau (BBB) serving Central, Coastal, Southwest Texas and the Permian Basin is warning businesses to be on guard for signs of having their business’ name stolen.

Criminals look for ways to steal a business’s identity by gaining access to its bank accounts, credit cards and other sensitive company information. They can do this in a number of ways: hacking into databases, phishing emails, malware, swiping your credit card or other information in the workplace, or dumpster diving for sensitive paperwork. The criminals can then secure lines of credit with banks and retailers at the expense of the victim.

BBB warns businesses to be on the lookout for the following red flags of ID theft:

  • You receive a request to verify orders you didn’t place.
  • You receive phone calls from someone trying to verify an address for your business that is not associated with your company or that you cannot confirm.
  • You receive invoices for storage, shipping or other services that you did not purchase.

The following advice can protect your company against identity thieves:

  • Protect your business’s bank accounts. Review your commercial banking agreements to determine your protections and reporting requirements. Consider using a two-person authorization or other arrangement with your bank to protect against fraudulent wire transactions. Beware of phishing scams and monitor your bank account(s) frequently.
  • Protect your business identifying information. Guard your Employer Identification Number (EIN) and Tax Identification Number (TIN) the way you would your own Social Security Number. Don’t give them out unless required and shred old documents with business ID information in them. If your business or non-profit is required to give out your EIN, keep a close eye on your credit report.
  • Protect and monitor your state business registration information. Regularly review your information with the Secretary of State to make sure your information hasn’t been changed or updated without authorization.
  • Protect and monitor your business’ credit card, supplier and trade accounts. Keep an inventory of accounts and key contact information. Review and reconcile account statements as soon as they are received and immediately alert your credit card company if you find fraudulent activity.
  • Protect and monitor your business’ credit file. At least once a year, review your business credit reports with Equifax, Experian and TransUnion. Keep personal and business finances separate and consider placing a credit security freeze on your personal credit file to make it harder for thieves to open new accounts under your business’ name.
  • Protect your business’s computers and networks. Restrict use of your business computers to only business activities. Install anti-virus software and keep it updated regularly. Secure your company’s wireless network.

For more information about ways to prevent business identity theft and resources for dealing with the problem if it happens to your business, visit BusinessIDTheft.org, a website operated by the Identity Theft Protection Association and the National Association of Secretaries of State.

To find out more about scams and to report them, visit bbb.org.

Posted in BBB, Scams, Technology, Top Tips | Tagged , , , , , , , , , | Leave a comment

BBB offers simple steps for keeping your identity safe

ID-100217483Community invited to Shred Day events in Waco and Corpus Christi, April 26

Identity theft is a major problem in the United States. The Federal Trade Commission (FTC) 2013 Consumer Sentinel Network report showed that there were 290,056 complaints filed relating to identity theft. The number of victims reported in Texas totaled 23,266.

Fraudsters looking to steal your identity actively seek to gain access to your personal information, which means it’s important to discard personal documents carefully. According to the FTC, American consumers reported losing over $1.6 billion to fraud overall in 2013, according to the FTC’s annual report on consumer complaints.

Identity theft has many forms, from phishing to dumpster diving. But there are ways you can protect your identity. BBB offers these steps to keep your personal information safe:

  • Shred all sensitive documents. Shred all statements and applications you get in the mail that you don’t want to keep, including credit card applications, insurance forms, financial statements, health forms, billing statements for utilities and phone service. Visit bbb.org to find a Shred Day location near you.
  • Protect your Social Security number, account numbers and passwords. Don’t carry these numbers in your wallet. Give out your Social Security number only if absolutely necessary and offer to provide another type of personal identifier, if possible.

  • Never give personal information over the phone or to unknown persons. Unless you are the one initiating the phone call, you should not give your Social Security number, driver’s license number or bank account information over the phone.
  • Monitor your bank and credit card transactions for unauthorized transactions. Crooks with your account number generally start with small transactions to see if you’ll notice.
  • Steer clear of suspicious texts, emails and links. Unsolicited e-mails and pop-up ads can be full of computer viruses designed to steal usernames and passwords from your computer. Don’t give in to curiosity. Close or delete the message.
  • Check your credit report at least once a year. There is only one source authorized to give you one free annual credit file disclosure per year from each of the three consumer credit reporting companies. Visit AnnualCreditReport.com to find out more.

Better Business Bureau serving Central, Coastal, Southwest Texas and the Permian Basin invites consumers and businesses to participate in its bi-annual Shred Day:

Corpus Christi

Date: Saturday, April 26, 2014

Time: 9:00AM – 12:00PM

Address: KIII-TV Parking Lot

5002 S. Padre Island Drive

Corpus Christi, Texas 78411


Date: Saturday, April 26, 2014

Time: 9:00AM – 12:00PM

Address: KWTX-TV Studios

4601 Bosque Blvd.

Waco, Texas 76710

Free shredding and electronic recycling services will be available until noon or until the shred trucks reach capacity, at these locations. Consumers can bring up to two boxes of sensitive documents per vehicle to be shred on-site. The program is a BBB-branded identity theft, fraud prevention and educational initiative. Monetary donations benefiting BBB’s Education Foundation will also be accepted.

For more details visit: http://go.bbb.org/1ncNE26


Posted in BBB Event | Tagged , , , , | Leave a comment

Don’t become a victim of the ‘grandparent scam’

scam-alert-pic-150x150The Internet Crime Complaint Center (IC3) reports receiving a continued stream of complaints about alarming phone calls from scammers who claim a relative is in an emergency and needs money fast. Sometimes the scammer pretends to be the relative in danger. It’s a scam that often preys on seniors and it’s sometimes referred to as the “grandparent scam.”

We’ve talked about the grandparent scam a number of times on WatchYourBuck.com, but it never hurts to mention it again. The scammers tell potential victims not to tell other family members. They also sometimes pretend to be officials, like police officers or lawyers. They give instructions on how to wire money to the “bail bondsman” or other official in order to free the relative.

Callers hide their identities by spoofing phone numbers. IC3 reports scammers claiming to be in Canada, Mexico, Haiti, Guatemala and Peru–among other countries.

BBB offers these tips to avoid becoming victim to a grandparent scam:

  • Be skeptical. Ask questions only the grandchild could know the answer to, without revealing too much personal information yourself. Ask the name of a pet, a favorite dish or what school they attend. Your loved one should not get angry about you being too cautious.
  • Verify information. Check with the parents to see if their child is really travelling as they say they are.
  • Don’t wire money. Never use a transfer service to send money to someone you haven’t met in person, or for an emergency you haven’t verified is real.
  • Stay private. Check your privacy settings on all your social media sites. Scammers often make their stories more believable by trolling for information on Facebook, Twitter and similar sites.
  • Know where to turn. If you fall victim to a scam, report the incident immediately to local police and your state Attorney General’s office.
Posted in Scam Phone Calls, Scams | Tagged , , , , , , , | Leave a comment

Heartbleed: what you should know to protect yourself

heartbleedYou might be tired of hearing about online security threats, but there is one you really should pay attention to: Heartbleed.

It’s not a virus or a case of hacking, but a two-year-old coding mistake that was just discovered. A friend of mine compares it to banks discovering their vaults were unlocked for two years. You don’t know that anything was stolen, but you don’t know it wasn’t either. And in this case, some of the “vaults” might still be open.

The Heartbleed bug exploits a flaw in the Secure Sockets Layer (SSL) of popular open source software called OpenSSL. SSL is the standard security technology that establishes an encrypted link between a user’s web browser and the server where a website is hosted. It is used to secure numerous kinds of data transfers, including email, instant messaging, social media, and business transactions. Encryption is essential to Internet security.

The flaw, discovered on April 7 but apparently in existence for two years, means that attackers can copy a server’s digital keys and use them to impersonate servers to decode communications from the past (and, potentially, the future).

BBB has the following advice about how to protect yourself online now that the Heartbleed bug has been uncovered:

For businesses:

BBB recommends that businesses immediately check to see if their website(s) use Open SSL or have been vulnerable. One way to check, recommended by tech/media website CNET, is a tool developed by a cryptography consultant. If vulnerability exists, businesses should work with their IT department or computer professional to install a more secure SSL on their websites.

For systems administrators:

Systems administrators should follow the advice of the U.S. Computer Emergency Response Team (US-CERT). Although this information comes from the U.S. government, it is applicable to systems in other countries.

For consumers:

CNET has also published a list of the top 100 websites, which it is updating regularly as it checks for vulnerabilities and repairs. Consumers can check this list or use the tool mentioned above to see if websites they regularly use are free of problems, or have fixed vulnerabilities.

It’s also imperative that consumers change passwords on all sites, particularly those that retain personal identifying information. Change your password after confirming that the site is not vulnerable or has fixed its SSL.

The “Stop. Think. Connect.” campaign offers the following suggestions to protect your identity:

  • Secure your accounts: Ask for protection beyond passwords. Many account providers now offer additional ways for you verify who you are before you conduct business on that site.
  • Make passwords long and strong: Combine capital and lowercase letters with numbers and symbols to create a more secure password.
  • Unique account, unique password: Separate passwords for every account helps to thwart cybercriminals.
  • Write it down and keep it safe: Everyone can forget a password. Keep a list that’s stored in a safe, secure place away from your computer.
  • Own your online presence: When available, set the privacy and security settings on websites to your comfort level for information sharing. It’s ok to limit how and with whom you share information.

BBB also suggests choosing passwords that are phrases (for instance, ilovetofish) and making each letter O into a zero to make the password more complex. Look into password management software to help you keep track of really “long and strong” passwords.

BBB’s servers do not use Open Source SSL. All of its websites have been checked and found to be free of vulnerabilities.

Posted in BBB, malware, Technology, virus, viruses | Tagged , , , , , , , , , | Leave a comment

BBB Investigation: All American Home Improvements builds reputation for broken promises

ID-1008377BBB advises consumers about San Antonio-area company’s contract issues

Consumers who do business with San Antonio-area remodeling company All American Home Improvements report making large upfront payments followed by little or no work and a long wait in getting projects done or in getting their deposits back.

Better Business Bureau serving Central, Coastal, Southwest Texas and the Permian Basin found a common theme among complaints filed against All American Home Improvements. Several complaints allege the company does not complete remodeling jobs that were paid for in advance. Disputed amounts are in the $3,000 to $39,000 range.

As of April 8, 2014, BBB has received a dozen complaints against All American Home Improvements in the last year regarding project delays and trouble getting refunds. The business failed to resolve about half of those complaints. However, the business did resolve some complaints by issuing a refund.

Although All American Home Improvements is not accredited, consumers notified BBB that the company is using contracts with a version of the BBB Accredited Business seal. BBB has requested the company quit using the seal on its printed material, but consumer complaints continue to report the trademark violation.

The company is located at 2041 Universal City, Blvd., Universal City, but consumers report that contracts continue to list a closed storefront at 509 Main Street in Schertz as its address.

Audrey Ford of San Antonio said she hired All American Home Improvements after receiving a telemarketing call. She said she paid $39,500 up front for home improvements that were left incomplete. She said the business has made promises to continue the project, but has not returned to complete the job or issue a refund.

“I hired them before Thanksgiving,” Ford said. “They did some work, tearing stuff out in November. They left everything in an incomplete state. I’m disgusted. When kids come around here, I’m afraid they’re going to get hurt. Also, my husband had a stroke and his [physical] balance is not good.”

Joseph Turnbaigh of San Antonio said he and his wife paid All American Home Improvements $17,320 up front to install 11 windows and build a sunroom. He said five windows were installed and a slab—of the wrong size—was poured for the sunroom. After that, no work was done and Turnbaugh has been unable to reach the business by phone.

“He was supposed to install 11 windows, but only five were put in,” Turnbaigh said. “We wanted a sunroom in the back. All they did was pour a slab. I called about 30 times over the last four months to get the windows to the house. We signed the contract in Oct. 29 and he said it would be done by Thanksgiving.”

BBB offers the following advice when hiring a contractor:

  • Do your research. Check the company’s BBB Business Review at bbb.org before signing a contract. For a list of Accredited Businesses that meet Standards for Trust, go directly to checkbbb.org.
  • Get a list of references. The contractor should provide names, addresses and phone numbers of at least three clients who have projects similar to yours. Ask about their experience with the contractor. Also, tell the contractor that you’d like to visit jobs in progress.
  • Don’t pay cash. Pay by credit card if possible. You may have additional protection if there is a problem. Otherwise pay by check so your cancelled check can provide proof of payment. Consider using an escrow company.
  • Spread payments out. Do not pay too much up front. Make additional payments during the project contingent upon completion of a defined amount of work. Do not make the final payment or sign a final release until you are satisfied with the work and have proof that the subcontractors and suppliers have been paid.
  • Shop around. Get at least three bids in writing based on the same specifications, materials, labor and time needed to complete the project. BBB’s Request-a-Quote service is free to use and contacts BBB Accredited Businesses to quote on your job.
Posted in BBB Investigation | Tagged , , | Leave a comment

Scam Alert: Don’t get burned by ‘Malaysian Airlines flight mystery’ video scam

mh370-breaking-newsSocial media teasers about exclusive footage could give you malware, steal your identity

If we’re honest, most of us will admit to being curious about big, tragic events like the disappearance of Malaysian Airlines flight MH370.

When something like that happens, you can count on scammers to come out of the woodwork. The promise of exclusive video that hasn’t turned up in the news is just too tempting.

If you’re scrolling through your social media feed and see a teaser promising “Video of Malaysia MH370 Plane Found in Bermuda Triangle Passengers alive,” or “[NEWS FLASH] Missing Plane Has Been Found!” resist the temptation to click.

If you click the link you are taken to an unfamiliar, third party website. A popup may appear, prompting you to “update your video player.” When you click “OK,” you aren’t getting a new software version, you are downloading malware.

Like all scams, this has many variations. Another common version asks you to take a survey before viewing the video. Filling in your personal information opens you up to identity theft. Or your information could be sold to spammers.

This scam is also not limited to Facebook. Watch out for similar links posted on Twitter, and other social media or sent by email.

Here are some steps to protect yourself and others from shared scam links:

Don’t take the bait. Stay away from promotions of “exclusive,” “shocking” or “sensational” footage. If it sounds too outlandish to be true, it is probably a scam.

Hover over a link to see its true destination. Before you click, hover over the link to see where it will take you. Don’t click on links leading to unfamiliar websites.

Don’t trust your friends’ taste online. It might not actually be them “liking” or sharing scam links to photos. Their account may have been hacked. But it may also be “clickjacking,” a technique scammers use to trick you into clicking something that you wouldn’t otherwise.

Report scam posts. On Facebook, report scam posts and other suspicious activity by following these instructions. On Twitter, if another user is sending you links to malware or other spam, report it to Twitter by following these instructions.

Posted in malware, Scams, virus, viruses | Tagged , , , , , , , , , , , | Leave a comment

Intermodal Wealth of Houston indicted for investment fraud

ID-100128578Investing always carries risk, but it’s especially risky when the people soliciting investments offer a deal that’s too good to be true–and have previous convictions for fraud.

Those red flags and more applied to Houston company Intermodal Wealth LLC, according to the Texas State Securities Commission, which announced an indictment recently unsealed by a federal court in Houston.

Intermodal Wealth offered investments in shipping containers used for rail, trucks and ships. The indictment, based on a State Securities Board investigation, alleges the company offered a guaranteed, unrealistically high, return of at least 13 to 16 percent.

John Patrick Acord, the company’s CFO, used the fictional name “John Delano.” Among other legal problems, Acord had two prior federal fraud convictions and had been enjoined twice by Securities and Exchange Commission civil actions , among other legal problems. Intermodal’s president, Steven Patrick Jones, also had a federal conviction for fraud in shipping and interstate commerce on his record.

The indictment charges Acord and Jones with multiple counts of wire and mail fraud as well as securities fraud. Jones and Acord allegedly collected at least $5.5 million from investors who were told they would receive big profits through Intermodal’s leasing of shipping containers to third parties.

Acord and Jones allegedly created sham lease agreements to fool investors and ran the company as a Ponzi scheme, making some payments to investors with money from other investors.

The Securities Commissioner entered a final Emergency Cease and Desist Order against Jones, Acord, Intermodal Wealth, and other parties in December 2013.

Posted in Government action, Scams, Too Good To Be True | Tagged , , , , , , | Leave a comment

BBB Investigation: Clean Sweep Estate & Garage Sales cleans out consumers’ possessions

ID-1008377Liquidating an estate is a difficult time, especially for those who have lost a loved one. Unfortunately, San Antonio-based Clean Sweep Estate & Garage Sales has made a hard time even worse for some families by conducting estate sales without turning over the proceeds.

The company claims to liquidate properties through estate sales, but consumers report receiving excuses, incomplete inventory of sold items and no money. Consumers typically find the Clean Sweep Estate & Garage Sales through the company’s website and advertising in online directories and forums.

As of April 3, 2014, Better Business Bureau serving Central, Coastal, Southwest Texas and the Permian Basin received 20 complaints against Clean Sweep Estate & Garage Sales in the last 12 months. The business has failed to address consumers’ concerns regarding 25 complaints. The business resolved some complaints by making payments to the consumer. However, the business has not responded to BBB complaints since August 2012.

Complaints about Clean Sweep Estate & Garage Sales had a common theme: Consumers said the business did not deliver the services it promised. Complaints state that consumers hire the business to sell estate items, but never receive payment. Complaints also state the company is unresponsive when consumers inquire about when the payments will be made.

BBB contacted the business by mail and phone about its pattern of complaint, but received no response. Calls went directly to voicemail.

Keri Rutherford of New Braunfels said she contracted with Clean Sweep Estate & Garage Sales to conduct an estate sale. She said she never received any money from the sale and is owed approximately $7,000.

“She [owner Janet Holland] came to the house and gave a really good talk. I arranged to have her conduct a three-day sale in October. I contracted with her and was to be paid Nov. 15. That came and went a long time ago,” she said. “The first day before she started the sale, there were already a few items missing. She said she had taken some items home. I said ‘You’re going to pay for them right?’ and she said she would bring them back.”

Rutherford said the company also failed to turn over promised receipts for unsold items that were to be donated to charity.

“I got no money, not even an itemized list,” Rutherford said. “I called her several times and always got some excuse. Then she stopped answering. The office number was disconnected and she wouldn’t answer her cellphone.”

Better Business Bureau offers the following advice to help select a trustworthy estate sale service:

  • Start with trust. Check out any business at bbb.org to view their BBB Business Review free of charge. There you will find the company’s history of complaints and contact information. For a list of Accredited Businesses, go to checkbbb.org.
  • Shop around. Set up appointments to interview at least two or three services. Ask a trusted realtor, banker or attorney for recommendations.
  • Do your research. Before setting up an initial consultation, ask how long the estate sales agent has been in business, whether they are members of professional associations, if they are bonded and insured, and if they can provide professional references.
  • Ask about fees and commissions. What percentage of the proceeds will the business keep for commissions? Will you be responsible for any up-front or out-of-pocket costs (appraisals, security measures, trash removal)?
  • Find out when and how you will be paid. When are the sales proceeds paid to you and how (cash, cashier’s check)? Will you receive an itemized list of everything that was sold?
  • Know what you’re signing. Do not sign a contract unless you understand the services to be provided, out-of-pocket fees you’ll be charged and how and when you’ll receive payment of the sales proceeds.
Posted in BBB Investigation | Tagged , , , , | Leave a comment

FTC shuts down scammers who targeted seniors

ID-100128578Everybody loves grandma and grandpa, right? Not everyone, apparently. Some folks just see them as a source of cash and will do anything to get it.

The Federal Trade Commission (FTC) recently announced that it has shut down a multi-million dollar telemarketing scam that targeted senior citizens among others.

Three defendants agreed to preliminary injunctions and a court imposed a preliminary injunction against a final defendant. The court found that the FTC would likely prevail and ordered funds to be frozen so they can be returned to victims of the telemarketing scheme.

The leader of the scheme was Canadian Ari Tietolman, according to the FTC. The alleged scammers set up a network of U.S. and Canadian entities to carry out the scheme, using a telemarketing boiler room in Canada. The defendants cold-called senior citizens, claiming to sell fraud protection, legal protection and pharmaceutical benefit services. The cost to victims ranged from $187 to $397.

According to the FTC, the telemarketers at times impersonated government and bank officials and convinced consumers to give up confidential information used to created checks drawn on their bank accounts. Money was then deposited into corporate accounts in the U.S. controlled by Canadian defendants.

Businesses involved in the scheme include First Consumers, LLC, Standard American Marketing, Inc., and PowerPlay Industries LLC.  Pennsylvania company First Consumers, LLC used its own name and three other names: Patient Assistance Plus, Legal Eye, and Fraud Watch.  The three other defendants who assisted in the scheme are U.S. nationals Marc Ferry, Charles Borie and Robert Barczai.

Posted in Government action, Scam Phone Calls, Scams, Technology | Tagged , , , , , , , , , | Leave a comment