Fake Tech Support Scams

Although not all of the fake tech support callers misrepresent that they are calling on behalf of Microsoft, claiming to represent Microsoft or Windows is most commonly used in such calls.  Scammers also claim to represent other vendors such as Dell, McAfee and Norton.

Two operations working out of the state of Florida have conned tens of thousands of consumers out of more than $120 million through their deceptions.  The FTC and state of Florida obtained a federal court orders to shut down those two operations for deceptively marketing computer software and tech support services. The court orders have additionally placed a temporary freeze on the defendants’ assets and have placed the businesses under the control of a court-appointed receiver.

As welcome as the FTC action is, fake tech support scams have been harassing people since early in 2009 and this is not the end of it.  As I recommended over two years ago:

Should you receive an unsolicited telephone all from someone purporting to be from Microsoft (or any other vendor), the best advice is to just hang up! Microsoft does not make this type telephone call.

There are also people who try to keep these cybercriminals on the telephone in order to not only waste their time but also to keep them tied up so they are not calling someone else who may not realize the caller is a scammer.  Microsoft recently published an online form to Report a technical support scam.  By supplying as much of the information as possible requested on the form, you will be assisting both Microsoft and law enforcement agencies in stopping these cybercriminals.  

References:

• Cyber Trust Blog: HOW TO: Report the Microsoft phone scam
• FTC: FTC Obtains Court Orders Temporarily Shutting Down Massive Tech Support Scams
• Microsoft Support: Report a technical support scam

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

FTC Action Against Fake Tech Support Scams

Since early in 2009, people have been harassed by telephone scams by telemarketers claiming to represent Microsoft and other vendors such as Dell, McAfee and Norton.  The telemarketing scammers attempt to convince the call recipient that malware has been detected on their computer which they can, of course, remove for a hefty fee.

The attempted "proof of infection" is normal and generally harmless error messages in the Event Log, completely unrelated to any indication of infection.


With October being National Cyber Security Awareness Month, the timing of the announcement by the Federal Trade Commission (FTC) yesterday that, at FTC request, a U.S. District Court Judge ordered a halt to six alleged tech support scams pending further hearings and has frozen their assets (see October 3, 2012 List of Commission Actions) was ideal.

The United States has not been alone in being harassed by fake tech support scammers.  Australian, Canadian and U.K. citizens have also been targets as has New Zealand and Ireland  It was through the combined efforts of the Australian Communications Authority, Canadian Radio-television and Telecommunications Commission and United Kingdom’s Serious Organised Crime Agency that the FCC was able to take this action.

Knowledge is Key

Although the action by the FCC will most certainly help, the problem is not eliminated.  Should you receive an unsolicited telephone all from someone purporting to be from Microsoft (or any other vendor), the best advice is to just hang up! Microsoft does not make this type telephone call.

In the event you have been tricked by one of these fake tech support scammers and logged on to a third-party website so they could remotely access your computer, malware may have been installed on your computer to allow remote access.  This could have provided the scammers with access to steal personal and financial details from your computer.  Update your antivirus software and complete a full system scan.

If you supplied credit card information, in addition to contacting your credit card company, notify the appropriate government agency:

Australia:  scamwatch.gov.au
Canada:  http://www.crtc.gc.ca/eng/info_sht/g9.htm
New Zealand:  http://www.theorb.org.nz/
U.K.:  http://www.actionfraud.police.uk/
U.S.:  ftc.gov/complaint

Not only during National Cyber Security Awareness Month, but every day Stop | Think | Connect.

References

• Australian Communications Authority (ACMA): ACMA media release 71/2012 – 4 October
• Canadian Radio-television and Telecommunications Commission (CRTC): The CRTC takes action against telemarketers offering anti-virus software
• FTC Halts Massive Tech Support Scams
• FTC Combats Tech Support Scams | OnGuard Online
• Microsoft Imposter Scam
• Microsoft Security: Fraudulent Emails and Credit Card Scam Tips
• Microsoft Security: Avoid Phone Scams | Cybercriminal Tech Support Scam | Security Threats
• Tech Support Scams | OnGuard Online
• United Kingdom’s Serious Organised Crime Agency (SOCA): SOCA
• Microsoft Community:  Who are my tech gurus? Are they bone fide Microsoft support

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Microsoft Removes Gold Certified Partner Over Telephone Scam Claims

As illustrated in this topic on the Microsoft Answers forum, the issue of fake tech support telephone calls has been a problem for over two years.  The scams appeared to have originated in the U.K., spread to Australia, followed by Canada and the United States.

Although reports in various forum topics have pointed fingers at other vendors, in the instant case, the finger was pointing at "Comantra" who was a Microsoft Gold Certified Partner. 

Comantra, like other vendors, was said to have cold-called people, implying that they represent Microsoft.  After convincing the call recipients that the errors seen in Event Viewer on Windows are dangerous, the technicians would attempt to convince the people to allow the technicians to have remote access to their computer.  Repairs, of course, required a credit card charge.

About Microsoft Gold Certified and Certified Partners

It is important to understand that being a Microsoft Partner, in any shape, whether Certified or Gold Certified, does not mean that the company represents Microsoft.  Rather, it merely means that the company has met the requisite requirements, has paid the requisite fee and has earned the appropriate Partner Points for the Partner level.  The requirements for both Microsoft Gold Certified and Microsoft Certified Partners are fully described at the eHow.com references below.

In addition to the above, Microsoft Gold Certified Partners must employ a minimum number of Microsoft certified professionals, meet the certification and sales requirements and submit competency-specific customer referrals.

Microsoft Certified Partners additionally complete one of three requirements (i.e. employ or employ by contract at least two Microsoft Certified Professionals, with three customer references approved by Microsoft or product software that Microsoft has tested and approved or hardware that a Microsoft authorized testing vendor has approved.)

How to handle telephone scams

If you receive a call from someone claiming to be representing Microsoft or Microsoft tech support, just hang up!  Microsoft does not make unsolicited calls.

In the event you have been taken in by one of the fake tech support calls, it is strongly recommended that you take the following steps:

• Change the passwords or PINs on your computer and your online accounts.
• Place a fraud alert on your credit reports.
• If you know of any accounts that were accessed or opened fraudulently, close those accounts.
• Routinely review your bank and credit card statements monthly for unexplained charges or inquiries that were not initiated by you.

People in Australia, Canada, U.K. and U.S. appear to have been hardest hit by telephone tech support scams.  The links below have additional information and resources.

• AU:  SCAM Watch
• CA:  Canadian Anti-Fraud Centre
• UK:  National Fraud Authority.
• US:  Consumer Fraud Reporting

References

• Microsoft dumps Gold partner accused of scamming customers
• Microsoft dumps partner over telephonescam claims | Naked Security
• Microsoft dumps partner over support call scam | News | PC Pro
• What is a Microsoft Gold Certified Partner? | eHow.com
• Microsoft Certified Partner Requirements | eHow.com

Microsoft References

• Avoid scams that use the Microsoft name fraudulently | Microsoft Security
• 08Mar2010 Don’t fall for phony phone tech support - Security Tips & Talk - Site Home - MSDN Blogs
• 26Aug2010 Microsoft issues warning on phone scam, Security and Privacy, News Centre | Microsoft Australia
• 16May2011 Local news says, “Those calls are not coming from Microsoft” - Security Tips & Talk - Site Home - MSDN Blogs

History

Articles illustrative of the on-going telephone scam problem:

• Bogus Support Organizations use Live Operators to Install Malware
• Police close in on PC support fraudsters
• Sunbelt Blog: Help desk phone scams are alive and well
• Virus phone scam being run from call centres in India | Technology | The Guardian
• Canadians increasingly defrauded by fake tech support phone calls | Naked Security
• ISC Diary | Microsoft Support Scam (again)

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...