Scams Targeting Smartphones & Mobile Devices

There are two major types of phone “cloning.” Scammers may fully clone the phone’s identity, or they may just clone the phone’s data. Both methods are used to spy on the original phone and steal valuable personal data. To clone the phone’s identity, scammers steal the IMEI numbers from the SIM card, or the phone’s serial number.

Meanwhile, the process of cloning phone data is usually accomplished through a spy app. The latter is actually semi-legal due to the fact that these are often marketed openly as a solution for parental and employer monitoring. However, these apps can be abused.

In order to clone a phone’s identity, a scammer would need access to your SIM card for a short period of time. Signs of your phone being cloned may include:

• Unexpected updates or prompts to restart your device;
• Odd activity on your phone bill;
• Lack of texts or calls;
• Inability to access accounts.

It may also be helpful to use the Find My Device app to see if your phone’s location is accurate.

It is even more difficult to identify whether there is spyware on your phone. Major indicators are unexplained battery drain and data usage. As both types of phone cloning often involve physical access to your phone, it is prudent to be on high alert if you think anyone has accessed your phone without your knowledge and to ensure that your phone is locked by default. It is also important to not click on any suspicious links you receive or to share any identifying information about your phone without complete certainty that the request is truly coming from your phone provider.

It is possible for scammers to create and advertise apps that appear to be a legitimate app distributed by a well-known brand. These dupes can be very convincing, so it will be helpful to take some precautions whenever you download a new app, such as:

• Complete any security updates on your phone.
• Be cautious when providing any personal information.
• Check reviews for the app.
• Avoid any apparent duplicates in the app store.
• Be wary of suspiciously cheap apps. Some legitimate apps can be cheap, but it is cause for concern if you know or suspect the original app to be on the more expensive side.
• Follow your gut. If something seems wrong, don’t take chances.

“Ghost brokers” are individuals or groups who pose as an insurance agency to steal your personal information. The major signs of a phone insurance scam are incredibly low premiums and especially pushy behavior from the broker. To avoid phone insurance scams, you should always look up information and reviews about the company, and try approaching the company through another channel. It is important to note that ghost brokers may send you legitimate documents from a real company because their goal is often to use your information to fraudulently buy insurance for their own use.

Ransomware, as the name suggests, is a type of scam that holds your personal information or accounts hostage pending payment from you. This may be done in a variety of ways. Some common tactics are threats to publish your personal information, blocking access to your accounts, or encrypting your files.

To avoid becoming a victim of a ransomware scam, you should ensure that you are using up-to-date antivirus software, do not click on suspicious links, and do not offer personal information without being very certain of the identity of the other individual and the legitimacy of their request. If you have already been victimized by ransomware, take the following steps:

• If the ransomware was installed as a result of clicking on a link, take a picture of the message or page.
• Turn off and unplug your computer to prevent further damage;
• Call an IT professional.

Robocalls are automated calling and messaging systems. They are not necessarily scams (although they certainly can be), but they are usually annoying. Some steps to reduce or eliminate robocalls include:

• Use of call filtering options;
• Blocking robocallers;
• Signing up for the National Do Not Call Registry.

The following steps can prevent phone theft or information theft in the event of your phone being stolen:

• Install a “find my device” app;
• Use a lock screen;
• Backup your information;
• Do not leave your phone laying on counters, tables, etc.

In the event that your phone is lost or stolen, take the following steps:

• File a police report;
• Lock your phone remotely if possible;
• Call your cellular provider;
• Call your bank.

Subscriber fraud is the act of fraudulently opening an account using another person’s personal information. Scammers using this tactic may steal your information in a variety of ways; therefore, the best way to prevent subscriber fraud using your information is to take some good, general precautions, such as:

• Use a lock screen.
• Don’t leave your phone unattended.
• Don’t click on suspicious links.
• Don’t give out your personal information.

Tech support scammers pose as tech support trying to help you resolve a fake issue with your device. It is important to note that these scammers will often pose as representatives of well-known companies. You can identify tech support scams by looking for the following signs:

• You didn’t reach out to tech support.
• They are being very pushy.
• They quickly ask for remote access.
• You receive suspicious pop-ups.
• They ask you to wire them money, put money on a card, or use a money transfer app.

If you have already fallen prey to a tech support scam, update your computer’s security, change any usernames or passwords you shared, and contact the relevant bank or card issuer about halting any transactions with the scammer.

“Phishing” refers to any scam used to steal your personal information, usually through messaging. They may pose as a trusted organization, or even as someone you know. The following are warning signs for phishing:

• Suspicious calls-to-action;
• Unusual email address or phone number;
• Suspicious links;
• Requests for sensitive personal or company information;
• Page redirects.

If you have been victimized by a phishing scam, take the following steps:

• Contact any victimized organizations.
• Do a virus scan.
• Change passwords.
• File a report with the FTC.

Fake apps are one tactic scammers can use to trick you into handing over your money and/or personal information. These apps very likely will pose as a popular app and/or an app produced by a well-known brand. Therefore, it is important to keep an eye out for these dupes. The first thing you should do is to make sure that you are only downloading apps from official stores like Apple’s App Store or the Android Market. However, this alone won’t completely protect you. Some fraudulent apps have been known to slip past these stores’ review processes. So in addition to only purchasing apps from official stores, you should also take the following measures:

• Look for any duplicate apps.
• Check the reviews for the app.
• Be wary of suspiciously low pricing.
• Be on the lookout for unprofessionalism like spelling mistakes.

If a phone number, app, etc. seems suspicious to you, try researching online with a search query such as: “Is [insert name/number] legit?” If it is a scam, you are very likely to get search results from review sites indicating as much. It is also important to note, however, that in many situations, scam apps, phone numbers, etc. will dupe something real, in which case, independent research may indicate that the app, phone number, etc. is safe, even if it isn’t. Therefore, it is also important to check reviews for that specific iteration of the app in the app store itself. Beyond that, the best thing to do is to be on the lookout for suspicious behavior like pushy calls-to-action, unprofessionalism, and requests for personal information or money.

Never give out your information without being completely certain of whom you are giving it to and that they truly have need of it. Some entities like insurance providers, banks, and medical providers truly may need some of your sensitive personal information, but scammers also commonly pose as these entities. Therefore, take the following steps if someone is requesting your personal information:

• Ask them why they need the information.
• Do research on their company and phone number.
• Try contacting the company through another channel.
• If they are saying they represent a company you already do business with, consider whether they have ever asked for that kind of information before.
• Trust your gut. If something seems off, end the conversation and tell them that you will contact their company again shortly.
• Consider going to the company in person if possible.

You should always maintain some caution when receiving unfamiliar calls, even if they appear to be coming from your area. If you are commonly dealing with scam calls, it may be best to save all important numbers in your phone, and utilize a call filter.

Understanding your device’s security settings can provide you with additional tools to protect yourself from scammers. In many cases, basic security settings are optional and will need to be turned on manually in your settings. This includes things like passcodes, call filters, and privacy settings.

It is also helpful to use strong passwords and pins. The following steps can ensure that your information has strong password protection:

• Utilize multi-factor authentication.
• Periodically reset your password.
• Do not recycle passwords.
• Do not use personal information such as your birth date in your password.
• Do not use common passwords or PINs such as “0000.”

While public Wi-Fi can be a very useful tool, it can also be an opportunity for scammers to steal your information. If you are concerned about keeping your information safe while using public Wi-Fi, use the following safety measures:

• Avoid logging into bank accounts on public Wi-Fi.
• Avoid logging into anything with your credit card information.
• Do not use public charging stations.
• Use a VPN.
• Verify the network.

If you are concerned about using public Wi-Fi, utilize cellular data. It may also be helpful to use secured networks. It is also possible to get Wi-Fi wherever you go by using options like portable routers or hotspots. Plus, with the expansion of 5G networks, mobile data is both widely accessible and delivered high speed, allowing you to go without Wi-Fi in more places.

It is important to install updates regularly. Updates often resolve issues and bugs or even offer additional security settings.

The first thing you should do is end all contact with the scammer. This can mean hanging up the phone, not replying to any further emails/texts/letters, or blocking the scammer’s number/email. It may even be helpful to turn off and unplug your device if you believe malware has been downloaded.

This may seem like a no-brainer, but scammers may still try to deceive someone even after they’ve been attacked. Scammers could pose as government agencies or say that they’ll return all your money back for a fee.

If someone has been the victim of fraud, identify theft, or deceptive business practices, they can report it to the FTC. It is important to report these scams because the FTC may be able to investigate your specific case and take steps to prevent further fraudulent activity from that source in the future.

It’s always important to contact your bank immediately if you have transferred any money to a scammer. The bank may be able to halt the transaction, or, barring that, close any exposed accounts to prevent the loss of any more money. Your bank will then also know to keep an eye out for suspicious activity regarding your account moving forward.

You should always file a fraud claim with your phone provider if you have fallen victim to a phone scam. Your phone provider will usually require proof of your identity, proof of your residence, and proof of a police report. Your provider can then help you explore options and take action against the scammer.

It is important for victims of a scam to discuss what they’ve been through with their loved ones. Talking it out may help reduce your stress about the event.

Sharing your experience may also help your loved ones avoid falling victim to a similar scheme. It is especially important to discuss the dangers of scams with both very young and elderly loved ones, as they may be easier targets for scammers.