Full Notification

Below is a summary of a telephone/online scam recently reported. Apparently the success rate for the scammers is good enough to keep them going and they have been able to avoid detection as the perpetrators are suspected to operate from overseas.

Information was learned:
The caller will call from a fictitious (or "spoofed") telephone number (frequently 212-345-6789)

The caller ID will indicate an apparent real name or company (the name "Marsh McLellan" is often used)

The caller may speak in an Indian-sounding accent
The caller may have multiple scammers to transfer the call to giving the appearance they are working for a large company with supervisors.

The caller will know the victim's first and last name
The caller will claim to be from a legitimate company (Microsoft or another company) when in fact they are not.

The caller will advise the victim their computer has a virus and will offer to assist the victim in fixing the problems. The caller will attempt to talk their way into gaining remote access to the victim's computer
The caller shows the victim things on their computer convincing them they are legitimate and their computer is infected with a virus when it is in fact not.

The caller is prepared with a answers to victims' questions as they have been running this scam for years. The caller prompts the victim to pay them (sometimes via PayPal) prior to "fixing" the computer ($299.) The caller may open a PayPal window or go to PayPal's website for the victim.

If the victim refuses; they are unable to convince the victim, they may take retaliatory action against the victim such as infecting their computer, encrypting the computer, or deleting personal files.

Tracking the perpetrators is difficult as they will use fictitious names, telephone numbers, and IP addresses and are suspected to be located overseas (possibly in countries that do not cooperate with our law enforcement).

RECOMMENDATIONS TO THE PUBLIC:
Do not answer any telephone calls from suspicious telephone numbers, numbers you do not recognize, or caller ID names you are unfamiliar with.

Do not give any personal information over the telephone
Never allow remote access to your computer (especially when you do not initiate the request for assistance)

Install an anti-virus program on your computer and update the program regularly

Run a complete system scan for viruses and malware at least once per month

Change all passwords monthly (secure passwords have many characters (8 or more is recommended) and a mixture of at least three of the following: uppercase letters, lowercase letters, numbers, and special characters/symbols and do not contain common words or names of family, pets, or birth dates).

Change the password to your wireless router using a strong password.
Do not share your password(s) with anyone.

Avoid writing down your passwords especially in places visible to tradesmen or guests who may enter your house or workplace.

Do not stay signed in to online accounts (especially PayPal or other bank accounts) when you leave your computer or when you no longer need the account to be signed into.