PORTLAND, OR -- The FBI is investigating an emerging social media scam. Hackers take over a person’s Facebook account, then post big-ticket items for sale that don’t exist, like trucks, trailers and ATVs. They claim to be selling the possessions of a relative forced to move into "aged care" and can only communicate through online messaging apps. In just one Oregon incident, around a dozen people lost more than $10,000.
FBI Portland Cybersquad Supervisory Special Agent Yaqub Prowell says the first step to protecting yourself is to try to avoid getting hacked. "We want to use strong, unique passwords, as just kind of the basics of cyber hygiene. You definitely want to enable multi-factor authentication, wherever that’s available. You want to avoid unsecure wifi networks." He adds, "Also limit oversharing. Be mindful of what you post on social media, because personal information can always be used against you."
Prowell says hackers use various tactics to achieve one goal: Getting money. "In order to make that money, they have to get you to do something that you may not normally do." He says they do that by using social psychology. The items listed for sale in the scam are well below market value. It's a strategy Prowell has seen before, "Something that looks like a deal that’s just amazing and too good to be true, combined with the fact that it appears to be emanating or originating from someone that you know, that plays into our basic psychology; now we have trust."
The hackers then use that trust to convince the victim to put a "deposit" down on an item, using a money transfer app. "At the end of the day, criminals want to make money. So, in general, if you are suddenly being asked for money from people that you know, and they’re asking you to send that money via electronic means, you really need to make sure that they are legit and that what they’re requesting is a legitimate request." Prowell says, "Please, pick up the phone. Talk to your friend. Actually have a more close, genuine, human connection, to [be] assured that those communications that you’re having are legitimate."
It's just the latest cybersecurity threat. According to the FBI's latest report, Oregonians lost over a billion dollars in 2023 to cyber-related fraud and other internet-based crimes. Prowell says, "These things can be mitigated and avoided with some basic cyber hygiene, as well as just developing the muscle memory of not being complacent in your communications with individuals that are purporting to be trustworthy."
He urges victims of cyber crimes to report it, regardless of dollar amount, at IC3.gov.