Staying off the phishing hook – How to avoid getting lured in by social-media “angler phishing” scams

October 20, 2021 | Fall 2021


Share

Laptop open and shining a light on the keyboard

With the incredible popularity of social media sites like Facebook, Twitter and Instagram, it’s not surprising that cyber criminals are targeting these sites’ users with “angler phishing” scams. Here are a few steps to help ensure you don’t become the next “phish dinner” for a cyber criminal.

“May I be of service?” – caught in the angler’s net

Cyber criminals are increasingly using the messaging services – in-app communications – of social media apps to identify and contact users. According to the RBC Cyber Security experts, the “angler phishing” scam works as follows:

  • Criminals identify active social media users and track public conversations or messages, looking for requests for technical help.
  • They send messages to these active users pretending to be the help desk for a legitimate business or organization, offering technical assistance or advice.
  • The criminals lead their targets to a phony social media account or page, where they are asked to give out personal information (for identity theft purposes) or even transfer money.

Avoiding the angler phisher’s lure

To avoid being the next victim of an angler phisher scam, ensure you are:

  1. Wary of contacting companies on social media: When messaging, check the legitimacy of the company username, and keep your conversation private by using the direct messaging feature.
  2. Careful not to “overshare”: To reduce the chances that cyber criminals can use your information against you or on its own to engage in identity theft, minimize sharing of any personal or business information, such as email addresses, home address and personal details.
  3. Leery of any “instant friends”: On many social media sites, once you allow a user to become a “friend” they can access all of your information and all intimate personal details you have posted.
  4. Engaging all privacy settings: Check all of your social media sites’ privacy settings to ensure you are only sharing information that you are comfortable with sharing and that won’t compromise your security against cyber criminals.
  5. Looking before biting: Phishing scams often depend on users making hasty decisions. Before reacting to any request, email or message that seems even remotely suspect, check in with your local RBC branch or call us at 1-800-769-2511 -- we may be able to help.

Be cyber aware – spotting the bad worm

Social media sites can offer great ways to communicate with friends, family and businesses. But unfortunately, as in the physical world, it is important to always remain vigilant and aware of your surroundings.

Cyber criminals are constantly evolving their nefarious ways to better deceive and manipulate online users, so it helps to remain up-to-date to protect yourself. If you are interested in learning more, check out the RBC Cyber Security site. Also, use the top-notch security offered through RBC Wealth Management Online whenever you want to safely communicate with your RBC Dominion Securities Investment Advisor.


This information is not intended as nor does it constitute tax or legal advice. Readers should consult their own lawyer, accountant or other professional advisor when planning to implement a strategy. This information is not investment advice and should be used only in conjunction with a discussion with your RBC Dominion Securities Inc. Investment Advisor. This will ensure that your own circumstances have been considered properly and that action is taken on the latest available information. The information contained herein has been obtained from sources believed to be reliable at the time obtained but neither RBC Dominion Securities Inc. nor its employees, agents, or information suppliers can guarantee its accuracy or completeness. This report is not and under no circumstances is to be construed as an offer to sell or the solicitation of an offer to buy any securities. This report is furnished on the basis and understanding that neither RBC Dominion Securities Inc. nor its employees, agents, or information suppliers is to be under any responsibility or liability whatsoever in respect thereof. The inventories of  RBC Dominion Securities Inc. may from time to time include securities mentioned herein. RBC Dominion Securities Inc.* and Royal Bank of Canada are separate corporate entities which are affiliated. *Member-Canadian Investor Protection Fund. RBC Dominion Securities Inc. is a member company of RBC Wealth Management, a business segment of Royal Bank of Canada. ® / TM Trademark(s) of Royal Bank of Canada. Used under license.