Saturday, January 31, 2026

New York Officials Sound the Alarm – Residents Falling for a Dangerous New Fraud Trend

 Big shout out to the Apple SIG for passing this along!

New York Officials Sound the Alarm – Residents Falling for a Dangerous New Fraud Trend

Read online here.

​

​

People are losing their hard earned savings, often in ways they never imagined possible. It’s happening quietly, sometimes at the kitchen table or while checking email before bed. New York officials are issuing warnings about a rising wave of fraud schemes that are increasingly clever and alarmingly effective.

The methods these scammers use have evolved far beyond the clumsy emails of the past. They now involve sophisticated impersonations of businesses you trust, the bank you’ve used for decades, even government agencies. They’re counting on your willingness to respond when something feels urgent.

The Setup Feels Disturbingly Real

The fraud often begins with impersonation tactics, including messages claiming to be from police, government agencies, or other officials. You might get a text saying there’s a problem with a delivery or an email warning that your account has been compromised. Sometimes it’s a phone call from someone who sounds professional and knows just enough about you to seem legitimate.

The scary part isn’t just that the messages arrive out of nowhere. It’s how convincing they are. Scammers are using AI to create convincing messages and impersonate officials. Artificial intelligence is helping scammers sound more believable than ever.

The Pressure Tactic That Makes People Panic

Here’s where things get dangerous. Once you engage, the scammer shifts into high pressure mode. Urgency is another major warning sign. They’ll tell you that your account will be frozen, a payment will bounce, or you’ll miss out on a refund unless you act immediately.

Scammers often try to create urgency. They know that when people feel rushed, they’re more likely to make mistakes. That moment of panic is exactly what these criminals are counting on. The goal is to get you to hand over verification codes, banking details, or authorize payments before you have time to think clearly.

Verification Codes Are the New Target

Scammers have figured out that verification codes are the key to unlocking everything. Victims are often asked to read a text with a six digit code, which can provide fraudsters access to your computer or account and enable an account takeover. 

A bank colleague will never call you and ask for verification codes. If you get such a call, it’s a scammer attempting to gain access to your account. Never share any verification codes over the phone. Honestly, it sounds simple, yet people fall for it every day because the setup is so convincing.

Flooding Your Inbox to Hide the Truth

Scammers have developed a disturbing new trick that’s particularly effective. Scammers can flood your inbox with hundreds of emails, burying legitimate warning notifications from your bank. Think about that for a second. Your bank might actually be trying to alert you that something’s wrong, sending you urgent emails to protect your account.

Yet those warnings get buried under a sudden avalanche of spam. By the time you sort through the mess and realize what’s happening, the money is already gone. It’s a clever and cruel tactic that takes advantage of the very systems designed to protect us.

AI Has Changed Everything About These Scams

Scammers are expected to be even more active in 2026, getting much harder to spot, with artificial intelligence helping scammers sound more believable than ever. Deepfakes and attacks using synthetic documents are expected to surge as cybercriminals twist artificial intelligence to their advantage, allowing fraudsters to generate convincing voice, video, and document forgeries.

This isn’t science fiction anymore. The technology exists right now, and criminals are using it. The days of simple phishing emails are long gone, with AI-generated identities impersonating loved ones and attacks targeting vulnerabilities built on consumer trust.

New Yorkers Are Feeling the Impact

The financial damage is staggering. Last year, the FBI reported crimes targeting older New Yorkers resulted in more than $257 million in financial losses, a 27% increase since 2023. More than 4,300 New Yorkers aged 60 and older lost over $203 million in 2023, averaging $47,000 per person.

That’s not just a statistic. It represents people who lost their retirement savings, their ability to pay bills, their sense of security. The trend continues to worsen with 6,200 complaints filed last year, and scams generated by artificial intelligence are growing more sophisticated, sending older adults into economic hardship.

Specific Scams Making the Rounds Right Now

The Saratoga County and Schenectady County Sheriff’s Offices are reporting a new text scam where messages claim a speed camera recorded you exceeding the speed limit, stating the fine remains unpaid, and you have 3 days to settle it or be unable to pass annual inspection. There’s a link, of course, designed to steal your information the moment you click it.

Attorney General James and Commissioner McDonald are urging New Yorkers to be vigilant about scammers pretending to be NY State of Health and selling fake health insurance. Scammers use fear by threatening that health insurance is at risk of cancellation or they use false offers of generosity through phishing scams offering gift cards or money to update health accounts.

Even Official Looking Communications Can Be Fake

The Department of Financial Services is alerting regulated entities to use caution before responding to outreach from individuals falsely claiming to represent DFS, after becoming aware of phishing emails purporting to come from DFS personnel. If even businesses and financial institutions are being targeted with official looking scams, imagine how easy it is for regular people to fall victim.

Legitimate DFS emails will be sent only from dfs.ny.gov or public.govdelivery.com, with at least some fake messages sent from myportal.dfs.ny.gov.cazepost.com. The fake addresses are designed to look real at a glance, counting on people not checking carefully.

What Officials Want You to Know

State authorities are emphasizing a critical point about how legitimate organizations actually operate. Real banks, government agencies, and businesses don’t demand immediate action through unsolicited messages. They don’t ask for sensitive information via text or email. Bank of America will never contact you to request that you move money to protect yourself from fraud.

The NYS Court System never asks, by phone, for financial or family information from members of the public. Do not give this kind of information to anyone claiming to represent the courts. It’s a simple rule that could save thousands of people from becoming victims.

The Most Effective Defense Strategies

Slow down. Seriously, that’s the first and most important thing. Scammers often try to create urgency. Take a moment to think. If someone is pressuring you to act immediately, that alone should raise a red flag.

Verify everything through official channels. If you get a call or message claiming to be from your bank, hang up and call the number on the back of your card. Before you send money, share a code or give personal information, verify the request by contacting the person directly using a trusted source, such as the phone number on the back of your card or a bank statement.

Protecting Yourself Takes Constant Vigilance

Some scammers create a sense of urgency that puts pressure on the victim to make an immediate decision. Recognizing this pattern is crucial. The New York Department of State’s Division of Consumer Protection warns about friendly greeting phishing scams, deceptive text messages from unknown senders that put your personal information and money at risk by clicking a link.

Don’t reply to text messages from unknown numbers. It seems obvious, yet engagement is exactly what scammers want. Even responding to say you’re not interested confirms that your number is active, making you a target for more scams.

Where to Report Suspicious Activity

If you encounter something that feels off, don’t just delete it and move on. Reporting suspicious messages helps authorities track patterns and warn others. You can report scams to the Federal Trade Commission.

New Yorkers are also urged to contact state consumer protection offices and local law enforcement when they suspect fraud. The New York State Department of State Division of Consumer Protection continues to update its resources relating to recognizing and preventing scam victimization to keep the public current with the latest trends. These agencies need to know what’s happening on the ground to effectively combat these operations.

The threat isn’t going away. Fraud is no longer a static threat but has become an evolving ecosystem continually powered by artificial intelligence, automation, and an expanding digital footprint. Public awareness remains the most powerful tool we have. Stay skeptical, verify everything, and never let urgency override your better judgment. Have you or someone you know encountered one of these scams? Share your story to help others stay safe.

Beware of scam emails from an official Microsoft email address

The scam emails are being sent from no-reply-powerbi@microsoft.com, which is a genuine Microsoft email address that’s used for notifications for Power BI (an analysis and collaboration tool). On this support page, Microsoft even explicitly recommends allowing this sender email address to bypass your spam filter so that important system messages aren’t blocked.

Cybercriminals are now exploiting this trust. The scam emails allegedly bring up unauthorized charges (via Ars Technica), usually in the amount of $400 to $700 USD. To stop the supposed payment, recipients are asked to call a specified telephone number as quickly as possible—a classic pressure tactic to provoke hasty reactions and one of the biggest red flags of a phishing scam email.

Click here to read the article.

How to increase the security of your Home Router

Routers are the gateway to everything. Basic settings let you connect to the internet, but some of them can also open the door to security risks. Others may not affect your privacy or bolster the security of your connection, but might stifle your bandwidth instead. One way or another, they're worth a peek.


Click here to read the article

Friday, January 30, 2026

Just another reminder about your GMAIL settings and how to protect your Privacy

 Has Google got its AIs on you?

A tech expert is urging Gmail users to switch off several features over concerns that Google could automatically access their sensitive email data and use it to train AI.

“IMPORTANT message for everyone using Gmail,” engineering YouTuber Davey Jones wrote in a viral X PSA on this alleged digital Trojan Horse. “You have been automatically OPTED IN to allow Gmail to access all your private messages & attachments to train AI models.”

The cybersecurity expert added, “You have to manually turn off Smart Features in the Settings menu in TWO locations.”

Click here to see the rest of the article.

Thursday, January 29, 2026

How to Create a Safer Dating Profile to Protect Your Information

Online dating can feel like both a door and a window, a door that opens to connection, and a window that lets people peek into your life. After experiencing a romance scam, even the thought of opening that door again can feel overwhelming. If you’re ready to take that brave step, there are ways to do it more safely. 

Click here to read the article.

It's Data Privacy Week 2026!

Your online activity creates a treasure trove of data. This information ranges from your interests and purchases to your online behaviors, and it is collected by websites, apps, devices, services, and companies all around the globe. This data can even include information about your physical self, like health data – think about how an app on your phone might count how many steps you take.

Check out the resources below to better manage your personal information and make informed decisions about who receives your data.

Click here to access the 2026 Data Privacy Week Web Page

Wednesday, January 28, 2026

You’re probably backing up your data the wrong way

Most people use cloud backup options, with Google Drive, OneDrive, and iCloud being among the favorites. Another group relies on external drives. Regardless of your backup option, you assume that, since you’ve checked that box, you're fine and don’t need to understand it; nothing seems out of place.

However, the uncomfortable truth is that you are probably backing up your data the wrong way. A green checkmark or a completed backup log doesn't mean you have the right solution. The real test is in restoring a file, a folder, or a system from your backups and judging its longevity. It’s only when you dig into these elements that you may notice the cracks.

Click here to read the article.


Tuesday, January 27, 2026

Six Scams to Watch Out for During Tax Season

The 2026 tax filing season—for 2025 returns—begins on Jan. 26, which means scammers are ramping up efforts to steal taxpayers' information and money. These are a few of the tax-related schemes to watch out for this year.

Click here to read the article.

Monday, January 26, 2026

Google to Make Sideloading Android Apps a High-Friction Process

Google is trying to keep Android users safer by making the sideloading app flow more difficult and convoluted, according to new reports.  One of the features that Android prides itself on is the ability to install apps from outside the store. Manually installing apps sounds like a simple feature, but in reality, it's also one of the main reasons why the platform is targeted by criminals.

Click here to read the article.

The first big Windows update of 2026 is a glitchy mess - here's the full list of bugs and fixes

 Released on Jan. 13, the first major Windows update of the year had a clear mission -- to resolve the 114 security vulnerabilities putting Windows users at risk. Several of these were rated critical, while one had already been exploited in the wild. Plus, the January update fixed a few outstanding issues in Windows itself.

Click here to read the article.

Saturday, January 24, 2026

Here is why Microsoft rolls out monthly Windows patches on Tuesday only

 For the past couple of decades (specifically, since October 2003), "Patch Tuesday" Windows updates have been a regular fixture that land on the second Tuesday of every month. They are designed to roll out aggregated fixes and security patches for Windows SKUs. But have you wondered why Microsoft decided on this cadence of releasing Patch Tuesday updates on that particular day of the week rather than any other?


Click here tor read the article.

FBI bypasses "impenetrable" encryption using BitLocker keys supplied by Microsoft

 Microsoft has confirmed that it works with law enforcement agencies when it gets a valid court order or warrant, even to the extent of providing BitLocker recovery keys to law enforcement agencies. Forbes uncovered this disclosure following a federal fraud investigation in Guam where the FBI successfully used keys supplied by Microsoft to unlock three encrypted laptops linked to a COVID-19 unemployment assistance scheme.

Click here to read the article.

Friday, January 23, 2026

How to stop iPhone apps from tracking you (and why you shouldn't wait to do it)

When you open an iPhone app, you have probably seen a pop-up asking for permission to track you. I have always wondered who taps Allow, because if you care even a little about privacy, app tracking is one of the first iOS settings you should want to shut down.

Click here to read the article.

How to remove your home address from the internet — 6 ways to protect your privacy

 Your home address could be floating around somewhere on the internet in more places than you'd expect. I googled my own name recently and was genuinely shocked to see where I currently reside and even the previous town I lived in pop up in search results.


Click here to read the article.

Wednesday, January 21, 2026

What happens to your computer when you leave it on all the time?

 The question of whether you should turn your PC off every time you're done using it or if it is okay to leave it running all the time has often been debated – with varying answers of many degrees over the years, ranging from turning it off to just putting it to sleep, and even some recommending using the hibernate functionality instead.


Click here to read the article.

The unsubscribe trap: Why that one click makes you a bigger target.

 Kim Komando scouts the hidden risks of hitting unsubscribe on junk mail. Learn why one in 644 of these links is a trap designed to steal your data and how to use built-in email safety tools to stay protected.

Click here to read the article.

Good reading about WiFi 7 - Why a $600 router won’t speed up your internet

 Kim Komando explains why your $80 monthly plan is the real bottleneck for your home internet. Don’t fall for the Wi-Fi 7 hype because your router is just the off-ramp for a highway controlled by your ISP. Learn how to actually fix your signal for free instead of buying a Ferrari to drive to church.

Click here to read the article.

LastPass Warns of Fake Maintenance Messages Targeting Users' Master Passwords

LastPass is alerting users to a new active phishing campaign that's impersonating the password management service, which aims to trick users into giving up their master passwords.


Click here to read the article.

Monday, January 19, 2026

What is phishing, and how can you prevent this cyberattack?

 You get an email from a service you use, letting you know that your account is closing. Better click the link before it’s gone! Sounds legit, but if you click the link, you could be a victim of one of the oldest and most common cyber scams: phishing. So, what is phishing, exactly?


Click here to read the article.

Critical indicators that someone has compromised your smartphone and is monitoring your activity

 Click here to watch the Video

Stop Wi-Fi sharing: How to fix your router right now.

 The Current reveals how AI is turning your home router into a neighborhood spy. Kim Komando exposes the secret networks and shows you the 10-minute fix to take back your privacy today.

Click here to read the article.

Saturday, January 17, 2026

How to protect your credit cards from 'web skimming' scams

 You have probably heard of skimming, a type of fraud in which criminals install physical devices capable of capturing your payment card details on ATMs, gas pumps, and point-of-sale terminals. If you enter your debit or credit card into one of these fake card readers, your data is stored for later download or transmitted wirelessly in real time to a device controlled by scammers, who will use the information to steal from your accounts.


Click here to read the article.

Thursday, January 15, 2026

Lessons From the Classroom: What Kids in School Taught Me About Online Safety

Kids are aware of what’s happening around them. Some even mentioned the ongoing lawsuits involving Roblox. My own 10-year-old niece tried to catch me off guard a few weeks ago, asking if I (the author) knew about them. She was convinced she had the upper hand. She didn’t, but the moment stuck with me. Children are gleaning information about risk without fully understanding what it means for their safety.

Click here to read the article.

Wednesday, January 14, 2026

Upcoming Data Privacy Week - January 26-31.

Your online activity creates a treasure trove of data. This data ranges from your interests and purchases to your online behaviors, and it is collected by websites, apps, devices, services, and companies all around the globe. This data can even include information about your physical self, like health data – think about how an app on your phone might count how many steps you take.

You cannot control how each little piece of data about you and your family is collected. However, you still have a right to data privacy. You can help manage your data with a few repeatable behaviors. Your data is valuable and you deserve to have a say!

Check out our resources below to better manage your personal information and make informed decisions about who receives your data.


Click here to access the web site.

Majority of hedge funds boosted cybersecurity spending in 2025

 Eight of every 10 hedge funds and other investment firms increased spending on cybersecurity in 2025, according to a report Tuesday from the Hedge Fund Association and SeaGlass Technology.  About half of these firms said they were breached over the past 12 months. The survey is based on responses from 400 executives at these firms, including hedge fund managers, institutional investors and industry service providers.


Click here to read the article.

Hackers are using browser-in-the-browser trick to steal Facebook logins

 If you’re still using Facebook, then I assume you’re old enough to remember watching John Wayne movies in the theater. Nevertheless, it remains a pretty juicy target for hackers and digital thieves. They’re using a technique that you should be aware of, even if your only interaction with the slop-ridden hellscape of Facebook is through your relatives: browser-in-the-browser attack,


Click here to read the article

Monday, January 12, 2026

Top 5 Ways Scammers Have Used AI and Deepfakes in 2025

AI is changing everything, including how scammers trick us. From fake voices to deepfake videos, here are the top ways criminals are weaponizing technology in 2025.

Click here to read the article.

Sunday, January 11, 2026

iPhone Users - Please upgrade to iOS26 - Current vulnerability exists for older versions (affects 800 million users)

 

Key Points

Apple warns of major security flaws in Safari affecting up to 800 million iPhones.

Vulnerabilities allow hackers to control devices and steal sensitive information.

Updating to iOS 26.2 is “the only effective defense,” experts say.


Click here to read the article

Saturday, January 10, 2026

Fraud attacks expected to ramp up in AI ‘perfect storm’

 2026 is poised to be “the year of impersonation attacks” amid an explosion of AI-powered tools, a fraud prevention expert said.

Click here to read the article.

Friday, January 9, 2026

Why would you want to disable Windows default security functions?

Windows Security is a highly capable system guardian.  In the recent ZDNet article "Best Antivirus for Windows 11" guide, they made the case that it isn't just a basic antivirus designed to be a stopgap; it's a full-blown first-party security suite that monitors downloads, blocks incoming threats, and instantly quarantines malware if it manages to bypass all defenses. One common reason someone might want to disable Windows Security is to install third-party software that the suite blocks. This interference can occur while installing a third-party antivirus program, niche open-source software, or apps from lesser-known independent developers. Windows Security can falsely flag safe programs as dangerous, but you should always double check any program that's being flagged, as there's likely a reason.  

Click here to read the article.

Wednesday, January 7, 2026

Staying Safe Online When Money is Tight

If you are facing financial instability, staying safe online can feel like a luxury. Cybersecurity tools often come with a hefty price tag, and it can be overwhelming to figure out what really matters. Luckily, you don’t need expensive software or fancy gadgets to protect yourself online. Here are some practical, no cost strategies you can use to safeguard your personal information and digital life. 

Click here to read the post.

Tuesday, January 6, 2026

Your accounts can still get hacked, even using multi-factor authentication

When it comes to digital safety, setting up an extra layer of security for accounts is heavily recommended. The idea behind this approach, known as multi-factor authentication (MFA), is to ensure that a bad actor will have to go through a second level of verification to get into an account, even if they've managed to obtain your password. This secondary layer of authentication could be an SMS with a one-time password, a security email, a local passkey, a biometric scan, or even a physical security key. Microsoft research suggests that MFA can reduce the chances of an account compromise by 99.22% in general, and 98.56% if the login credentials have been obtained.

Click here to read the article.

3 real-world threats that worry me most — and how to avoid them in 2026

Hackers may get all the headlines but real world scammers can be just as dangerous — if not more so — especially when the end result is the same. After spending the last decade writing about cyberattacks, data breaches, spyware and malware, I now find myself looking over my shoulder in the real world just as much as I do online.

Click here to read the article

Your Social Security number is vulnerable to identity thieves — here's how to lock it down

Identity thieves want your Social Security number more than almost any other piece of personal information. With it, they can open credit cards in your name, file fraudulent tax returns, get jobs using your identity, and access government benefits you're entitled to.

Click here to read the article.

Sunday, January 4, 2026

How to file a cyber crime complaint with the FBI's Internet Crime Computer Center (IC3)

Between staying connected with family and friends, shopping and banking online, and working remotely, we all depend on security in our interconnected digital world. Criminals from every corner of the globe attack our digital systems on a near constant basis. They strike targets large and small — from corporate networks to personal smart phones. No one — and no device — is immune from the threat. The only way forward is together. In cyber security, where a single compromise can impact millions of people, there can be no weak links. Every organization and every individual needs to take smart, reasonable steps to protect their own devices and systems and to learn how to spot and avoid scams.

Click here to access the IC3 Web Site and learn more.

Friday, January 2, 2026

Why Travelers Should Never Toss Their Baggage Tags or Boarding Passes at the Airport.

After a long flight, ripping off your baggage tag and tossing it into the nearest airport trash might seem harmless. However, that small piece of paper can be surprisingly valuable to scammers.

Click here to read the article.