Embed Size (px)
Citation preview
Safeguarding Against
Scamming
Human nature
What social engineers want
To manipulate us
To steal our money
To access our personal information
It is easier to manipulate a person than to hack a system!
We like to be liked
Urgency & deadlines
Comply with authority
The Social Engineer’s Toolkit
There are five routes a fraudster can take into your home.
Can you name them?
There are five routes a fraudster can take into your home.
Home Phone:Vishing
Personal details are obtained by a fraudsterposing as a trusted source over the telephone
Don’t report this call, it could ruin the investigation
This is the fraud department. Your money is at risk if you don’t act NOW!
You can trust me, I’m from your bank, how else would I have your details?
The only way to secure your money is to move it to this safe account ...
Vishing
Internet:Online Fraud
Frauds committed using the internet.
Can you name a few?
Internet:Online Fraud
Account takeover
Advance fee frauds
Bank card and cheque fraud
Business directory fraud
Business opportunity fraud
Charity donation fraud
Clairvoyant or psychic scams
Click fraud
Domain name scams
Fraud recovery fraud
Government agency scams
Health scams
Holiday fraud
Identity fraud
Inheritance fraud
Internet auction fraud
Internet dialler scam
Investment fraud
Loan scams
Lottery scams
Mass marketing fraud
Miracle health scams
Internet:Online Fraud
Money muling
Online shopping fraud
Plastic card fraud
Rental fraud
Romance scams
Vehicle matching scams
West African or 419 scam
Work from home scams
Internet:Phishing
Legitimate looking emails containingfraudulent links which allow thefraudster to obtain your personaldetails
Phishing
Internet:Phishing
Mobile Phone:Smishing
Text messages are sent to victims to lurethem into divulging their personal details
Mobile Phone:Smishing
Technology Fraud
Letterbox: Identity Fraud
• Protect your mail
• Ensure communal mail boxes are secure.
• Check your bank statements and credit file
• Received by an 85 year old woman who lives alone.
• Her neighbour did not receive this letter.
• The woman appears to have been targeted.
‘this information must
be kept away from the
public to avoid
unwarranted abuse of
the programme or
fraudulent acts from
criminal minded and
unauthorized
person(s)’
Doorstep:Bogus Callers
Police Scotland campaign 2018
Remember me? I’ve come for my payment
Just because you don’t remember me, doesn’t mean I’m not owed money!
DoorstepBogus Callers
Vulnerable people are exploited to pay for non-existent or sub-standard work.
Who is at the door?
Who is at the door?
P@s$w0rds123
Password Exercise
How many
applications/systems do
I use that require a
password?
Unique passwords
Multifactor authentication
Choosing passwords
Not easily guessed
Passwords
Government Cyber Aware campaign
www.cyberaware.gov.uk
Three Random Words
Any Questions?
Thank you for listening!
Follow us at @nhsscfs
National Services ScotlandCounter Fraud Services
3 Bain SquareLivingstonEH54 7DQ
Direct Number: 01506 705200
Fraud Hotline: 08000 15 16 28
Fraud Online: www.cfs.scot.nhs.uk
Contact Details
Follow us at @nhsscfs
Presentation queries: [email protected]
