Scammers recently launched a phishing campaign that spoofs the BBB. Emails are going to business owners and consumers, claiming that the recipient has been a subject to a BBB complaint. This is a scam. The emails carry links to websites which drop malware onto the victim's computer.
"The phishing emails are targeting BBB Accredited Businesses. This is the fifth wave since November 2012 using the BBB's name and logo in an attempt to look like a notice of a newly filed complaint," said Vee Daniel, president and CEO, Better Business Bureau of the Upstate.
Whether by an attachment or a link, the phishing emails attempt to trick the recipient into clicking and opening the "complaint," which downloads malware onto their computer. The malware is designed to infect the computer and look for information such as bank account numbers and passwords in order to steal money from the recipients' accounts.
If you receive an email that looks like it is about a BBB complaint:
- Do NOT click on any links or attachments.
- Read the email carefully for signs that it may be fake (for example, misspellings, grammar, generic greetings such as "Dear member" instead of a name, etc.).
- Be wary of any urgent instructions to take specified action such as "Click on the link or your account will be closed."
- Hover your mouse over links without clicking to see if the address is truly from bbb.org.
- Delete the email from your computer completely (be sure to empty your "trash can" or "recycling bin," as well).
- Run anti-virus software updates frequently and do a full system scan.
- If you are not certain whether the complaint is legitimate, contact us at (864) 242-6905.
- Forward the email to email@example.com so that our security team can track the perpetrators. If you receive a "bounce" message, there is no need to resubmit.
Your BBB also recommends that all businesses take steps to secure their data and the information they've collected on their customers. BBB's "Data Security - Made Simpler" is available free-of-charge at www.bbb.org/data-security.