Nayu's Craft Time #312 PSA: Text Phishing is real.

I really was going to have a short light post explaining what I've been up, which shiny new toy I have (Pikachu themed Nintendo 2DS XL (large size)), how my current craft project is going, until a phone call I had just now with PayPal making this a PSA must read post. 

I bought my new Nintendo console on Thursday. Friday morning I had a text allegedly from PayPal saying: 

There was an issue processing your last bill payment. To avoid charges to your account, please update your billing information at blahblahblah. 

They gave what seemed like a legitimate web address, but I am super suspicious of anything, so obviously didn't click on the link. I went to the PayPal website using the address I usually use, I filled in a form, explained the situation and waited for a response. 

Question everything

I can't remember when I got my first reply, but the message gave me common info to what my problem could have been. I had to reply to that message to get some info from an advisor. I just checked my email today and got asked to call PayPal because of the sensitive nature of the call. I double checked online that the number I was given in that official PayPal email was genuine and it was.

I phoned PayPal (thankfully a free phone number), spoke to the advisor who said there was absolutely nothing wrong with my account, there was no issue with payment or anything like that. He explained that unfortunately these things happen, it doesn't mean that someone has my account details, they get my text details from wherever phone numbers are found for unscrupulous individuals, and they just send text messages in the hope someone will click on the link. 

It was just pure coincidence that this happened shortly after buying my console, which had arrived safely which is why I felt there probably wasn't an issue. I have bought other things online using PayPal in the last month and not had a problem. The advisor was amazing as I instantly panicking the moment he said it wasn't a text from them (he looked through all the communication they had sent me in the last month), but he reassured me the people who have my number do not have my details, they want them, which is why they sent the text.

I am glad and fortunate that I am so suspicious of anything saying there's a problem, even from a company I trust I always find a different way to contact them to check what's going on. While I was told I don't have to change my password, I am changing it to make myself feel that bit more secure with PayPal. PayPal is so convenient and secure that I'm not going to stop using it. The advisor didn't ask me much info, and only after he gave the info they had on their system which is how I knew he was genuine because fraudsters don't necessarily give info, they want you to give it.

I was going to block the number, but when trying to do so my phone told me their number was invalid. Of course it is!! Deleting it is very satisfying.

I'm so thankful I had the idea to check the situation out for myself

Fraud/phishing isn't restricted to just emails guys, it can apparently happen in a text too. Please don't believe that an email from a company is true - most companies say how you can identify if it's a genuine communication (some use your postcode or other details).  

I feel blessed by God that I have such a suspicious nature, because that text really did look realistic. That suspicion and the fact I don't go online to websites on my phone that I didn't click on it, otherwise I would have. 

So please, be mindful that you can be scammed by text as well as by email, and it's important to know what genuine contact looks like/contains from the companies you deal with. If you have any concerns find out how to contact the company separately from whatever communication you have been sent that seems odd, and they will quickly be able to confirm if it is them or not. Even if you know what to look for in an email, be mindful there are other ways to lure you into revealing account details. If a company phones me and says they are a company I use, I make up an excuse to hang up then I immediately ring the company on a number I know. 

I think I've repeated the same info in this post a few times but if it helps just one more person stay safe then it's worth it. I don't want anyone to be scammed. 

Life is good too!