CAVEAT: Over the past two weeks, we have had several students connect with us stating that their social media accounts had been “hacked” and that they no longer were able to access or use their account. After digging a little deeper, we learned that they fell victim to a Google Voice Verification Code Scam.
Account takeover scams are becoming increasingly sophisticated, preying on unsuspecting individuals through various online social media platforms. One such scam that has been on the rise again is the Google Voice Verification Code scam – here’s how it works and what you need to know to protect yourself.
Scammers often lurk on online marketplaces, posing as legitimate buyers or sellers. They initiate contact with their potential victims under the guise of being cautious due to previous scams they claim to have experienced. To establish trust, they will send you a confirmation code from Google.
Once the victim receives the verification code, they are convinced to share it with the scammer, believing it to be a harmless step in the transaction process to prove identity. However, this is where the scam unfolds. The scammer then uses the code to set up call forwarding to their phone from the victim’s phone number through Google Voice mail. With call forwarding activated, all incoming calls and text messages intended for the victim’s phone are also routed to the scammer’s device.
Using the victim’s phone number, the scammer leverages it to reset passwords on various social media accounts that the victim owns. Once they gain access, they seize control of the victim’s accounts, locking them out, and assuming full command and control of the account.
With unrestricted access to the victim’s social media profiles, the scammer can now wreak havoc. They may harvest personal information, manipulate content, or impersonate the victim to target their contacts. This not only jeopardizes the victim’s privacy but also risks tarnishing their reputation and relationships.
When the victim attempts to reset their password with a new password on their compromised social media platforms, this too is sent to the scammer, who now has your new password and begins the hijack process all over again.
So How Do You Protect Yourself From This Scam:
- Be wary of sharing sensitive information, such as verification codes, with unknown parties, especially on online platforms.
- Avoid transactions that require sharing verification codes as a prerequisite for legitimacy.
- Implement strong, unique passwords for all your online accounts and enable two-factor authentication where possible.
- Refrain from publicly displaying your phone number on social media profiles to mitigate the risk of exploitation.
- Stay abreast of emerging scams and educate yourself on common tactics used by fraudsters to stay one step ahead.
Account takeover scams like the Google Verification Code scam highlight the growing sophistication of online fraudsters, and even fellow teens, who prey on unsuspecting individuals across various social media platforms. This scam operates under the guise of establishing trust through the exchange of verification codes, ultimately leading to the hijacking of victims’ accounts and the potential exploitation of personal information. To safeguard yourself against such scams, it’s crucial to exercise caution, avoid sharing sensitive information, and strengthen your online security measures. By staying informed, vigilant, and proactive in protecting your onlife presence, you can reduce the risk of falling victim to these malicious schemes and help create a safer onlife environment for yourself and others.
The White Hatter
