Phishing Scam in Nigeria - Truecaller Scam Alerts

Phishing Scams in Nigeria

Phishing Scam in Nigeria - Truecaller Scam Alerts

Phishing Scams in Nigeria

Phishing Scams in Nigeria

In a phishing scam, fraudsters cast a wide net by sending out mass emails or messages, hoping to trick recipients into providing their sensitive information, like their bank account information, email IDs or passwords, and similar important personal information. These messages often relay a sense of urgency to make recipients click on links or open attachments that lead to fake websites or malicious software installations. The term “phishing” is derived from the idea of “fishing” for personal information, and hence the nature of phishing is to send a scam message to as many people as possible.

Types of Phishing Scams

Email phishing:

Fraudulent emails designed to mimic legitimate organisations, often request their targets to update account information, verify login credentials, or take urgent actions to avoid consequences.

Spear phishing:

Targeted phishing attacks aimed at specific individuals or organisations, often using personalised information obtained through research or data breaches to increase the credibility of the scam.

Smishing:

Smishing attacks are conducted via SMS or text messages, where recipients are prompted to click on links or respond with sensitive information under the guise of urgent notifications or alerts. Some of the most common scams involve sending users messages requiring them to change their banking details.

Vishing:

Phishing attacks conducted over the phone, where fraudsters impersonate trusted entities to deceive victims into verbally providing personal or financial information, is called Vishing. The easiest is when the scammer tries to be someone the victim knows and cares for, and they try to create a distressing situation like they are stranded while traveling.

Clone phishing:

Scammers create fake copies of legitimate emails or emails or websites, altering them slightly to appear authentic, then send them to targets to trick them into providing sensitive information.

Examples of Phishing Scams across Nigeria

Email from a bank

You receive an email that appears to be from your bank informing you of suspicious activity on your account and urging you to click on a link to verify your information. The email may look legitimate, complete with the bank’s logo and branding, but the link leads to a fake website designed to steal your personal information.

Email from a streaming platform

You receive an email from a streaming platform like Netflix or Prime, saying that there were issues with your payment method and that you need to update it. They could also create a sense of urgency by adding a maximum timeline for the update. To be sure the claims are real, go to the official website of your streaming platform.

Package delivery scam

You receive an email or text message claiming to be from a package delivery service like GIG or Jumia, informing you that a package couldn't be delivered and requesting you to click on a link to reschedule delivery. Clicking on the link may lead to a phishing website or trigger the download of malicious software.

Social media phishing

You receive a message on social media from someone claiming to be a friend or acquaintance, asking for financial assistance, or sharing a link to a website offering exclusive deals or prizes. The message may be from a compromised account or a fake profile created by scammers to exploit your trust.

Red Flags To Look Out For Phishing Scams

Sender's email address:

Check the sender's email address carefully. Phishing emails often come from addresses that mimic legitimate organisations but may contain misspellings or slight variations.

Generic greetings or urgent language:

Be wary of emails that use generic greetings like "Dear Customer" or employ urgent language, such as "Immediate action required" or "Your account will be suspended." Scammers often use urgency to pressure recipients into acting quickly without thinking.

Suspicious links:

On a desktop, hover the mouse cursor over any links in the email (without clicking on them) to reveal the actual URL (for example, at the bottom left on the Chrome browser). Phishing emails often contain links that lead to fake websites or malicious pages designed to steal your information or infect your device with malware. Look for misspelled URLs or URLs that don't match the purported sender. Only click on links in your text messages if you are sure of the source. Truecaller can also be helpful for text messages. Once the app is installed, it lets you know whether a number is 'likely fraud' through its fraud detection services.

Requests for personal information:

Be cautious of emails or messages requesting sensitive information like account numbers, passwords, Social Security numbers, or login credentials. Legitimate organizations typically won't ask for this information via email or text messages.

Unsolicited attachments:

Avoid opening email attachments from unknown or unexpected sources, as they may contain malware or viruses. Even if the attachment appears harmless, it's better to be cautious.

Unusual requests or offers:

Be skeptical of emails promising unexpected prizes, lottery winnings, or exclusive deals, especially if they require you to provide personal or financial information or make a payment upfront. If an offer seems too good to be true, it probably is.

Verify information independently:

If you're unsure about the legitimacy of an email, independently verify the information through official channels. Contact the organisation directly using a trusted phone number or website (not the contact information provided in the email) to confirm the request or report suspicious activity. You can also search for the number on Truecaller and check if the number is marked as spam and if other users have left a comment for this number.

How To Prevent Phishing Scams

Use strong passwords:

Create strong, unique passwords for your accounts and avoid using the same password across multiple platforms. Consider using a password manager to generate and securely store complex passwords.

Download Truecaller:

Ensure that you are protected at all times by using Truecaller. You will be a part of a 400 million+ community worldwide that works towards making communication safer for everyone.

Enable multi-factor authentication (MFA):

Whenever possible, enable multi-factor authentication (MFA) on your accounts. MFA adds an extra layer of security by requiring additional verification, such as a one-time code sent to your phone, in addition to your password.

Use spam filters:

Enable spam filters on your email account to help filter out phishing emails before they reach your inbox. Most email providers offer built-in spam filters that can help identify and block suspicious messages.

Update security software:

Keep your computer, smartphone, and other devices up to date with the latest security patches and software updates. This includes operating systems, web browsers, and antivirus or anti-malware programs.

Be cautious on social media:

Be careful about sharing personal information on social media platforms, as scammers may use this information to tailor phishing attacks. Avoid clicking on suspicious links or accepting friend requests from unknown individuals.

How Scammers Operate a Phishing Scam in Nigeria

  • Communication Channels: Phishing scams use emails, social media, and SMS to send deceptive messages that mimic legitimate sources.
  • Phased Approach: Begins with a fake message leading to a spoofed website, where victims are tricked into entering sensitive information.
  • Geographical Targeting: Messages are often localized, reflecting the recipient’s language, currency, and cultural context.
  • Collaborative Scams: Scammers may coordinate across platforms to reinforce the legitimacy of their phishing attempts.

Psychologica­l Tactics Used

  • Fear Induction: Scammers create a sense of urgency, claiming that the victim’s account is compromised or that immediate action is needed.
  • Trust Manipulation: They often use familiar logos, language, and professional-sounding messages to build trust.

Impact on Phishing Victims

  • Identity Theft: Personal information harvested through phishing is often used to commit identity theft.
  • Financial Fraud: Stolen credentials are used to access bank accounts, credit cards, or other financial services.
  • Data Breaches: Phishing scams can lead to broader data breaches if the victim’s credentials grant access to sensitive corporate or governmental systems.

Where to report phishing scams in Nigeria?

You can also report the phone number of the fraudster on Truecaller. This could protect the whole community from future fraud attempts!

Why should you report a scam to the authorities?

  1. Protecting Others: Reporting scams helps prevent other people from falling victim to the same or similar schemes. It raises public awareness and educates others about the tactics used by scammers.
  2. Assisting Law Enforcement: Your report can provide valuable information to law enforcement agencies, helping them track down and prosecute scammers. This can lead to the recovery of stolen funds and the dismantling of fraudulent operations.
  3. Improving Public Safety: Reporting scams contributes to a safer community by making it harder for fraudsters to operate and exploit individuals.
  4. Reducing Financial Losses: By reporting scams, you contribute to efforts to reduce the overall financial impact of fraudulent activities on society.
  5. Empowering Victims: Reporting helps victims feel empowered and supported, knowing they are contributing to a collective effort to combat fraud.

Reporting a Scam Number on Truecaller

In addition to reporting scams to the authorities, you can also report suspicious phone numbers on Truecaller. Truecaller helps identify and block unwanted calls, including those from scammers. Reporting a scam number on Truecaller can help protect other users from falling victim to the same scam.


How to Report a Scam Number on Truecaller

  1. Identify the Number: If you receive a call from a suspicious number, note it down or check your call history.
  2. Open Truecaller: Launch the Truecaller app on your phone.
  3. Search for the number: Use the search bar in Truecaller to look up or paste the scam number.
  4. Report as a Scam: Once the number comes up, tap on "Report spam." Select if it is a “business” or “personal” number. Suggest a better name, leave a comment providing any additional details that can help other users identify the nature of the call, and finally select what type of spam it was: fraud, robocall, immigration, political, or an unwanted call. Choose the appropriate category, such as "Scam," "Fraud," or "Spam," and provide any additional details that can help other users identify the nature of the call.
  5. Block the number: After reporting the number, you can also block it to prevent further calls.


Why Reporting Scam Numbers on Truecaller is Important

  • Community Safety: Reporting scam numbers on Truecaller helps build a safer community by alerting others to potential scams. It allows users to avoid answering calls from known scammers.
  • Prevents Fraud: By marking a number as fraudulent, you help reduce the likelihood of others being scammed, as they can see warnings and details provided by other users.
  • Increases Awareness: Truecaller compiles data from user reports to identify and flag suspicious numbers, making it a valuable tool for raising awareness about current scams.
  • Enhances App Effectiveness: User reports help Truecaller improve its spam detection algorithms and services, making the app more effective at identifying and blocking scam calls.

By reporting scam numbers on Truecaller and to the relevant authorities, you contribute to a collective effort to combat fraud and protect others in the community.

Conclusion

Phishing tactics continue to evolve, with scammers using increasingly sophisticated methods to trick individuals into revealing sensitive information or clicking on malicious links. It's essential to remain vigilant of unsolicited messages, especially those requesting personal or financial information, and to verify the legitimacy of emails and websites before taking any action.

two screens - one for android and one for iOS, showing truecaller identifying an incoming phone call
DOWNLOAD TODAY

Trust your communicatio­n with Truecaller.

Trusted by over 425 million people, Truecaller is proud to be a leader in caller ID and spam blocking software as well as research around call and SMS harassment.