MenenK wrote:
I got a text today with this message: Notification: $194.90 was charged to your Apple ID via Apple Pay. If this wasn't you, contact Apple Support 87*******42.
The message came from this number: 1-7*****040 which is SE Virginia
Back in the bad old days with copper-wire connected phones if you got a call with caller ID you could be pretty sure it actually came from that number, with a couple of exceptions: If the call was from a business extension the caller ID could be the business main number, or their 800 number. Then Congress decided that this was too limiting, and they allowed businesses and political organizations to display any number when calling. Less savory organizations took advantage of this removal of restrictions, and now anyone (even you) can spoof a phone number when making a call. The bottom line is that the Caller ID display is totally meaningless today. If the call is from someone you actually know it might be correct, but even your friend’s numbers can be spoofed.
Defensive measures:
- Send the call to voicemail (double-press the SIDE button) if you don’t recognize the number; if it is legitimate you can call back
- Never answer “Hello” (that triggers automatic reply bots), instead say something like “who is calling"
- If you do pick up the call, never answer a question (such as “is this Alphonse”) with YES, criminals can record “YES” in your voice, then use it to call businesses pretending to be you
- If the call comes from an unknown number with your area code it is almost certainly a scam
- ALWAYS review bills to identify all of the charges are legitimate.
An example: I got a routine monthly report from my medical insurer that listed all of the charges they had paid; it showed that I didn’t owe anything, all charges had 100% coverage. I read it anyway; one set of charges was from a medical products supply company that I had never done business with, for a product that I didn’t use. I called the insurer, and they quickly determined that it was fraud, and they had seen similar charges on other accounts. So read every statement you get.