I’m not in regular contact with my Aunt, so it was unexpected to receive an email from her this lunchtime. Even more so because it claimed she had laryngitis and asked if I would therefore be available on email instead. That set my spidey sense tingling – not only does it make no sense to email someone to ask if you can email them because you aren’t able to speak to them but it has the unmistakeable scent of a scam.
I quickly fired off a message to my immediate family to warn them not to reply to the message and then used Facebook (different channel – less likely to be compromised) to contact both my Aunt and some of her children and other relatives who live near her. It turned out they were already on alert and the message probably came from a supposed “Microsoft” message which contained a link she had clicked on yesterday. Passwords have been changed on various accounts, including her email and I think that is the problem averted.
Typically I’d expect that the message she received was being used to hide the true origin and find out if any of her contacts were gullible enough to respond. If I’d emailed back before her account was secured, I would probably have got a quick reply asking if I’d be so kind as to buy her a gift card that she needed urgently but, with the laryngitis, couldn’t speak to me about: very similar scams have been seen before and the gift card thing is the payload of a whole range of stories that get spun (I had my fill working on the Oxford University computer emergency response helpdesk – most people just reported them but some had got led further along the path).
Treat anything online with caution and all the more so if someone you aren’t often in contact with drops you a line asking if you can quickly email them back.
