FBI warning to iPhone, Android users: Do not reply to these messages
Another day, another warning about a growing scam targeting iPhone and Android users via text message.
In a new alert, the FBI said there is an “ongoing malicious text and voice messaging campaign,” related to “malicious actors” impersonating senior U.S. officials to target individuals, including current or former senior U.S. federal or state government officials and their contacts.
If you receive a message claiming to be from a U.S. official – particularly a high-profile person – do not assume it is authentic.
How does the scam work?
According to the FBI, the scam involves text messages and AI-generated voice mails in techniques known as smishing or vishing – phone text or voice memos designed to trick someone into providing personal financial information.
“One way the actors gain such access is by sending targeted individuals a malicious link under the guise of transitioning to a separate messaging platform. Access to personal or official accounts operated by US officials could be used to target other government officials, or their associates and contacts, by using trusted contact information they obtain. Contact information acquired through social engineering schemes could also be used to impersonate contacts to elicit information or funds,” the FBI said in a warning.
If you receive one of these messages, do not respond and delete it immediately.
Directed to another site? Be extra careful
Once the target is transitioned to another site, the scammer may introduce malware or hyperlinks that direct someone to a page where their log-in information, user names and passwords are stolen. For smishing – phony texts – the messages typically impersonate a phone number from an associate or family member. For vishing and other audio or video messages, malicious actors are more frequently exploiting AI-generated audio to impersonate well-known, public figures or personal relations to increase the believability of their schemes, the FBI said.
How to protect yourself, according to the FBI:
• Verify the identity of the person calling you or sending text or voice messages. Before responding, research the originating number, organization or person claiming to contact you. Then independently identify a phone number for the person and call to verify their authenticity.
• Carefully examine the email address; messaging contact information, including phone numbers; URLs; and spelling used in any correspondence or communications. Scammers often use slight differences to deceive you and gain your trust. For instance, scammers incorporate publicly available photographs in text messages, use minor alterations in names and contact information, or use AI-generated voices to masquerade as a known contact.
• Look for subtle imperfections in images and videos, such as distorted hands or feet, unrealistic facial features, indistinct or irregular faces, unrealistic accessories such as glasses or jewelry, inaccurate shadows, watermarks, voice call lag time, voice matching, and unnatural movements.
• Listen closely to the tone and word choice to distinguish between a legitimate phone call or voice message from a known contact and AI-generated voice cloning, as they can sound nearly identical.
• Never share sensitive information or an associate’s contact information with people you have met only online or over the phone.
• Do not send money, gift cards, cryptocurrency, or other assets to people you do not know or have met only online or over the phone.
• Do not click on any links in an email or text message until you independently confirm the sender’s identity.