What practices do scammers use?
Common techniques fraudsters use to try and scam you.
Email fraud (phishing)
What is phishing?
Sending fake emails that appear to come from CM or another legitimate source, such as a bank or a well-known organization.
Variants
- Spear phishing: A targeted phishing attack on a specific person or organization, often with personalized content.
- Clone phishing: Duplicating a legitimate email and replacing attachments or links with malicious versions.
Phone fraud (vishing)
What is telephone fraud?
The use of phone calls to trick victims into sharing sensitive information.
How do scammers operate in telephone fraud?
- It may happen that someone calls you and tells you that you have to pay your CM membership fee immediately.
- They may then ask you to make another payment to a specified account number or to provide personal information.
- Don't respond and hang up immediately. CM will never contact you by phone with these kinds of questions.
SMS fraud (smishing)
What is SMS fraud?
Sending fraudulent SMS messages containing links to phishing websites or requests for personal data.
How do scammers operate in SMS fraud?
- You may receive a text message containing a link and a request to immediately pay your CM membership fee or to provide personal information.
- Examples of fake SMS messages
- CM: You are entitled to a €120 refund. Click this link to confirm your bank details: [link].
- CM: Your membership will be canceled shortly due to an outstanding balance. Please pay immediately via this link to maintain your membership: [link].
- The links in such messages lead to a fake website where you are asked to enter your bank account number and other personal details, or to make a payment.
- If you make the payment, the money goes directly to the scammers. If you provide your information, you give the scammers the opportunity to misuse it.
- Therefore, never respond to such questions via SMS.
What does CM do via SMS?
- If you have made an appointment with a CM employee, for example with a consultant or social worker, CM can send you a reminder of this appointment by text message.
How do you recognize SMS fraud and protect yourself?
- Check the sender
Messages from CM always come from an official number or name and do not contain unexpected requests. - Never click on suspicious links
CM never sends links to personal forms or payments via SMS. Always verify such requests via the official website or contact number. - Never provide sensitive information via SMS
CM never asks for bank details, PIN codes, or other personal information via SMS. - Report suspicious messages, see link below.
How to report?
Door-to-door fraud
What is door-to-door fraud?
Door-to-door fraud, or pickup fraud, is a type of scam in which a fraudster poses as an employee of CM or a reputable organization (such as a bank or government agency). They sometimes contact you by phone first, convincing you that your card, documents, or information are no longer secure. The fraudster then asks you to hand these items over to a supposed employee or courier at home.
How do scammers operate with door-to-door fraud?
- It might happen that someone calls you and tells you that you need to pay your CM membership fee immediately. They then offer to come and pick it up at your home.
- They may then ask you to make another payment to a specified account number.
- Don't respond to this and hang up immediately or show them the door.
- CM will never collect your membership fee or bank card from your home. CM will also never ask you for your PIN code over the phone or ask you to make a payment to an account number that isn't one of CM's official account numbers.
How to report?
Pop-up fraud
What is pop-up fraud?
Showing pop-up windows that ask for sensitive information such as passwords or credit card details.
How do scammers operate with pop-up fraud?
- A verification request will appear on your screen with a message such as:
- CM: There's a problem with your national registration number in our system. Please confirm your details via this link: [link].
- Once you enter your information, scammers can use it for identity fraud.
How to report?
Social media fraud
What is social media fraud?
Misusing social media such as Facebook, Instagram, Twitter, WhatsApp or LinkedIn to send fake messages or create fake profiles that collect personal data.
How do scammers operate in social media fraud?
How to report?