One common tactic used by scammers is sending fake password reset messages. While this type of attack isn't new, it remains widespread because it is so effective. 

In these attacks, scammers may call you or send phishing emails or texts claiming that you need to reset your password or provide information to verify your account. They often impersonate well-known companies we trust and know.

In one scam, an employee received phishing emails seemingly from their work account, claiming their password was expiring. The employee entered their login details, which were then stolen and used by hackers to send more phishing emails.

In another scam, attackers sent emails or texts alleging that an Apple ID had been locked and pressured users to submit their credentials to restore access.

Recently a BCT member received an email like this requesting to renew their password.  

How to Protect Yourself: 

1. Never share passwords or authentication codes with callers. Legitimate companies will never ask for this information over the phone. 

2. Only reset your password if you initiated the request. Go directly to the company’s website to reset your password instead of clicking links in emails or texts. 

3. Check the sender’s email address carefully. Ensure it is spelled correctly and hover over it to confirm it matches the sender field. 

4.Be cautious with unsolicited emails that request personal information, payments, or urgent actions. 

5. Look for red flags like poor grammar, urgent language, or requests for sensitive information, which are common signs of phishing emails.  

You are also welcome to ask our tech support for any additional questions about your account. Remember, legitimate organizations will never ask for sensitive information via email. By staying vigilant and following these tips, you can help safeguard your personal information from online threats.