Gift Card Scams

A word of warning:  There is an email scam that has been around for around for a while.  It goes something like this...

Your principal allegedly emails you while in a meeting.  They ask you to buy iTunes gift cards to help them out with a project.  When you agree, they talk you into buying one or more $100 cards.  Then they ask you to send them the codes, since they are still in the meeting.  They promise to pay you back when they see you next.

What is really happening is:  (1) it's sent by a random person that just set the text next to their address to be the name of your principal, (2) they're going to sell those codes on eBay for $80 each, (3) they have no intention of paying you back.  Since the schools' principals are listed on our website and setting the text next to an email address is very easy, this is a remarkably simple scam.  It's much easier than actually breaking into someone's account and sending email from it.  So this is a low effort, high income scam.

I've seen several variations of this.  I've even heard of small churches being hit with messages claiming to be the pastor.

To protect yourself from scams like this:

1. Always check with the alleged sender directly before spending your own money.
2. Never send gift card codes in the mail.
3. Check the actual email address.  On Gmail, you can click the down-arrow near the top-left corner of the message to see it.  See image below for an example.
   
   

Email Scam - Fake Shared Google Docs

There is a particularly effective email scam that tricks you into sharing permanent access to your Google account -- including all or your email.  In this article, I will show you how to identify it and how to recover from it.

It starts with an email message like the one shown below.  It is a very convincing looking notification of a Google Doc being shared with you.  (Names redacted.)




If you click "Open in Docs", it will ask you to authorize access.



It looks innocent enough until you look closer, because it claims to be "Google Docs."  But anyone can be named Julius Caesar;  it doesn't make them a famous Roman emperor.  Likewise, this isn't really Google Docs.  To figure this out, click on the words "Google Docs" and you'll see that it is owned by a random gmail.com account and not google.com.


If you click "Allow," they will gain permanent access to your account, including all email and your list of contacts.  From there, they will send the same message to everyone in your address book.

So what do we do about it?

If you can spot the scam, then just close the "Google Docs would like to..." window.  You're lucky.  Lots of people are tricked by this.

If you were victimized, you need to do the following steps to kick the bad guys out of your account.  Until you do, they're still there.

First, click on your icon in the upper right corner of Gmail.



Then click on the big blue "My Account" button.

That will bring you to a page full of boxes of links.  Inside the "Sign-in & security" box, click on "Connected apps & sites".



From there, click on "Manage apps" near the middle of the page.



This will bring you to a list of apps and website that have access to your account.



Most are probably legitimate.  But if you see anything that you can't explain, just click on it to get more details.



You can see the date that you connected this app to your account under "Authorization date".  Use that as a guide.  If you just added the bad app, then it will have today's date.

If you want to remove something, click on the "REMOVE" button next to it.  If you can't find the button, you click on the item to make it visible.

It will double-check with you.  Click "OK" to continue.



When in doubt, remove something.  It is easy to reconnect apps to your account.

That is it.  Once you've kicked them out of your account, just keep an eye out for odd behavior. If someone shared a Google Doc with you, it won't ask you for access to your email.  So any Deny/Allow choices should raise suspicions.

Email Vacation Mode

If you are going to be away from your email for a lengthy period of time, this tip is for you.

By activating "vacation mode," anyone who emails you will get a message stating that you're away from email.  This message can say things like, "I'll be away for the next week.  If you need a reply before then, contact my coworker at..."

Setting this up is quite easy.

1. Login to your email.
2. Click on the gear icon above your inbox on the right side.
   
3. Select "Settings" from the menu.
   
4. Scroll down to "Vacation responder" and fill things out.
   
5. Scroll to the bottom of the page and click on "Save Changes"
   

Make sure that you fill in start and end dates in "First Day" and "Ends."  By doing this (and checking off the box next to "Ends") the system will kick in for your vacation.

I recommended starting this on your first day before you leave, just in case someone emails you late that afternoon and you don't have a chance to respond.  Likewise, you may wish to set "Ends" to the day you come back, in order to let people know that you're working to catch up with your backlog.

A great time to use this is during any school recess, so that people know you might be slow in getting back to them.

Forwarding All Email

Want to see all of your school email at your personal email address?  You can set it up to forward all incoming email to another address.

This may be especially useful for students who do not like to use their school email address but still need to receive email from teachers.

• Go to start.cairodurham.org.
• Click on "Email".
• Login.

• Click on the small gear icon in the upper right corner and then click on "Mail settings".

• Click on the "Forwarding and POP/IMAP" tab.

• Click on the "Add a forwarding address" button.

• Enter the address and click the "Next" button.

• If it says that a confirmation code was sent, check the other email account for a new message.  Follow those directions.

• If necessary, switch from "Disable forwarding" to "Forward a copy of incoming mail to <your address here> and <keep Cairo-Durham Central School District Mail's copy in the inbox>"

Now send yourself an email message at your <you>@cairodurham.org address and check the other address to see if it arrived.

Customize Email's Look

Want to make email look better?  You can customize the background picture, colors, fonts, etc. of your email account.

This does not effect the look of email that you send.  So you can make a very personal working environment without worrying about looking unprofessional to anyone you email.

Fo details, check out Google's announcement of this new feature:

http://gmailblog.blogspot.com/2011/04/custom-background-image-themes.html

Urban Legends

So you've received the latest message about a new form or CPR, rising gas prices, or radioactive cat litter.

Before warning lots of people about it, how do you ask, "Is it true?"  You can actually use Google or Snopes faster than the "Forward" button... and save yourself some embarrassment at the same time.

To use Snopes, go to snopes.com and use the Search line at the top of the page.  Type in a simple phrase, like "gas prices" or "cat litter" for a list of claims about those topics.  Snopes will tell you if its true or not.

To use Google, just copy a relatively unusual line from the message and paste it into Google.  Phrases with numbers or brand names work well.

Personally, I recommend Snopes over Google in this case.  Either one will probably work, but with Google you will have to read through several unrelated items and may even run into more copies of the claim without any real verification.  Snopes, on the other hand, does the research and clearly states if its true, false, or some mix of the two.

Which ever way you go, its worth checking your facts before forwarding a claim.  You can help stop false or even dangerous claims.  It may even save you from identity theft.