The locksmith scam is a scam involving fake business listings for cheap locksmith services that, once called out, overcharge the customer. The scam targets people who call a locksmith out of desperation, usually because of being locked out of their car or premises. [1] [2] [3] [4] [5] [6] [7] Locksmith scams have been reported in the U.S., [8] [9] [3] [10] [11] the U.K., [12] [13] and New Zealand. [14] [15] [16]
The scams work by flooding business-finding services with a multitude of faux business listings. All of the phone numbers of these listings eventually link back to a single operation, usually without a legitimate address or license. The descriptions will be similar to legitimate locksmiths, accompanied by similarly misleading advertising, and usually quoting an unusually low price. The person who turns up may perform shoddy work and then overcharge for the service and parts. Since the customer never knows the real business or people involved, at best they can ask for a single phony listing to be removed - a process that takes time and does not negatively impact the scammer much, as they can simply create more fake listings.
Side-effects of the scam include damage to legitimate locksmiths who lose business and tend to get angry calls from people believing them to be responsible. [17] [18] Google Maps has been particularly vulnerable to this operation in the 2010s. It began requiring people advertising locksmith services in the US or Canada to complete its "Advanced Verification" process as of 2018, [19] but does not do so in other markets.
Such scams rely on lead generation, designed to confuse potential customers into believing that the scammer is a legitimate, but low-priced, locksmith: [4] [20] [6]
The scams then use a "conversion funnel", in which the mark is bluntly persuaded to part with money:
Locksmiths and other observers have noted that search engine companies make substantial income from paid-for listings, regardless of whether the listings are legitimate or spam. [37] [38] [30] [25] Writing in 2016, Cory Doctorow claimed that "Nearly every locksmith that appears on Google Maps is a fake business that redirects to a call center ... that dispatches a scammy, distant, barely trained locksmith who'll come and charge you 5-10 times more than you were quoted." [32]
In the U.S. in 2005, a Bronx-based company was sued by the Chicago Department of Consumer services for alleged consumer fraud. [29]
In the U.S. in 2009, three alleged locksmith scammers were unsuccessfully prosecuted in St. Louis. [4]
In the U.K. in 2010, a locksmith scammer was successfully prosecuted. [39]
In the U.S. in 2014, a locksmith based in Virginia sued Google, Yellowbook (Hibu), and Ziplocal, under numerous laws, requesting that those companies "remove fraudulent locksmith listings from their search results". [37] [40] [41] This, too, was unsuccessful, due to the companies' immunity under the Communications Decency Act. [4]
In the U.S. in 2017–2018, a group of 14 locksmiths filed a lawsuit against Google, Yahoo, and Bing, alleging that these search engines allowed spam listings to drown out legitimate, organic search results. [42] This class action was dismissed by the US Court of Appeals in Washington DC in 2019.
In Eastwood v. Atlas Locksmith Solutions, et al., Atlas disclosed that it subscribed to 115 telephone numbers in the Phoenix Metropolitan Market, assigned each of those numbers to an address where Atlas had no location or legitimate business interest, then multiplied those phone number/address combinations by 10 different company names on a spreadsheet causing Veritel (a now defunct telephone company run by Clay Van Doren) [43] to publish 1,150 separate and distinct fraudulent telephone listings [44] all promulgated and distributed to consumers by Google, Yahoo, and distributed on a wholesale basis by information brokers including Acxiom and others. [45]
Google says that it has removed billions of advertisements that violated its policies, and claims to have improved its verification systems to combat listings fraud. [46] [47] However, although Google now requires people advertising locksmith services in the US or Canada to complete its "Advanced Verification" process, [19] it does not do so in other markets. [48] Also, Google has reportedly resisted removing fraudulent listings. [30]
An advance-fee scam is a form of fraud and is a common confidence trick. The scam typically involves promising the victim a significant share of a large sum of money, in return for a small up-front payment, which the fraudster claims will be used to obtain the large sum. If a victim makes the payment, the fraudster either invents a series of further fees for the victim to pay or simply disappears.
Pump and dump (P&D) is a form of securities fraud that involves artificially inflating the price of an owned stock through false and misleading positive statements (pump), in order to sell the cheaply purchased stock at a higher price (dump). Once the operators of the scheme "dump" (sell) their overvalued shares, the price falls and investors lose their money. This is most common with small-cap cryptocurrencies and very small corporations/companies, i.e. "microcaps".
Scam baiting is a form of internet vigilantism primarily used towards advance-fee fraud, IRS impersonation scams, technical support scams, pension scams, and consumer financial fraud.
Phishing is a form of social engineering and a scam where attackers deceive people into revealing sensitive information or installing malware such as viruses, worms, adware, or ransomware. Phishing attacks have become increasingly sophisticated and often transparently mirror the site being targeted, allowing the attacker to observe everything while the victim navigates the site, and transverses any additional security boundaries with the victim. As of 2020, it is the most common type of cybercrime, with the FBI's Internet Crime Complaint Center reporting more incidents of phishing than any other type of cybercrime.
Phone fraud, or more generally communications fraud, is the use of telecommunications products or services with the intention of illegally acquiring money from, or failing to pay, a telecommunication company or its customers.
Internet fraud is a type of cybercrime fraud or deception which makes use of the Internet and could involve hiding of information or providing incorrect information for the purpose of tricking victims out of money, property, and inheritance. Internet fraud is not considered a single, distinctive crime but covers a range of illegal and illicit actions that are committed in cyberspace. It is differentiated from theft since, in this case, the victim voluntarily and knowingly provides the information, money or property to the perpetrator. It is also distinguished by the way it involves temporally and spatially separated offenders.
Click fraud is a type of fraud that occurs on the Internet in pay per click (PPC) online advertising. In this type of advertising, the owners of websites that post the ads are paid based on how many site visitors click on the ads. Fraud occurs when a person, automated script, computer program or an auto clicker imitates a legitimate user of a web browser, clicking on such an ad without having an actual interest in the target of the ad's link in order to increase revenue. Click fraud is the subject of some controversy and increasing litigation due to the advertising networks being a key beneficiary of the fraud.
Email fraud is intentional deception for either personal gain or to damage another individual using email as the vehicle. Almost as soon as email became widely used, it began to be used as a means to defraud people, just as telephony and paper mail were used by previous generations.
A lottery scam is a type of advance-fee fraud which begins with an unexpected email notification, phone call, or mailing explaining that "You have won!" a large sum of money in a lottery. The recipient of the message—the target of the scam—is usually told to keep the notice secret, "due to a mix-up in some of the names and numbers," and to contact a "claims agent." After contacting the agent, the target of the scam will be asked to pay "processing fees" or "transfer charges" so that the winnings can be distributed, but will never receive any lottery payment. Many email lottery scams use the names of legitimate lottery organizations or other legitimate corporations/companies, but this does not mean the legitimate organizations are in any way involved with the scams.
In business, a boiler room is an outbound call center selling questionable investments by telephone. It usually refers to a room where salespeople work using unfair, dishonest sales tactics, sometimes selling penny stocks or private placements or committing outright stock fraud. A common boiler room tactic is the use of falsified and bolstered information in combination with verified company-released information. The term is pejorative: it is often used to imply high-pressure sales tactics and, sometimes, poor working conditions.
A romance scam is a confidence trick involving feigning romantic intentions towards a victim, gaining the victim's affection, and then using that goodwill to get the victim to send money to the scammer under false pretenses or to commit fraud against the victim. Fraudulent acts may involve access to the victim's money, bank accounts, credit cards, passports, Cash App, e-mail accounts, or national identification numbers; or forcing the victims to commit financial fraud on their behalf.
Voice phishing, or vishing, is the use of telephony to conduct phishing attacks.
Telemarketing fraud is fraudulent selling conducted over the telephone. The term is also used for telephone fraud not involving selling.
Internet fraud prevention is the act of stopping various types of internet fraud. Due to the many different ways of committing fraud over the Internet, such as stolen credit cards, identity theft, phishing, and chargebacks, users of the Internet, including online merchants, financial institutions and consumers who make online purchases, must make sure to avoid or minimize the risk of falling prey to such scams.
A card-not-present transaction is a payment card transaction made where the cardholder does not or cannot physically present the card for a merchant's visual examination at the time that an order is given and payment effected. It is most commonly used for payments made over the Internet, but can also be used with mail-order transactions by mail or fax, or over the telephone.
A technical support scam, or tech support scam, is a type of scam in which a scammer claims to offer a legitimate technical support service. Victims contact scammers in a variety of ways, often through fake pop-ups resembling error messages or via fake "help lines" advertised on websites owned by the scammers. Technical support scammers use social engineering and a variety of confidence tricks to persuade their victim of the presence of problems on their computer or mobile device, such as a malware infection, when there are no issues with the victim's device. The scammer will then persuade the victim to pay to fix the fictitious "problems" that they claim to have found. Payment is made to the scammer via gift cards or cryptocurrency, which are hard to trace and have few consumer protections in place. Technical support scams have occurred as early as 2008. A 2017 study of technical support scams found that of the IPs that could be geolocated, 85% could be traced to locations in India, 7% to locations in the United States and 3% to locations in Costa Rica. Research into tech support scams suggests that millennials and those in generation Z have the highest exposure to such scams; however, senior citizens are more likely to fall for these scams and lose money to them. Technical support scams were named by Norton as the top phishing threat to consumers in October 2021; Microsoft found that 60% of consumers who took part in a survey had been exposed to a technical support scam within the previous twelve months. Responses to technical support scams include lawsuits brought against companies responsible for running fraudulent call centres and scam baiting.
Ad fraud is concerned with the practice of fraudulently representing online advertisement impressions, clicks, conversion or data events in order to generate revenue. Ad-frauds are particularly popular among cybercriminals.
Utility scams are fraudulent acts where a perpetrator calls or arrives unannounced at a utility customer's house in an attempt to take money or sell unnecessary energy accessories through misrepresentation. Often, the fraud involves telling the victim that he or she owes the utility company money and that their power, gas, or water will be shut off immediately unless payment is made.
An overpayment scam, also known as a refund scam, is a type of confidence trick designed to prey upon victims' good faith. In the most basic form, an overpayment scam consists of a scammer claiming, falsely, to have sent a victim an excess amount of money. The scammer then attempts to convince the victim to return the difference between the sent amount and the intended amount. This scam can take a number of forms, including check overpayment scams and online refund scams.
{{cite web}}
: CS1 maint: numeric names: authors list (link)[ permanent dead link ]{{cite web}}
: |first=
has generic name (help)