Scam baiting (or scambaiting) is a form of internet vigilantism primarily used towards advance-fee fraud, IRS impersonation scams, technical support scams, [1] pension scams, [2] and consumer financial fraud. [1]
Scambaiters pose as potential victims to waste the time and resources of scammers, gather information useful to authorities, and publicly expose scammers. They may document scammers' tools and methods, warn potential victims, provide discussion forums, disrupt scammers' devices and systems using remote access trojans and computer viruses, or take down fraudulent webpages. Some scambaiters are motivated by a sense of civic duty, some simply engage for their own amusement, or a combination of both. [3]
For scams conducted via written communication, baiters may answer scam emails using throwaway email accounts, pretending to be receptive to scammers' offers. [4]
Popular methods of accomplishing the first objective are to ask scammers to fill out lengthy questionnaires; [5] to bait scammers into taking long trips; to encourage the use of poorly made props or inappropriate English-language idioms that surreptitiously cast doubt upon their scams. [6]
Baiters may deceive scammers with claims as ludicrous as the ones they have used to defraud their victims; or they may entrap them with Trojan horses, such as remote administration tools, that enable baiters to gain sensitive information from or damage scammers' computers. Baiters may publicly humiliate scammers by live streaming their sessions [1] or persuading them to produce humiliating images colloquially known as "trophies". Some of the images that were uploaded to early scam baiting websites have been described as a form of schadenfreude [7] or reinforcing racist stereotypes. [8] [9] However, modern day scam baiting content is primarily centred around education on how the scams work and how to prevent falling victim to scams. [10]
In May 2004, a Something Awful forum poster asked for advice on how to deal with a bogus escrow scam from a buyer on eBay. Since the eBay auction was for an Apple PowerBook G4, the poster sent a three-ring binder crudely dressed as a PowerBook and declared it to customs at the value of a real product. The buyer, who lived overseas, paid several hundred dollars in import duties to claim the fake laptop. [4] [11] A member of the scambaiting website 419eater.com was able to convince a scammer to send him a wooden replica of a Commodore 64. [12]
In February 2011, the Belgian television show Basta portrayed, with hidden cameras, how a scammer was fooled during a meeting with baiters, raising the stakes by involving a one-armed man, two dwarves and a pony. Eventually, a police raid was faked, during which the baiters were arrested and the scammer went free, abandoning the money, and without any suspicion. [13]
In January 2014, members of 419eater.com appeared in two segments of the Channel 4 show Secrets of the Scammers. In the first segment scambaiters persuaded a scammer to travel from London to a remote location in Cornwall by train and taxi to meet a victim (played by a baiter) and collect payment for a gold deal. In the second segment a female scammer met with two scambaiters posing as victims in Trafalgar Square to pass them a fake check. This scammer was subsequently questioned by the police.
In 2015 and 2016, James Veitch hosted three TED talks about scambaiting. [14] Veitch also presented the Mashable video series "Scamalot" on YouTube. [15]
In March 2020, an anonymous YouTuber and grey hat hacker under the alias "Jim Browning" infiltrated and gathered drone and CCTV footage of a fraudulent call centre scam operation in India with the help of fellow YouTube personality Karl Rock. Through the aid of the British documentary programme Panorama , a police raid was carried out when the documentary was brought to the attention of assistant police commissioner Karan Goel. [16]
YouTube and Twitch are popular platforms scambaiters use to educate and/or entertain their audience about various types of scams. [17]
An advance-fee scam is a form of fraud and is one of the most common types of confidence tricks. The scam typically involves promising the victim a significant share of a large sum of money, in return for a small up-front payment, which the fraudster claims will be used to obtain the large sum. If a victim makes the payment, the fraudster either invents a series of further fees for the victim to pay or simply disappears.
A scam, or confidence trick, is an attempt to defraud a person or group after first gaining their trust. Confidence tricks exploit victims using a combination of the victim's credulity, naïveté, compassion, vanity, confidence, irresponsibility, and greed. Researchers have defined confidence tricks as "a distinctive species of fraudulent conduct ... intending to further voluntary exchanges that are not mutually beneficial", as they "benefit con operators at the expense of their victims ".
Internet fraud is a type of cybercrime fraud or deception which makes use of the Internet and could involve hiding of information or providing incorrect information for the purpose of tricking victims out of money, property, and inheritance. Internet fraud is not considered a single, distinctive crime but covers a range of illegal and illicit actions that are committed in cyberspace. It is, however, differentiated from theft since, in this case, the victim voluntarily and knowingly provides the information, money or property to the perpetrator. It is also distinguished by the way it involves temporally and spatially separated offenders.
419eater.com is a scam baiting website which focuses on advance-fee fraud. The name 419 comes from "419 fraud", another name for advance fee fraud, and itself derived from the relevant section of the Nigerian criminal code. The website founder, Michael Berry, goes by the alias Shiver Metimbers. As of 2013, the 419 Eater forum had over 55,000 registered accounts. According to one member, "Every minute the scammer I'm communicating with is spending on me is a minute he is not scamming a real potential victim."
Email fraud is intentional deception for either personal gain or to damage another individual using email as the vehicle. Almost as soon as email became widely used, it began to be used as a means to defraud people, just as telephony and paper mail were used by previous generations.
A lottery scam is a type of advance-fee fraud which begins with an unexpected email notification, phone call, or mailing explaining that "You have won!" a large sum of money in a lottery. The recipient of the message—the target of the scam—is usually told to keep the notice secret, "due to a mix-up in some of the names and numbers," and to contact a "claims agent." After contacting the agent, the target of the scam will be asked to pay "processing fees" or "transfer charges" so that the winnings can be distributed, but will never receive any lottery payment. Many email lottery scams use the names of legitimate lottery organizations or other legitimate corporations/companies, but this does not mean the legitimate organizations are in any way involved with the scams.
A romance scam is a confidence trick involving feigning romantic intentions towards a victim, gaining the victim's affection, and then using that goodwill to get the victim to send money to the scammer under false pretenses or to commit fraud against the victim. Fraudulent acts may involve access to the victim's money, bank accounts, credit cards, passports, e-mail accounts, or national identification numbers; or forcing the victims to commit financial fraud on their behalf.
Voice phishing, or vishing, is the use of telephony to conduct phishing attacks.
In a reloading scam, a victim is repeatedly approached by con artists, often until "sucked dry". This form of fraud is perpetrated on those more susceptible to pressure after the first losses, perhaps because of hopes to recover money previously invested, perhaps because of inability to say "no" to a con man.
Telemarketing fraud is fraudulent selling conducted over the telephone. The term is also used for telephone fraud not involving selling.
A technical support scam, or tech support scam, is a type of scam in which a scammer claims to offer a legitimate technical support service. Victims contact scammers in a variety of ways, often through fake pop-ups resembling error messages or via fake "help lines" advertised on websites owned by the scammers. Technical support scammers use social engineering and a variety of confidence tricks to persuade their victim of the presence of problems on their computer or mobile device, such as a malware infection, when there are no issues with the victim's device. The scammer will then persuade the victim to pay to fix the fictitious "problems" that they claim to have found. Payment is made to the scammer through ways which are hard to trace and have fewer consumer protections in place which could allow the victim to claim their money back, usually through gift cards.
AnyDesk is a remote desktop application distributed by AnyDesk Software GmbH. The proprietary software program provides platform-independent remote access to personal computers and other devices running the host application. It offers remote control, file transfer, and VPN functionality. AnyDesk is often used in technical support scams and other remote access scams.
The locksmith scam is a scam involving fake business listings for cheap locksmith services that, once called out, overcharge the customer. The scam targets people who call a locksmith out of desperation, usually because of being locked out of their car or premises. Locksmith scams have been reported in the U.S., the U.K., and New Zealand.
Kitboga is the Internet alias of an American Twitch streamer and YouTuber whose content primarily focuses on scam baiting against phone fraud. His channel has over 1 million followers on Twitch, and his YouTube channel has over 3 million subscribers.
Jim Browning is the Internet alias of a software engineer and YouTuber from Northern Ireland whose content focuses on scam baiting and investigating call centres engaging in fraudulent activities.
An SSA impersonation scam, or SSA scam, is a class of telecommunications fraud and scam which targets citizens of the United States by impersonating personnel of the Social Security Administration. SSA scams are typically initiated by pre-recorded messages, or robocalls, which are designed to panic the victim so that they follow the scammer's instructions. In 2018, over 35,000 incidences of SSA scam robocalls were reported to the Better Business Bureau, and the total losses of victims added up to over $10 million. It is believed that approximately 47% of Americans were subject to an SSA impersonation scam robocall during a three-month period in mid- to late 2020, and that 21% of seniors were targeted by at least three SSA scam robocalls in the same time period.
An overpayment scam, also known as a refund scam, is a type of confidence trick designed to prey upon victims' good faith. In the most basic form, an overpayment scam consists of a scammer claiming, falsely, to have sent a victim an excess amount of money. The scammer then attempts to convince the victim to return the difference between the sent amount and the intended amount. This scam can take a number of forms, including check overpayment scams and online refund scams.
COVID-19 scams are frauds whose cover story primarily relies on the existence of the COVID-19 pandemic. Such scams have been reported in multiple countries, primarily the United States, Canada and the United Kingdom.
Scammer Payback, also known by his nickname "Pierogi", is the internet alias of an American YouTuber and streamer who specializes in creating content about scam baiting against phone scams. Pierogi works against a variety of scams over the phone, such as technical support scams, refund scams, social security scams, and IRS impersonation scams.
