Cybercriminals are notorious for their opportunism. No situation is off limits: whether they exploit conflict and human suffering, blackmail vulnerable individuals by threatening to leak therapy notes, or even bring healthcare organizations to their knees, cybercriminals will stop at nothing to make a quick buck.
Hurricane season is a particularly lucrative time of year for cybercriminals. Every year, inclement weather rips through the Atlantic and Gulf of Mexico, causing billions of dollars in damage and putting lives at risk. This year's season began with unusual ferocity as Hurricane Beryl swept the Caribbean, Yucatan Peninsula, and Gulf Coast of the United States, causing roughly $6.2 billion in damage and killing 52 people.
With weather experts expecting an "extraordinary" hurricane season in the Atlantic this summer, people in affected areas should brace for inclement weather and a significant uptick in hurricane-related scams. CISA itself recently published an alert warning about them. This article explores the different types of hurricane season scams and how to protect yourself from them.
Charity Scams
The most common form of hurricane season scam – and one seen in the wake of many other humanitarian disasters or crises – involves cybercriminals creating fake charities or posing as legitimate ones to solicit donations from well-meaning internet users. Scammers will typically create fake websites, social media profiles, and donation pages that mimic those of legitimate charities before sending emails, text messages, or social media messages soliciting donations from their victims.
Exercising caution is crucial to avoid falling victim to a hurricane scam. Be wary of unsolicited communications, messages that pressure you to donate immediately, or request your personal information. Use reputable sources such as Charity Navigator, GuideStar, or the Better Business Bureau's Wise Giving Alliance to verify the charity's legitimacy; visit the charity's official website by typing the URL directly into your browser rather than clicking on links from emails or messages, and stay vigilant for vague or inconsistent information about how the charity operates and uses donations.
If you donate to a charity during hurricane season, use secure and traceable methods, such as credit cards or checks. Avoid cash donations or wire transfers, which are harder to trace and recover if fraud occurs. If you think you have received communications from a fake charity, inform the Federal Trade Commission (FTC), the Better Business Bureau (BBB), your state's Attorney General's office, and, if applicable, the legitimate charity they are impersonating.
Insurance Scams
Insurance scams are also common in the lead-up to and during hurricane season. Insurance scammers operate like charity scammers, creating a fake insurance company or imitating a legitimate one, offering to expedite claims, provide new policies, or adjust existing ones at discounted rates. These scams capitalize on the panic and confusion after a hurricane to sell fake insurance policies that do not exist or are significantly different from what they promised.
Protecting yourself from insurance scams requires vigilance and a healthy level of skepticism. If you receive communications from someone claiming to be an insurance agent, contact your insurance company directly using the number on your policy or their official website to verify their identity. Do not rely on caller ID or email addresses, as criminals can spoof them. Avoid handing over money or personal information to unsolicited contacts.
There are several red flags to watch out for when purchasing an insurance policy. Likely indicators of a scam include communications that lack proper identification or credentials, include high-pressure tactics or request money upfront. Legitimate insurance companies deduct fees from claim payouts or include them in your premium; they don't pressure you to hand over money immediately to expedite claims or services.
If you are considering purchasing a new policy, research the insurance company and agent. Check for licensing and reviews with your state's insurance department and consumer protection agencies. Read the policy details carefully and understand the terms and coverage before paying.
Again, it's crucial to report any suspected insurance scams. Contact your insurance company, state insurance department, and the National Insurance Crime Bureau (NICB). Inform law enforcement if you believe you have fallen victim to an insurance scam.
Other Types of Scams to Watch Out For
While charity and insurance scams are typically the most common type during hurricane season, cybercriminals will employ many tactics to squeeze money out of vulnerable victims. During hurricane season, watch out for:
- Home Repair Scams: Unscrupulous contractors offer quick and cheap repairs for storm-damaged properties, then take the money and disappear or perform substandard work. Verify the contractor's credentials, check for proper licensing and insurance, and read reviews. Avoid paying large sums upfront and insist on a written contract.
- Government Impersonation Scams: Scammers pose as officials from FEMA or other government agencies, offering assistance for a fee or demanding personal information. Government agencies do not charge for assistance and will not ask for personal information over the phone or via email. Contact the agency directly through official channels to verify claims.
- Fake Relief Centers and Shelters: Scammers set up phony relief centers or shelters to collect personal information or money from those seeking help. Verify the legitimacy of relief centers through local government websites, the Red Cross, or other reputable organizations.
- Rental Scams: Scammers advertise rental properties that are not available or do not exist to take advantage of displaced residents looking for temporary housing. Visit the property in person, use trusted rental websites, and avoid paying deposits or rent via wire transfer or cash.
Conclusion
When disaster strikes, human nature kicks in. Unaffected individuals will want to leap into action, helping impacted communities in any way possible. Those affected by hurricanes will naturally jump at the chance to recoup losses, access aid, and rebuild their lives and homes. However, it's essential to keep a cool head and remain vigilant in such situations: threat actors will never miss out on an opportunity to capitalize on natural disasters.