The Rise of Impersonation Scams and How We Can Fight Them

In an age where digital connectivity is an integral part of everyday life and the economy, the threat of impersonation scams has grown exponentially. These scams, in which fraudsters impersonate trusted entities to trick individuals, have led to staggering financial and personal losses. The Federal Trade Commission reported over $1.1 billion in US consumer losses due to such scams in 2023 alone.

Impersonation scams are not just simple tricks, but a sophisticated form of social engineering, where cybercriminals use techniques such as phishing and hard hitting to direct individuals to fake websites that look and feel like theirs. legal. These attacks can lead to account takeovers, identity theft, and significant financial losses. Cybersecurity and online defense review site DataProt found that a new phishing site was created every 11 seconds in 2023, underscoring the scale of the problem and the need for increased vigilance in detecting these sites. A massive online campaign targeting popular clothing brands such as Nike, Crocs and Adidas was revealed by Bolster last year. This campaign used typosquatting, which relies on consumers mistyping the web address of a well-known company to direct them to a malicious page.

The proliferation of AI technologies has further exacerbated this issue, making it easier and faster for fraudsters to create convincing digital fakes. Companies and consumers often fail to detect these fraudulent sites quickly, leaving them vulnerable for weeks or months. In addition to the consumer impact, the damage to businesses can be severe, including financial losses, increased costs and reputational damage.

The current approach of companies is to scan the Internet for illegal domains and submit a request to remove the illegal copies. However, “scanning the Internet for new domains takes time and occurs at intervals, in between which a new fake site can appear live, be used for an attack, and taken down by cybercriminals,” said Israel Mazin, co-founder. CEO and chairman of Israeli cyber security firm Memcyco.

Governments and regulatory bodies are beginning to take stronger action against counterfeiting scams. In the UK, new regulations coming into force in October 2024 will require banks to reimburse defrauded customers. While there is no parallel national regulation in the US, in April the FTC expanded the Impersonation Rule to prohibit impersonation of individuals other than government and business, opening the way for federal prosecution. The Senate Committee on Homeland Security and Governmental Affairs held hearings in May examining fraud in the popular wire transfer network app Zelle. At the state level, the New York Attorney General sued Citibank for failing to reimburse fraud victims. Companies have also taken action, such as Amazon’s lawsuits against Prime Video cheaters. These actions underline the need for stricter rules to combat counterfeiting.

Consumer education campaigns are critical in the fight against counterfeiting. The FTC’s National Consumer Protection Week has been held annually since 1999 to educate the public about recognizing and avoiding fraud. Personalized education efforts Companies such as Meta, FedEx, and Apple all offer personalized education efforts, and retail chains such as CVS and Walgreens educate consumers on how to spot and avoid gift card fraud. The Agency’s Director of Cyber ​​Security and Infrastructure Security, Jen Easterly, has been vocal in encouraging consumers to enable multi-factor authentication, noting that MFA makes you 99 percent less likely to be hacked.

Private companies are increasingly taking proactive measures to protect their customers. New security measures announced by Zelle require banks and credit unions that use the network to implement a risk awareness service and are partnering with the Better Business Institute and the National Council on Aging to educate consumers. Many consumer sites, from shopping to travel, are following the banking industry in increasing user security through MFA and biometric systems.

Innovative technological solutions are emerging to combat counterfeiting. Israeli cyber security firm Memcyco has developed a real-time detection and alert system. Its State of Imitation Fraud Resistance 2024 report found that while 72 percent of companies have a monitoring system in place, only 6 percent are adequately protected. Memcyco’s solution addresses this gap by providing immediate alerts to the impersonated company and affected website visitors when they visit a counterfeit website, significantly reducing the time fraudsters have to exploit their targets.

Despite these efforts, much work remains to be done, as proactive detection systems, better customer education and stricter regulations are essential to mitigate the risk of copycat fraud. The findings of the Memcyco report highlight that while awareness is high, the effectiveness of current solutions is lacking, indicating a critical area for improvement. As digital impersonation scams evolve, so must our strategies to combat them, requiring a coordinated effort by regulators, private industry and technology innovators to protect consumers and businesses from these pervasive threats.

Follow me LinkedIn or check out my other columns here.