Types Of Scams Research Articles

A Proposed High-Level Methodology on How OSINT is applied in Blockchain Investigations

The characteristics of blockchain established a desirable platform for entities to innovate and operate in a secure, transparent, and decentralised manner. However, cybercriminals have increasingly found refuge in the decentralised environment of blockchain technology. Cryptocurrencies are increasingly misused in malicious activities that encompass the trade of illicit goods, money laundering, various types of scams and ransomware attacks. The total cryptocurrency value received by illicit addresses reached an all-time high of $20.6 billion in 2022 according to Chainalysis. The inherent privacy and anonymity features of many blockchain networks make it challenging for law enforcement and regulatory agencies to track and apprehend wrongdoers. Consequently, a pressing need arises not only to initiate investigations on the blockchain to identify unlawful activities, but also to discover connections between these activities and the identities of the responsible individuals. Due to blockchain data being publicly available, the application of Open-Source Intelligence (OSINT) techniques is proposed to facilitate these types of investigations. In the context of blockchain, OSINT, together with investigation tools hold the promise of unearthing valuable information that could aid in attributing malicious activities to the individuals responsible for those actions. By analysing and synthesizing data from publicly accessible sources, such as data from blockchain explorers and link analysis tools such Chainalysis, Maltego or Spiderfoot, investigators could potentially unveil valuable clues that assist in building a comprehensive picture of blockchain-related criminal activities. Ultimately, with sufficient information and actionable intelligence collected, the main goal is to link it to Know Your Customer (KYC) data, that could be obtained from cryptocurrency exchanges via a subpoena from law enforcement agencies. This paper delves into the mechanisms of various OSINT tools and techniques, to determine their adaptability to the specific demands of blockchain investigations. This study provides a methodology and recommendations with insights into how these tools can be wielded to bridge the gap between blockchain's pseudonymity and real-world identities.

Examining the Factors That Influence User Information Security Behavior toward COVID-19 Scams

Amidst the COVID-19 pandemic, cybercriminals have capitalized on the situation and targeted online users. As a result, there has been a surge in the number of complaints related to new types of scams and fraud that have emerged during the pandemic. This study utilizes Protection Motivation Theory (PMT), Cultivation Theory (CT), and other constructs, including fear, attitude, general security awareness, general security orientation, subjective norms, openness, stress, and conscientiousness, to investigate the user information security behavior (ISB) against COVID-19 scams. The study gathered data from 423 internet users through a cross-sectional survey and used Partial Least Square Structural Equation Modeling (PLS-SEM) to test the conceptual framework. The results indicate that stress, government social media, general security awareness, response efficacy, and attitude were all positive determinants of the users’ ISB. The findings also highlight the impact of emotions, such as stress and fear, as well as government social media, on decision-making during a crisis. Additionally, the study found that the combined effects of the two threat appraisal factors on coping behaviors, which are mediated by fear, and the combined effect of the two coping appraisal factors on coping behaviors, which are mediated by attitude, were significant. However, the subjective norms on ISB did not show any variations and surprisingly, the study found that conscientiousness did not moderate the association between attitude and ISB.

Building of safer urban hubs: Insights from a comparative study on cyber telecom scams and early warning design

As digital technologies and smart city development continue to grow, the threats of cybercrime and scams have become increasingly salient for city managers, businesses, and citizens worldwide. With a less effective data privacy protection, the number of new types of scams that precisely target victims is increasing. We collected 6,871 crawl fraud cases from news reports and local websites between October 2018 and December 2021 in Mainland China and Hong Kong. We generated 2,747 messages from news and open-source message datasets on GitHub. Based on these novel datasets, we conducted a comparative analysis of cyber telecom scams between Mainland China and Hong Kong and identified victim profiles using adata technology and target group index analysis. Furthermore, we developed a message-classifier scam alert model using data mining and machine learning algorithms. Our study provides valuable insights and essential implications on how data analytics can support future antifraud initiatives and help cities build safer urban hubs.

Mental States: A Key Point in Scam Compliance and Warning Compliance in Real Life.

The internet’s convenience and anonymity have facilitated different types of covert fraud, resulting in economic, mental, and social harm to victims. Understanding why people are deceived and implementing appropriate interventions is critical for fraud reduction. Based on the Bayesian brain theory, individuals’ mental states may be a key point in scam compliance and warning compliance. Fraud victims with different mental states may construct various hypotheses and explanations about the fraud they are exposed to, causing different cognition and behavior patterns. Therefore, we first conducted a semi-structured in-depth interview with online fraud victims to investigate the individual and social factors that affect victims’ mental states. Grounded theory analysis showed five core factors influencing scam compliance: psychological traits, empirical factors, motivation, cognitive biases, and emotional imbalance. Based on our findings of psychological processes and deception’s influential factors, we then designed warnings to inform victims of fraud, particularly for those involving novel types of scams. Tested on a real-life setting, our designed warnings effectively enhanced warning compliance, allowing more fraud victims to avoid financial losses.

Internet Scam (Phishing): Issues of Counteraction and Prevention

Internet technologies are so common today that they literally extend over almost all areas of life. However, due to the ongoing growth of Internet technologies, security threats to systems and networks are also rising. One of these serious threats is «phishing», in which attackers try to illicitly obtain user credentials. Phishing is a fraudulent practice, the purpose of which is to create a fake website, illicitly asking for passwords, bank account numbers, etc. to induce users to reveal confidential information. This type of scam is increasingly gaining in popularity, since fraudsters incur a minimum amount of expenses, and the tools used by them for illegal purposes are relatively accessible and easy to use. The purpose of this study is to examine common features of phishing attacks, as well as to analyze means and methods of countering these wrongdoings. The article looks into the existing ways of countering phishing attacks and analyzes measures aimed at identifying and suppressing such crimes. The analysis of judicial and investigative practice has shown that in the current state the government needs to provide law enforcement agencies with cutting-edge technical equipment, software, and highly qualified staff in order to successfully overcome new challenges in cyberspace in the context of the digital economy.

Typosquatting for Fun and Profit: Cross-Country Analysis of Pop-Up Scam

Today, many different types of scams can be found on the internet. Online criminals are always finding new creative ways to trick internet users, be it in the form of lottery scams, downloading scam apps for smartphones or fake gambling websites. This paper presents a large-scale study on one particular delivery method of online scam: pop-up scam on typosquatting domains. Typosquatting describes the concept of registering domains which are very similar to existing ones while deliberately containing common typing errors; these domains are then used to trick online users while under the belief of browsing the intended website. Pop-up scam uses JavaScript alert boxes to present a message which attracts the user’s attention very effectively, as they are a blocking user interface element.
 Our study among typosquatting domains derived from the Majestic Million list utilising an Austrian IP address revealed on 1219 distinct typosquatting URLs a total of 2577 pop-up messages, out of which 1538 were malicious. Approximately a third of those distinct URLs (403) were targeted and displayed pop-up messages to one specific HTTP user agent only. Based on our scans, we present an in-depth analysis as well as a detailed classification of different targeting parameters (user agent and language) which triggered varying kinds of pop-up scams. Furthermore, we expound the differences of current pop-up scam characteristics in comparison with a previous scan performed in late 2018 and examine the use of IDN homograph attacks as well as the application of message localisation using additional scans with IP addresses from the United States and Japan.

Automatic Detection and Analysis of the “Game Hack” Scam

The “Game Hack” Scam (GHS) is a mostly unreported cyberattack in which attackers attempt to convince victims that they will be provided with free, unlimited “resources” or other advantages for their favorite game. The endgame of the scammers ranges from monetizing for themselves the victims time and resources by having them click through endless “surveys”, filing out “market research” forms, etc., to collecting personal information, getting the victims to subscribe to questionable services, up to installing questionable executable files on their machines. Other scams such as the “Technical Support Scam”, the “Survey Scam”, and the “Romance Scam” have been analyzed before but to the best of our knowledge, GHS has not been well studied so far and is indeed mostly unknown. In this paper, our aim is to investigate and gain more knowledge on this type of scam by following a data-driven approach; we formulate GHS-related search queries, and used multiple search engines to collect data about the websites to which GHS victims are directed when they search online for various game hacks and tricks. We analyze the collected data to provide new insight into GHS and research the extent of this scam. We show that despite its low profile, the click traffic generated by the scam is in the hundreds of millions. We also show that GHS attackers use social media, streaming sites, blogs, and even unrelated sites such as change.org or jeuxvideo.com to carry out their attacks and reach a large number of victims. Our data collection spans a year; in that time, we uncovered 65,905 different GHS URLs, mapped onto over 5,900 unique domains.We were able to link attacks to attackers and found that they routinely target a vast array of games. Furthermore, we find that GHS instances are on the rise, and so is the number of victims. Our low-end estimation is that these attacks have been clicked at least 150 million times in the last five years. Finally, in keeping with similar large-scale scam studies, we find that the current public blacklists are inadequate and suggest that our method is more effective at detecting these attacks.

Automatically Dismantling Online Dating Fraud

Online romance scams are a prevalent form of mass-marketing fraud in the West, and yet few studies have presented data-driven responses to this problem. In this type of scam, fraudsters craft fake profiles and manually interact with their victims. Because of the characteristics of this type of fraud and how dating sites operate, traditional detection methods (e.g., those used in spam filtering) are ineffective. In this paper, we investigate the archetype of online dating profiles used in this form of fraud, including their use of demographics, profile descriptions, and images, shedding light on both the strategies deployed by scammers to appeal to victims and the traits of victims themselves. Furthermore, in response to the severe financial and psychological harm caused by dating fraud, we develop a system to detect romance scammers on online dating platforms. This paper presents the first fully described system for automatically detecting this fraud. Our aim is to provide an early detection system to stop romance scammers as they create fraudulent profiles or before they engage with potential victims. Previous research has indicated that the victims of romance scams score highly on scales for idealized romantic beliefs. We combine a range of structured, unstructured, and deep-learned features that capture these beliefs in order to build a detection system. Our ensemble machine-learning approach is robust to the omission of profile details and performs at high accuracy (97%) in a hold-out validation set. The system enables development of automated tools for dating site providers and individual users.

Tourist scams in the city: challenges for domestic travellers in urban China

PurposeThe purpose of this paper is to identify dominant scams against domestic tourists in popular tourism cities in China. There are two questions of concern: what types of scams do domestic tourists experience and are the patterns of scams different between the capital and regional cities? The social situation framework was employed to interpret the outcomes.Design/methodology/approachA content analysis facilitated by Leximancer software was applied to 102 Chinese travel blogs reporting experiences of being scammed in Beijing, Hangzhou, Xi’an, Sanya and Guilin. Clear themes and concepts emerged from the analysis of these travel reviews and differences in scamming patterns between Beijing and regional cities were identified.FindingsThe most frequently reported scams in the capital Beijing were linked to the chaotic environment at tourist attractions and the misbehaviours of tour agents. By way of contrast scams involving manipulating the weight and quality of products purchased were more common in regional cities. The differences between Beijing and other locations may lie in the greater monitoring of fraudulent practices in the capital. Additionally, the role of shills (confederates of the scammer) was highlighted in many of the scams studied.Originality/valueScams include a slightly less serious but still troublesome set of problems accompanying major crimes and assaults. Rare research specifically focussed on tourist scams despite substantive work discussing crimes against tourists as general. Implications of the present study lie in enriching the literature on scams against tourists. The analysis of scams as a special type of social situation proved to be insightful in directing attention to facets of the interaction thus providing connections to previous work and directions for further study. It is also promising to be developed to inform strategic approaches to creating a safer tourism environment in cities.

Putting a Stop to Schemes, Scams That Destroy Lives

Putting a Stop to Schemes, Scams That Destroy Lives

Victimizing Researchers by Phishing

Dear Editor, We read the brief report by Khadem-Rezaiyan and Moghadam, “Hijacking by Email: A New Fraud Method” (1), and would like to present some details and correct some issues in their report. We applaud these authors for increasing awareness of the problem. It appears that the phenomenon is growing faster than attempts to expose it and eliminate it. In paragraph two, the authors used the word “highjack,” while the correct word is “hijack,” which according to the Oxford dictionary (2), includes three different meanings: 1. Illegally seize (an aircraft, ship, or vehicle) while in transit and force it to go to a different destination or use it for one’s own purposes. 2. Steal (goods) by seizing them in transit. 3. Takeover (something) and use it for a different purpose In the academic world, we usually use the term “hijack,” to reflect the third concept. For instance, we use it for exposing hijacked journals. These appear as websites produced under a slightly different name than the websites of the legitimate journals from which they were copied. Researchers are encouraged to submit papers that receive little or no review, have exorbitant page charges, are seldom read or cited, and disappear after the legitimate journals take legal action. This may seem like a mere quibble, but we suggest that this particular fraudulent practice involving scam emails, might better be designated by the term “phishing” instead of “Hijacking by Email.” The authors presented two examples that they believe are a type of “Hijacking by Email.” Actually, they really do not involve hijacking, as no papers are ever published. Indeed, they are clearly phishing attacks. In phishing attacks, hackers use fraudulent emails to lure responders to their fake websites (3). Any sensitive information entered at the fake websites becomes the property of the phishers, as mentioned in the example given by Khadem-Rezaiyan and Moghadam. Phishers then use such data in their subsequent attacks, which contain exact information about researchers once again directing them to a phishing website. Most of these phishing attacks have financial goals, with the gathered information being used for hacking credit cards. Nowadays, a new type of scam is appearing. Some sites and companies claim that they can share authors’ publications such as eBooks and papers between many researchers. They state that their main goal is to promote the books and papers. They list authors’ books as free ebooks, always say there have been more downloads already, and have one-word reviews that are always the same for each of them. They get the credit card numbers from authors and others who sign up, charge them monthly, but seldom have any eBooks. They do not stop the monthly charges after complaints, so applicants are forced have to close their credit card accounts. As mentioned in the report, there are many frauds affecting scholarly publication. Among these are: faked declarations, tempting impact factors, email spoofing, cheating publishers, fake editorial boards, and fake conferences (4). These frauds are proliferating, and researchers should be aware of all of them.

Sinclair Investments (UK) Ltd v Versailles Trade Finance Ltd (in Administration) Court of Appeal [2011] EWCA Civ 347

THE PURSUIT OF PROPRIETARY REMEDIES FOR BREACH OF FIDUCIARY DUTYThere is an old adage that if an opportunity looks too good to be true, then it almost certainly is. Despite this, the law reports are filled with examples of people seeking redress for the fallout from “get rich quick” schemes that have gone wrong. One type of scam, exemplified by the fraudulent investment scheme run by Bernard Madoff from the United States and which collapsed in 2008, is known as a “Ponzi1 scheme”.2 The wrongdoer in such a scheme invites “investments” promising a high rate of return. The funds subscribed are not in fact invested (or if they are, they are invested in vehicles which produce a lower rate of return than that promised). Instead, the money from new subscribers is used to pay the rewards to earlier subscribers. In due course the scheme is bound to collapse, because there will be a point at which the new funds coming in are insufficient to make the payments to existing subscribers, and the bubble of new investment can continue only for as long as there is confidence on the part of subscribers, encouraging fresh deposits. When the scheme begins to unravel, it falls apart very quickly, since the assets held by the wrongdoer are inevitably inadequate to reimburse all of the subscribers in full. In the ensuing insolvent liquidation, subscribers stand to recover only a small fraction of their subscription as unsecured creditors unless they can demonstrate that they have a proprietary interest in some of the remaining assets. Sinclair Investments (UK) Ltd v Versailles Trade Finance Ltd is a case involving what the judge at first instance called a “classic Ponzi scheme”.

Consumer Fraud and the Elderly

Summary Financial abuse is the most common type of elder abuse. Consumer fraud, a form of financial abuse perpetrated by criminals who do not know the victim, is not well studied. Seniors represent a disproportionate percentage of the victims of consumer fraud. This article reviews the data on the prevalence of consumer fraud (primarily telemarketing scams) in Canada. It examines the reasons why Canadian seniors are targets of fraud. It also describes many unique initiatives developed at the local, provincial and national level in Canada to educate seniors and those who care for them about the types of scams and the risks of fraud.

Evaluation of soluble cell adhesion molecules in atopic dermatitis.

Recent studies have indicated the importance of cell adhesion molecules (CAMs) between the vascular endothelium and activated leukocytes in various inflammatory skin diseases. Soluble forms of CAMs (sCAMs) have also been detected in sera from such diseases. In order to elucidate the role of the soluble forms in skin inflammation, we determined the serum levels of E-selectin, vascular cell adhesion molecule-1 (VCAM-1), and intercellular adhesion molecule-1 (ICAM-1) in patients with atopic dermatitis (AD). Using an enzyme-linked immunosorbent assay, we quantified sCAMs levels in 21 patients with atopic dermatitis and in 16 healthy controls. In severe AD patients, levels of these three types of sCAMs were markedly elevated. sE-selectin was significantly elevated in severe AD over the levels in mild AD. A positive correlation with individual clinical activity was found for changes in the sE-selectin and sVCAM-1 levels. sE-selectin levels were correlated with the serum IgE levels and the number of eosinophils. The sVCAM-1 level was also significantly correlated with the number of monocytes. Among these three molecules, sE-selectin appeared to be the most sensitive clinical parameter in monitoring the clinical course of AD patients.