Social engineering remains a prevalent tactic for criminals aiming to commit fraud by manipulating or persuading victims. In the digital age, one common vulnerability exploited by these actors is the tendency of individuals to post product reviews after online shopping, inadvertently revealing personal information such as names and phone numbers. This data can be exploited by fraudsters.
Two social engineering schemes are notably targeting online shoppers, particularly in e-commerce. The first involves fraudsters using personal information to entice victims with offers like cashback or vouchers, a tactic known as baiting. Victims are deceived into downloading a loan application and transferring funds to the fraudster’s account under false promises of returns and vouchers.
Another scheme targets product reviewers by threatening sanctions for purportedly violating regulations. Victims are coerced into making purchases using their buy now pay later service, with the fraudsters benefiting financially from these transactions. If the victim lacks sufficient credit, they are directed to apply for a loan and transfer the funds to the perpetrator.
To combat such fraud, individuals are advised to remain vigilant when receiving suspicious information and to verify the authenticity of offers and communications.

