Phising Scam Hits Maine House of Representatives Member

Dear Lisbon Readers, 

      As you will read below, I've been "phished" and it has not been pleasant!  I hope to help others avoid this scamming of our emails. 

    Best regards,

Rep Joan Welsh

Rep. Welsh alerts computer users of phishing scheme

Local legislator victim in email scam, sends swift warning to constituents

AUGUSTA – State Rep. Joan Welsh, D-Rockport, warned midcoast area residents to be on guard against email scams.  Welsh sent out an email today to hundreds of area residents about the email fraud that she became entangled in recently.

Welsh had her email account hijacked after responding to what she thought was a legitimate request for information from her account provider.  Scam artists then accessed Welsh’s account and sent out emails to people in her contact file.  The email stated that Welsh was in England and needed money to get home after losing all her money and credit cards.  Welsh received dozens of phone calls and emails from local residents concerned about the scam.  This type of scam, which is designed to trick recipients into releasing personal account information, is referred to as a “phishing” scheme. 

“I am not in England at a seminar,” said Welsh.  “I am here in Rockport struggling with the fact that my email account has been hijacked and false emails have been sent to everyone in my contact file.” 

Welsh contacted her provider and sought advice from the Information Services office at the Maine Legislature.  By utilizing an electronic email newsletter, which she uses to communicate with constituents about upcoming legislation and other issues, she notified individuals of the fraud. She advised persons not to respond to the email and to delete it from their inbox. 

Welsh stated that she learned a lot today from her Internet provider and others who had previous experiences with email fraud. 

“I learned that Internet providers, and legitimate financial institutions, will never ask you to reveal any passwords or other personal information via email,” said Welsh.  “I also learned to be suspicious of any emails from someone asking for money, even if this person is a friend.”

Welsh also stated that she was advised not to open, respond or forward the suspicious emails to someone else.  If someone’s account has been hijacked, you may not be responding to a friend or colleague at all, but instead communicating directly with a thief trying to defraud you.

Welsh noted that other tips to avoid email fraud include:

• Never respond to any questionable email messages, click on links in these messages, or call phone numbers listed in the message. You should check the information by opening a new Internet browser window and type in the company's correct Web site information yourself.

• If you believe your email or Internet security has been compromised, contact your Internet provider, your network administrator and immediately change your passwords on your accounts.

• Look closely at any questionable emails for typos, grammatical errors, or unusual punctuation and capitalization. Many identity theft emails are coming from outside of the U.S, so their grasp of English may not be perfect.

• Do not feel pressured to respond to unsolicited emails. Resist any suggestion to "act immediately" despite the urge to do so in the email. Once you turn over any personal information, you risk identify theft or other violations of your privacy.

• If you receive an email that you believe to be a phishing scam, the Federal Trade Commission has set up an email address to forward the email: spam@uce.gov.  If you think that you have been a victim of phishing or if your identity may have been compromised, you can file a complaint at the FTC’s website at www.ftc.gov.

Welsh also noted that through this experience she now understands the reason to use different passwords for various online accounts.

“Apparently once these thieves have your password for one account, they may try to use your name and password on other Web sites such as Paypal,” said Welsh. 

Welsh stated that she hopes others can learn from her experience.

“My advice is to be watchful for these kinds of scams, as they are all too real and all too dangerous,” said Welsh.

Below is the email that was sent by hackers from Welsh’s email account.

Hello,

How are you doing? Hope all is well with you and family, I know this might be a surprise to you but I am sorry I didn't inform you about my traveling to England for a Seminar.

I need a favor from you because I misplaced my wallet on my way to the hotel, my money and other valuables are gone including my credit cards. I will like you to assist me with an urgent loan of 2300 british pounds which is about $3800 U.S dollars to sort-out my hotel bills and get myself back home. This is one favor I will always show gratitude throughout my lifetime.

I will appreciate whatever you can afford to help me with and I promise to refund the money as soon as I return home. Please do this for me and I will be grateful.

Rep Joan Welsh
District 46, Camden/Rockport
54 Sea St
Rockport, ME 04856
207-236-6554