New Yorkers have just been warned to beware an attack that has stolen “over $1 billion” from citizens, prompting multiple FBI alerts. The latest alert comes from State Attorney General Letitia James, “urging all New Yorkers to beware of this three-phase scam.”
We’re talking the “Phantom Hacker” attacks which have been “growing rapidly” over the last 12-months, targeting people across the U.S. As highlighted by AG James, older citizens are especially at risk. “Seniors deserve to live comfortably in their retirement years with the savings they worked hard to build over the years.”
The attack begins with a malicious, urgent lure to have you place a phone call. “A victim will receive a call, text, email, or pop-up window instructing them to urgently contact a customer support phone number.”
Making that call is the first phase of the attack — you must never call those numbers.
During the call, you will be tricked into “downloading a software program that gives the scammer remote access to the victim’s computer.” You will be told this is to check for malware on your device, because a hacker has gained access to your bank accounts.
The hacker instructs you to check your bank accounts while they’re on the line. they use the software you have installed to secretly watch you do so. This lets them know where your money is, priming the attack for the second phase.
You will then receive a call pretending to be from the bank where your most lucrative account is held. You’re told to move your money to a safe account to stop the “phantom hack.” The new account belongs to the real hacker — the person you’re talking to.
The optional third phase follows up with an email or letter or call from a U.S. government agency, legitimizing what you’re being told to do. All banks and financial institutions are at pains to stress they will never do this — this is always an attack.
I’ve warned before that you must never download apps or software when asked to do so after an unsolicited contact from tech or customer support. But the other advice for all smartphone users — in New York and everywhere else — is never to call any numbers received in these popups or emails or messages.
As AG James’ public service announcement says: “Do not click on unsolicited links provided via text or email. Do not call the number provided in a pop-up, text, or email. Never give someone you don’t know remote access to your computer.”
If you don’t call the number, the attack cannot begin. If you see such a popup or message, log into your account the usual way and make sure all is as you’d expect. Or call customer service using your app or a number that’s publicly available. Do not use an AI chat assistant to find this number. Search for it yourself.
“Seniors deserve to live comfortably in their retirement years with the savings they worked hard to build over the years,” AG James says. “If you or someone you know falls victim to this scam, please contact my office.”
And that’s the final piece of advice. While you might be savvy to such scams, elderly friends and relatives may not. Make a point of telling them these attacks are underway and to let you know before making any calls. That way you can intervene.
