Understanding social engineering scams and how to avoid them

Read more: Can your phone get hacked? What you need to know

Some examples of social engineering include:

• Phishing: When scammers pretending to be a trusted source send emails and texts that include malicious links in an attempt to trick people into sharing sensitive info like passwords or credit card numbers.
• Spear phishing: A targeted version of phishing, where attackers personalize messages to specific people using information they found online.
• Vishing: Scammers posing as officials during phone calls to extract sensitive data.
• Baiting: Fake offers to entice victims into providing credentials or installing malware.

One of the best ways to protect yourself from these scams is to do your best to remain calm when confronted with a perceived emergency.

For example, let’s say you get a text from a scammer posing as your bank. The message notifies you that your account has been compromised and they need your account information ASAP. Before you go into panic mode and react without thinking, take a step back. A little pause like this can give you a much-needed gut check. You can second-guess those triggered emotions and ask yourself, “Is this real?” Banks, including Truist, will not text or call you to ask for your account information.

Social engineering techniques–and how to avoid them

1. Using your trust as a tool: You trust what you know. So when you hear from an old friend asking you to wire money or a familiar organization wanting to know your password, your natural tendency might be to automatically believe it’s legit. Sadly, 98% of cyber hacks are done via social engineering.^{Disclosure 3}

What to do if you’re targeted by a social engineering scam

Generally, staying alert and aware can help you avoid falling for social engineering scams—but inevitably, sometimes the scammers will succeed. If you think you’ve been the victim of a social engineering scam, there are a number of things you can do to defend yourself:

• Contact your financial institutions and credit bureaus and let them know you might’ve been a victim of a scam.
• If someone’s stolen your card information, freeze your card until you can get a new one.
• Update your online accounts with secure passwords for better protection.
• Check your credit report for fraudulent activity, and check your bank accounts to pinpoint any purchases you didn’t make.
• Delete any suspicious apps from your phone or computer and run antivirus software if you have it.
• Let your contacts know you’ve been the victim of a scam and not to interact with any links that might have come from “you.”

At Truist, protecting your information and identity is our priority. We will never send unsolicited emails, texts, or DMs, or call you unexpectedly asking you to provide, update, or verify your personal or acount information, such as passwords, Social Security numbers, personal identification numbers (PINs), credit or debit card numbers, or other confidential information.

If you believe your account security has been compromised or have any concerns, call us immediately at 844-4TRUIST (844-487-8478).

Learn more about how Truist protects your accounts, and get helpful tips on steps you can take to protect yourself from fraudsters.