Technology
Don’t fall for fake settlement sites that steal your data
Cyber expert shares tips to avoid AI phishing scams
Kurt ‘The CyberGuy’ Knutsson shares practical ways to avoid falling victim to AI-generated phishing scams and discusses a report that North Korean agents are posing as I.T. workers to funnel money into the country’s nuclear program.
NEWYou can now listen to Fox News articles!
Sometimes, data breaches result in more than just free credit monitoring. Recently, Facebook began paying out its $725 million settlement, and AT&T is preparing to distribute $177 million. Those payouts caught scammers’ attention.
Now, fake settlement claim emails and websites are flooding inboxes. They look convincing, but behind the plain design and official-sounding language is a trap for your Social Security number, banking info and more. So how can you make sure you get your money without losing even more in the process?
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CyberGuy.com newsletter.
TOP 5 OVERPAYMENT SCAMS TO AVOID
Why fake settlement sites are so convincing
Settlement claim websites rarely look polished. Most have generic layouts, long URLs and simple forms asking for a claim ID from your email or postcard. That makes it easy for scammers to mimic them. To test how simple it is, we created a fake settlement site (below) in minutes using AI tools like ChatGPT.
To steal your data, scammers build fake settlement sites that mimic real sites (Kurt “CyberGuy” Knutsson)
If we can do it, you can bet criminals are already exploiting the same shortcuts. Facebook has been the target. A fake site once popped up around the Equifax settlement, tricking thousands before it was shut down. The lesson? If the site appears unusual, it doesn’t necessarily mean it’s fake, but it should prompt you to double-check before entering your details or clicking on any links.
Red flags that expose fake settlement sites
Spotting a scam often comes down to noticing the little details. Watch for these common warning signs before you hand over your information.
Requests for too much personal data
If a site asks for your full Social Security number or the names of your children, stop. For example, the official Equifax settlement only requested the last six digits of SSNs. Genuine claim sites may ask for limited info (like the last four digits of your SSN), but they rarely demand complete Social Security or bank details.
Promises of payout estimates upfront
Real administrators calculate payments only after the claim period closes.
Texts or social media messages
Settlements are announced by mail or email, not through random DMs or SMS.
Fraud can be found with red flags like odd URLs, urgent countdowns, or fee requests (Kurt “CyberGuy” Knutsson)
Odd or misspelled URLs
Even one extra letter in the web address is a sign of a spoof site. Legitimate settlements use official or clearly named administrator domains. Be wary of addresses with unusual add-ons, such as “secure-pay” or “claims-pay.”
Urgent language or countdowns
Scammers rely on urgency to pressure you into acting fast. Real settlement sites don’t demand 24-hour turnarounds.
Processing fee checkboxes
A sure giveaway of a fake. Real settlement administrators never require money to file or to receive your payout.
Cheap trust badges
Scam sites often throw in fake “secure” seals. Look for recognized security seals and make sure they’re clickable and verifiable.
Generic contact info tied to the suspicious domain
Official sites list multiple, verifiable contacts. If the email or phone number matches the weird domain, that’s a red flag.
Grammar or spelling mistakes in the fine print
Sloppy errors in legal-sounding text are a classic sign you’re looking at a scam.
Start with official FTC links or mailed notices to file claims safely (Kurt “CyberGuy” Knutsson)
How to safely handle settlement claim notices
Before filing any claim, follow these steps to ensure you’re dealing with a legitimate settlement site and protecting your information.
1) Start at the FTC
The Federal Trade Commission keeps updated lists of approved class action settlements at ftc.gov/enforcement/refunds. The legitimate links always point to a .gov website. If your email sends you elsewhere, treat it with caution.
2) Cross-check with other resources
Trusted outlets often cover large settlements and include safe links. ClassAction.org is another resource for checking legitimate URLs.
3) Skip the links, use the mail
Your claim notice may include a mailing address. Sending a paper form avoids the digital phishing minefield altogether.
4) Use strong antivirus software
Strong antivirus software can block malicious links, warn you about dangerous websites and prevent malware from taking over your device.
The best way to safeguard yourself from malicious links that install malware and potentially access your private information is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.
Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices at CyberGuy.com.
HOW RETIREES CAN STOP FAKE DEBT COLLECTOR SCAMS
5) Try a data removal service
Data removal services work to scrub your personal information from broker lists, making it more difficult for criminals to target you.
While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.
Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting CyberGuy.com.
Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.
6) Never pay to file
If a site asks for “administrative fees” or a “processing charge,” close it immediately. Real settlement administrators will never ask for money.
7) Report suspicious sites
Spot a fake? Protect others by reporting it to:
- The FTC Complaint Assistant at reportfraud.ftc.gov/
- The Internet Crime Complaint Center (IC3) at ic3.gov/
- The Consumer Financial Protection Bureau (CFPB) at consumerfinance.gov/about-us/the-bureau/
Quick reporting helps authorities shut down scams before more people fall victim.
Can you tell a real email from a fake?
Take our quick quiz at Cyberguy.com/ScamCheck to learn how to spot phishing scams, protect your inbox, and stay a step ahead of hackers.
Kurt’s key takeaways
Class action settlements can feel like rare wins for consumers after data breaches. But scammers see them as easy hunting grounds. The best defense is skepticism. Check URLs, avoid clicking direct links and never give away details that don’t match the claim’s purpose. Your payout should help you recover, not put you at greater risk.
Have you ever received a settlement notice that felt suspicious, and how did you handle it? Let us know by writing to us at CyberGuy.com.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CyberGuy.com newsletter.
Copyright 2025 CyberGuy.com. All rights reserved.
Technology
Siri Shortcuts now works with Samsung SmartThings routines
Samsung’s latest SmartThings update adds support for Siri Shortcuts. In a press release, Samsung announced that you can now use Siri to run SmartThings routines, allowing you to use Apple’s voice assistant to control your smart home.
Siri Shortcuts is a feature in iOS that lets you run automations by asking Siri. These can either be created by the user in the Shortcuts app or by the manufacturers in their app.
This update should make it easier to control your SmartThings home using your iPhone, HomePod, or other Apple device. For example, you can now call on Siri to trigger your “Good morning” routine through SmartThings that automatically adjusts the lights, turns on your coffee maker, and opens your blinds when you wake up.
Samsung is also enhancing its SmartThings app for Apple devices. On the Apple Watch, you can now see a full list of your devices, send commands, and carry out routines, while the SmartThings app for iOS gives you the ability to view and control up to five of your most recently used devices from your lock screen with Live Activities.
Technology
The #1 Google search scam everyone falls for
NEWYou can now listen to Fox News articles!
When something goes wrong with your bank account or delivery, your first instinct might be to type the company name into Google and call the first customer service number you see. But that simple search has become one of the biggest traps for scammers, and it’s costing people money, privacy and even control over their phones.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.
A simple Google search for a company’s customer service number can lead straight to a scam. The first result isn’t always the safest one. (Kurt “CyberGuy” Knutsson)
He Googled his bank’s number and lost control of his phone
Here’s how one man’s quick search for help turned into a nightmare he never expected. Gabriel wrote to us in distress, asking,
“I called my bank to check on some charges I didn’t authorize. I called the number on the bank statement, but they told me to go online. I googled the company and dialed the first number that popped up. Some foreign guy got on the phone, and I explained about the charges. Somehow, he took control of my phone, where I didn’t have any control. I tried to shut it down and hang up, but I couldn’t. He ended up sending an explicit text message to my 16-year-old daughter. How do I prove I didn’t send that message? Please help.”
Gabriel’s story is frightening, and unfortunately, it’s not rare. This type of attack is called a remote access support scam. Scammers pretend to be bank or tech support, then trick you into installing a program that gives them control of your device. Once inside, they can steal passwords, send messages or lock you out completely.
WHATSAPP BANS 6.8M SCAM ACCOUNTS, LAUNCHES SAFETY TOOL
Gabriel thought he was calling his bank, but the number was fake. Within minutes, a scammer took control of his phone and invaded his privacy. (Kurt “CyberGuy” Knutsson)
Why this scam works
Search engines reward paid ads. Scammers take advantage of this by buying ad space to appear above legitimate customer service numbers. The fake pages look professional, complete with company logos and 800 numbers that seem real.
Once you call, the fake “agent” sounds knowledgeable and polite. They build trust, then convince you to install remote access software such as AnyDesk or TeamViewer. From that point, they can control everything on your phone.
What to do if this happens to you
Gabriel, what you went through is incredibly upsetting, and you’re right to take it seriously. Here’s what to do right away:
1) Disconnect and secure your phone
Turn off your phone immediately. Restart it in Airplane Mode and don’t connect to Wi-Fi yet. Run a full antivirus scan with strong antivirus software.
2) Change all your passwords
Use a secure device that has not been compromised to reset the passwords for your key accounts, including email, cloud storage, phone carrier and banking logins. Create strong, unique passwords for each account and enable two-factor authentication (2FA) for added protection on all your devices and platforms.
Next, see if your email has been exposed in past breaches. Our #1 password manager (see Cyberguy.com) pick includes a built-in breach scanner that checks whether your email address or passwords have appeared in known leaks. If you discover a match, immediately change any reused passwords and secure those accounts with new, unique credentials.
Check out the best expert-reviewed password managers of 2025 at Cyberguy.com
3) Contact your carrier and your bank
Let your phone provider know that your device was taken over. Ask them to check for unauthorized remote management apps or SIM-swap activity. Notify your bank’s fraud department and report the fake number you found on Google.
4) Report the explicit message
Take screenshots and save everything. Contact local police and explain that the message was sent from your number while your phone was under remote control. If a minor is involved, the case may be referred to the FBI’s Internet Crime Complaint Center (IC3.gov).
5) Factory reset your phone
Once your data is backed up, perform a factory reset on your iPhone or Android to remove any hidden software. Reinstall only apps you recognize from the official app store.
HOW TO STOP IMPOSTOR BANK SCAMS BEFORE THEY DRAIN YOUR WALLET
Scammers use fake customer service numbers to sound convincing and gain remote access to your devices, turning a simple call for help into a digital takeover. (Kurt “CyberGuy” Knutsson)
Tips to stay safe from fake customer service scams
Falling for a fake customer service number can happen to anyone, especially when you’re in a rush or worried about your account. Here’s how to make sure you never get tricked by the same kind of scam that hijacked Gabriel’s phone.
Go directly to the company’s official website
Always type the company’s web address yourself or use the contact number printed on your card or statement. Scammers often create fake numbers that appear in search results, hoping you’ll call them instead of your real bank.
Don’t trust the first search result on Google
Search engines sell ad space to anyone, including criminals posing as real businesses. Those top “sponsored” listings can lead straight to scammers. Instead, scroll down until you find the official domain ending in .com, .org or .gov.
Never allow remote access to your phone or computer
No legitimate company needs to control your device to verify charges or fix an account issue. If someone asks you to install software like AnyDesk or TeamViewer, hang up immediately. These tools give strangers complete control of your screen and data.
Hang up if the caller pressures you to act fast
Scammers rely on panic. When someone insists you act “right now” or risk losing money, that’s a warning sign. Stay calm, hang up, and verify the problem through your bank’s official website or number.
Use strong antivirus protection
Install and regularly update a trusted antivirus app. Strong antivirus software can block remote-access tools and spyware before scammers gain access. Regular scans also detect hidden threats that may already be on your phone or computer.
The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.
Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com
Consider using a data removal service
Many scammers find victims through data brokers that sell phone numbers and personal details. A data removal service helps erase your information from these sites. As a result, it’s harder for criminals to target you with fake customer service scams in the first place.
While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.
Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com
Get a free scan to find out if your personal information is already out on the web: Cyberguy.com
Monitor your identity with a trusted protection service
Even a short breach can expose your private information. Identity-monitoring tools alert you when your name, email or Social Security number appears on the dark web. That gives you time to act before scammers can use it.
Identity Theft companies can monitor personal information like your Social Security Number (SSN), phone number, and email address, and alert you if it is being sold on the dark web or being used to open an account. They can also assist you in freezing your bank and credit card accounts to prevent further unauthorized use by criminals.
See my tips and best picks on how to protect yourself from identity theft at Cyberguy.com
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Kurt’s key takeaways
The internet has made getting help easier than ever, but it has also made it easier for scammers to pretend to be helpful. The top way people are being scammed today isn’t through phishing emails or suspicious links; it’s by trusting fake phone numbers that look official. Take a few minutes to save the real customer service numbers for your bank, phone provider, and credit card company. One quick call to the wrong number could give a stranger access to your entire digital life.
With fake customer service numbers flooding search results, should Google be held responsible for protecting you from these scams? Let us know by writing to us at Cyberguy.com
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.
Copyright 2025 CyberGuy.com. All rights reserved.
Technology
Blue Origin scrubs second New Glenn launch
The second launch of Blue Origin’s partially reusable New Glenn rocket was scrubbed on Sunday due to adverse weather conditions, delaying NASA’s latest Mars mission. The Jeff Bezos-owned commercial space company announced that its next launch window from Cape Canaveral Space Force Station in Florida will be attempted “no earlier” than Wednesday, November 12th, between 2:50PM and 4:17PM ET.
This is a significant launch for the 320-foot-tall megarocket, which is tasked with sending NASA’s twin ESCAPADE (Escape and Plasma Acceleration and Dynamics Explorers) probes into space — the first Mars-bound mission since NASA launched its Perseverance and Ingenuity vehicles in 2020 to explore the red planet’s surface. The ESCAPADE satellites are projected to reach Mars orbit in 2027, where they will measure the planet’s magnetic field and atmosphere.
This will also be Blue Origin’s latest attempt to land New Glenn’s reusable first-stage booster, which, much like SpaceX’s Falcon rocket boosters, is designed to vertically touch down on a sea-based platform following launch. While Blue Origin successfully launched New Glenn for the first time in January after several delays, the booster was lost during its landing descent. A successful launch and landing would help Blue Origin to prove itself as a deep-space launch provider that’s capable of competing with established rivals like SpaceX and United Launch Alliance.
Blue Origin says it worked with the Federal Aviation Administration to select its latest launch window, having seemingly been given an exemption to new FAA rules that prohibit commercial rockets from being launched between 6AM and 10PM. This emergency order came into effect on November 10th to alleviate air traffic congestion during the ongoing government shutdown. If all goes to plan, the live webcast for New Glenn’s second flight will start 20 minutes prior to launch on Wednesday.
-
Austin, TX5 days agoHalf-naked woman was allegedly tortured and chained in Texas backyard for months by five ‘friends’ who didn’t ‘like her anymore’
-
Southwest3 days agoTexas launches effort to install TPUSA in every high school and college
-
Seattle, WA1 week agoESPN scoop adds another intriguing name to Seahawks chatter before NFL trade deadline
-
Hawaii2 days agoMissing Kapolei man found in Waipio, attorney says
-
World6 days agoIsrael’s focus on political drama rather than Palestinian rape victim
-
New Jersey2 days agoPolice investigate car collision, shooting in Orange, New Jersey
-
Southwest7 days agoArmy veteran-turned-MAGA rising star jumps into fiery GOP Senate primary as polls tighten
-
Seattle, WA2 days agoSoundgarden Enlist Jim Carrey and Seattle All-Stars for Rock Hall 2025 Ceremony