Technology

The DJI Romo robovac had security so poor, this man remotely accessed thousands of them

Published

1 month ago

February 14, 2026

The DJI Romo robovac had security so poor, this man remotely accessed thousands of them

Sammy Azdoufal claims he wasn’t trying to hack every robot vacuum in the world. He just wanted to remote control his brand-new DJI Romo vacuum with a PS5 gamepad, he tells The Verge, because it sounded fun.

But when his homegrown remote control app started talking to DJI’s servers, it wasn’t just one vacuum cleaner that replied. Roughly 7,000 of them, all around the world, began treating Azdoufal like their boss.

He could remotely control them, and look and listen through their live camera feeds, he tells me, saying he tested that out with a friend. He could watch them map out each room of a house, generating a complete 2D floor plan. He could use any robot’s IP address to find its rough location.

“I found my device was just one in an ocean of devices,” he says.

A map like the one I saw, with robots and packets trickling in.

Image: Gonzague Dambricourt

On Tuesday, when he showed me his level of access in a live demo, I couldn’t believe my eyes. Ten, hundreds, thousands of robots reporting for duty, each phoning home MQTT data packets every three seconds to say: their serial number, which rooms they’re cleaning, what they’ve seen, how far they’ve traveled, when they’re returning to the charger, and the obstacles they encountered along the way.

I watched each of these robots slowly pop into existence on a map of the world. Nine minutes after we began, Azdoufal’s laptop had already cataloged 6,700 DJI devices across 24 different countries and collected over 100,000 of their messages. If you add the company’s DJI Power portable power stations, which also phone home to these same servers, Azdoufal had access to over 10,000 devices.

Azdoufal says he could remote-control robovacs and view live video over the internet.

When I say I couldn’t believe my eyes at first, I mean that literally. Azdoufal leads AI strategy at a vacation rental home company; when he told me he reverse engineered DJI’s protocols using Claude Code, I had to wonder whether AI was hallucinating these robots. So I asked my colleague Thomas Ricker, who just finished reviewing the DJI Romo, to pass us its serial number.

With nothing more than that 14-digit number, Azdoufal could not only pull up our robot, he could correctly see it was cleaning the living room and had 80 percent battery life remaining. Within minutes, I watched the robot generate and transmit an accurate floor plan of my colleague’s house, with the correct shape and size of each room, just by typing some digits into a laptop located in a different country.

Here are two maps of Thomas’ living space. Above is what we pulled from DJI’s servers without authentication; below is what the owner sees on their own phone.

Screenshots by The Verge

Here’s a fuller floor plan from Gonzague Dambricourt, who tried out a read-only version of Azdoufal’s tool.

Image: Gonzague Dambricourt (X)

Separately, Azdoufal pulled up his own DJI Romo’s live video feed, completely bypassing its security PIN, then walked into his living room and waved to the camera while I watched. He also says he shared a limited read-only version of his app with Gonzague Dambricourt, CTO at an IT consulting firm in France; Dambricourt tells me the app let him remotely watch his own DJI Romo’s camera feed before he even paired it.

Azdoufal was able to enable all of this without hacking into DJI’s servers, he claims. “I didn’t infringe any rules, I didn’t bypass, I didn’t crack, brute force, whatever.” He says he simply extracted his own DJI Romo’s private token — the key that tells DJI’s servers that you should have access to your own data — and those servers gave him the data of thousands of other people as well. He shows me that he can access DJI’s pre-production server, as well as the live servers for the US, China, and the EU.

DJI has MQTT servers associated with the US, EU, and China. I’m not sure what VG stands for.

Screenshot by Sean Hollister / The Verge

Here’s the good news: On Tuesday, Azdoufal was not able to take our DJI Romo on a joyride through my colleague’s house, see through its camera, or listen through its microphone. DJI had already restricted that form of access after both Azdoufal and I told the company about the vulnerabilities.

And by Wednesday morning, Azdoufal’s scanner no longer had access to any robots, not even his own. It appears that DJI has plugged the gaping hole.

But this incident raises serious questions about DJI’s security and data practices. It will no doubt be used to help retroactively justify fears that led to the Chinese dronemaker getting largely forced out of the US. If Azdoufal could find these robots without even looking for them, will it protect them against people with intent to do harm? If Claude Code can spit out an app that lets you see into someone’s house, what keeps a DJI employee from doing so? And should a robot vacuum cleaner have a microphone? “It’s so weird to have a microphone on a freaking vacuum,” says Azdoufal.

It doesn’t help that when Azdoufal and The Verge contacted DJI about the issue, the company claimed it had fixed the vulnerability when it was actually only partially resolved.

“DJI can confirm the issue was resolved last week and remediation was already underway prior to public disclosure,” reads part of the original statement provided by DJI spokesperson Daisy Kong. We received that statement on Tuesday morning at 12:28PM ET — about half an hour before Azdoufal showed me thousands of robots, including our review unit, reporting for duty.

Not just robovacs — DJI’s power stations also use this system.

Screenshot by Sean Hollister / The Verge

To be clear, it’s not surprising that a robot vacuum cleaner with a smartphone app would phone home to the cloud. For better or for worse, users currently expect those apps to work outside of their own homes. Unless you’ve built a tunnel into your own home network, that means relaying the data through cloud servers first.

But people who put a camera into their home expect that data to be protected, both in transit and once it reaches the server. Security professionals should know that — but as soon as Azdoufal connected to DJI’s MQTT servers, everything was visible in cleartext. If DJI has merely cut off one particular way into those servers, that may not be enough to protect them if hackers find another way in.

Unfortunately, DJI is far from the only smart home company that’s let people down on security. Hackers took over Ecovacs robot vacuums to chase pets and yell racist slurs in 2024. In 2025, South Korean government agencies reported that Dreame’s X50 Ultra had a flaw that could let hackers view its camera feed in real time, and that another Ecovacs and a Narwal robovac could let hackers view and steal photos from the devices. (Korea’s own Samsung and LG vacuums received high marks, and a Roborock did fine.)

It’s not just vacuums, of course. I still won’t buy a Wyze camera, despite its new security ideas, because that company tried to sweep a remote access vulnerability under the rug instead of warning its customers. I would find it hard to trust Anker’s Eufy after it lied to us about its security, too. But Anker came clean, and sunlight is a good disinfectant.

DJI is not being exceptionally transparent about what happened here, but it did answer almost all our questions. In a new statement to The Verge via spokesperson Daisy Kong, the company now admits “a backend permission validation issue” that could have theoretically let hackers see live video from its vacuums, and it admits that it didn’t fully patch that issue until after we confirmed that issues were still present.

Here’s that whole statement:

DJI identified a vulnerability affecting DJI Home through internal review in late January and initiated remediation immediately. The issue was addressed through two updates, with an initial patch deployed on February 8 and a follow-up update completed on February 10. The fix was deployed automatically, and no user action is required.
The vulnerability involved a backend permission validation issue affecting MQTT-based communication between the device and the server. While this issue created a theoretical potential for unauthorized access to live video of ROMO device, our investigation confirms that actual occurrences were extremely rare. Nearly all identified activity was linked to independent security researchers testing their own devices for reporting purposes, with only a handful of potential exceptions.
The first patch addressed this vulnerability but had not been applied universally across all service nodes. The second patch re-enabled and restarted the remaining service nodes. This has now been fully resolved, and there is no evidence of broader impact. This was not a transmission encryption issue. ROMO device-to-server communication was not transmitted in cleartext and has always been encrypted using TLS. Data associated with ROMO devices, such as those in Europe, is stored on U.S.-based AWS cloud infrastructure.
DJI maintains strong standards for data privacy and security and has established processes for identifying and addressing potential vulnerabilities. The company has invested in industry-standard encryption and operates a longstanding bug bounty program. We have reviewed the findings and recommendations shared by the independent security researchers who contacted us through that program as part of our standard post-remediation process. DJI will continue to implement additional security enhancements as part of its ongoing efforts.
Advertisement

Azdoufal says that even now, DJI hasn’t fixed all the vulnerabilities he’s found. One of them is the ability to view your own DJI Romo video stream without needing its security pin. Another one is so bad I won’t describe it until DJI has more time to fix it. DJI did not immediately promise to do so.

And both Azdoufal and security researcher Kevin Finisterre tell me it’s not enough for the Romo to send encrypted data to a US server, if anyone inside that server can easily read it afterward. “A server being based in the US in no way, shape, or form prevents .cn DJI employees from access,” Finisterre tells me. That seems evident, as Azdoufal lives in Barcelona and was able to see devices in entirely different regions.

“Once you’re an authenticated client on the MQTT broker, if there are no proper topic-level access controls (ACLs), you can subscribe to wildcard topics (e.g., #) and see all messages from all devices in plaintext at the application layer,” says Azdoufal. “TLS does nothing to prevent this — it only protects the pipe, not what’s inside the pipe from other authorized participants.”

When I tell Azdoufal that some may judge him for not giving DJI much time to resolve the issues before going public, he notes that he didn’t hack anything, didn’t expose sensitive data, and isn’t a security professional. He says he was simply livetweeting everything that happened while trying to control his robot with a PS5 gamepad.

“Yes, I don’t follow the rules, but people stick to the bug bounty program for money. I fucking don’t care, I just want this fixed,” he says. “Following the rules to the end would probably make this breach happen for a way longer time, I think.”

He doesn’t believe that DJI truly discovered these issues by itself back in January, and he’s annoyed the company only ever responded to him robotically in DMs on X, instead of answering his emails.

But he is happy about one thing: He can indeed control his Romo with a PlayStation or Xbox gamepad.

Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.

Sean Hollister

Technology

Amazon Health AI brings a doctor to your pocket

Published

27 minutes ago

March 23, 2026

Press Room

Amazon Health AI brings a doctor to your pocket

NEWYou can now listen to Fox News articles!

Most people have had this moment. You feel a strange symptom, open your phone and start searching online. Within minutes, you are deep in medical forums reading worst-case scenarios. By the end, you are either terrified or more confused than when you started.

Health care should feel clearer than that. Yet for many of us, it rarely does. Appointments take weeks. Medical records are hard to understand. You often have to repeat the same health history at every visit. Insurance rules feel like a maze.

According to the American Academy of Physician Associates, many Americans say navigating the healthcare system feels overwhelming and they wish doctors had more time to listen. Now, a new tool from Amazon hopes to change that experience. It is called Amazon Health AI.

Sign up for my FREE CyberGuy Report

Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.

$163K IN FAKE MEDICAL BILL CHARGES, AI UNCOVERS IT FOR YOU

Amazon Health AI lets you ask health questions, review records and connect with care directly through the Amazon app. (Kurt “CyberGuy” Knutsson)

What Amazon Health AI actually does

Amazon Health AI, available at amazon.com/health-ai, acts as a digital health assistant that can answer medical questions and help guide you through your care. The tool lives inside the Amazon app and website.

You start by typing a health question into a chat box. From there, the system can:

Explain lab results in plain language
Review symptoms and suggest next steps
Help schedule care with a provider
Assist with prescription renewals
Recommend relevant health products if asked

Health AI connects directly with clinicians from Amazon One Medical when professional care is needed. You can message a provider, start a video visit or schedule an in-person appointment. The goal is to make getting care simpler. Instead of spending time searching for appointments or jumping between different apps, you can move from a question to a provider more quickly. If symptoms suggest a possible emergency, the system may advise you to contact emergency services, such as calling 911.

Amazon is gradually rolling the Health AI tool out to U.S. customers, and availability varies by location.

CyberGuy reached out to Amazon for comment about the new service. Andrew Diamond, Ph.D., M.D., chief medical officer at Amazon One Medical, said the goal is to reduce some of the everyday frustrations people face when navigating healthcare.

“Nearly two-thirds of Americans feel overwhelmed by the healthcare system and wish their doctors had more time to understand their concerns,” Diamond said. “Health AI is designed to handle the logistical and informational work that creates friction in healthcare, so patients and providers can spend more time on what matters most: the human relationship at the heart of healing.”

How Amazon Health AI uses your medical history

Health AI becomes more useful when it understands your medical history.

With permission, the system can access information such as:

Past diagnoses
Medications
Lab results
Doctor’s notes

This data flows through a secure national network called the Health Information Exchange. Health AI can access records from hundreds of thousands of providers nationwide once permission is granted.

For example, imagine someone with asthma develops a cough during flu season. A generic search might treat that symptom like any other cough. Health AI can look at your history and ask follow-up questions based on your specific risk factors.

Health AI can provide general information about someone else’s health question, but personalized answers are limited to the medical history of the account holder.

That context helps the system provide more relevant guidance. Still, the assistant does not replace doctors. When the situation requires medical judgment, it connects you with a real clinician.

CHATGPT COULD MISS YOUR SERIOUS MEDICAL EMERGENCY, NEW STUDY SUGGESTS

Health AI can help explain lab results, check symptoms and connect you with care through your phone. (Amazon)

How Amazon connects AI with real medical care

The service works closely with Amazon One Medical providers. Prescription renewals can also move through the system, with requests sent to a One Medical provider who reviews the request before approval. You can fill prescriptions through Amazon Pharmacy or another pharmacy you prefer. This approach helps reduce the steps people often face when trying to get care. Instead of spending time searching for appointments or jumping between different apps, you can move from a question to a provider more quickly.

Special access for Prime members

Amazon is also adding a limited introductory benefit. Eligible members of Amazon Prime can receive up to five free message-based consultations with a One Medical provider.

Neil Lindsay, senior vice president of Amazon Health Services, said the goal is to make care easier to access through the tools people already use. “Eligible Prime member accounts get up to five free direct message care consultations with a One Medical provider for any of the 30 common conditions,” Lindsay said.

These visits cover common conditions, including:

Colds and flu
Allergies and acid reflux
Pink eye and UTIs
Hair loss and skin care

Outside the promotion, message or telehealth visits typically cost about $29. A full One Medical membership provides broader virtual care and costs less for Prime members than for non-members.

How Amazon says it protects health data

Health information raises serious privacy questions. Amazon says Health AI runs inside a HIPAA-compliant environment with strong encryption and strict access controls. According to the company, personal health data is not used to sell ads. Amazon also says protected health information from One Medical and Amazon Pharmacy is not used for advertising or sold to third parties.

The system also includes safety guardrails. If the AI cannot confidently answer a question, it directs you to a human provider. Behind the scenes, the technology runs on Amazon’s AI platform called Amazon Bedrock.

Amazon also emphasized that Health AI was designed alongside medical professionals rather than built purely as a technology product.

“This isn’t a chatbot with a healthcare skin,” said Prakash Bulusu, chief technology officer at Amazon Health Services. “It’s a system designed from the ground up to be personalized, trustworthy and useful.”

Bulusu said he personally tested the system with his own health data, and it surfaced lab work he had forgotten to complete after a physical exam.

CHATGPT HEALTH PROMISES PRIVACY FOR HEALTH CONVERSATIONS

You can ask Health AI about symptoms and receive guidance before deciding whether to seek medical care. (Amazon)

Why Amazon believes AI belongs in healthcare

Millions of people already search Amazon for vitamins, blood pressure monitors and health products. The company believes AI can help guide those searches and connect them with medical advice. Amazon also partnered with major health systems, including the Cleveland Clinic and Rush University System for Health, to create smoother referrals between primary care and specialists. The idea is continuity. You should not feel like you are starting from scratch every time you see a new provider.

What this means for you

Tools like Health AI show how quickly artificial intelligence is moving into everyday health decisions. For patients, the potential benefits are clear. Faster answers. Simpler records. Easier access to doctors.

Yet it also raises big questions about privacy, data control and how much we rely on automated systems for health advice. AI can help people understand their health. But the human doctor still plays the absolute most important role. The challenge will be finding the right balance.

Take my quiz: How safe is your online security?

Think your devices and data are truly protected? Take this quick quiz to see where your digital habits stand. From passwords to Wi-Fi settings, you’ll get a personalized breakdown of what you’re doing right and what needs improvement. Take my Quiz here: Cyberguy.com.

Kurt’s key takeaways

Healthcare can be frustrating. Long waits, confusing records and disconnected systems often leave you feeling lost. Amazon believes AI can help guide you through that process. If the technology works as promised, it could help millions of us understand our health faster and reach care sooner. Still, any system that handles sensitive medical information must earn trust over time. That trust will depend on transparency, security and how responsibly companies use personal health data.

Would you feel comfortable letting an AI assistant review your medical history and guide your health decisions? Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report

Kurt “CyberGuy” Knutsson is an award-winning tech journalist who has a deep love of technology, gear and gadgets that make life better with his contributions for Fox News & FOX Business beginning mornings on “FOX & Friends.” Got a tech question? Get Kurt’s free CyberGuy Newsletter, share your voice, a story idea or comment at CyberGuy.com.

Technology

Crimson Desert dev apologizes for use of AI art

Published

12 hours ago

March 22, 2026

Press Room

Crimson Desert dev apologizes for use of AI art

Reviews of Crimson Desert have been mixed, but the bigger issue for the game has been the discovery of what appeared to be AI-generated assets in the final release. Now the developer has acknowledged that AI art was indeed used during the game’s creation, but says that it was intended to be replaced before release. In a statement on X, the company said it was conducting a “comprehensive audit” to identify and replace any AI-generated content.

The company apologized for both its inclusion in the final release and for not being more transparent about its use during development. “We should have clearly disclosed our use of AI,” it said.

The use of generative AI in gaming has become a hot-button issue of the last couple of years as it’s made its way into several high-profile titles. While some large studios have embraced it, many smaller developers have revolted against the trend, proudly proclaiming their games to be “AI free.”

Technology

YouTube job scam text: How to spot it fast

Published

13 hours ago

March 22, 2026

Press Room

YouTube job scam text: How to spot it fast

NEWYou can now listen to Fox News articles!

Most of us have received a random text that makes us pause for a second. Maybe it promises a prize. Maybe it claims to be from a delivery company. Lately, another type of message is spreading quickly: the remote job scam.

That is exactly what happened to Peter from New York. He wrote in after receiving a suspicious message about a high-paying YouTube job.

Here is what he sent:

“I received this text today, and I think it’s a scam. How can I tell for sure, and what do I do next?”

Below is the message Peter received. At first glance, it looks like a job opportunity. However, when you break it down line by line, several warning signs appear. Let’s walk through them.

Sign up for my FREE CyberGuy Report

FAKE GOOGLE SECURITY PAGE CAN TURN YOUR BROWSER INTO A SPYING TOOL

A suspicious text message promises up to $10,000 a month for boosting YouTube video views. Offers like this are a common sign of a job scam. (Kurt “CyberGuy” Knutsson)

Red flag 1: A random job offer from a stranger

The text comes from an unknown international phone number starting with +63, which is the country code for the Philippines. Legitimate companies rarely recruit through random text messages from unknown numbers. Real employers usually contact candidates through job platforms, email or professional networks like LinkedIn. When a job appears out of nowhere and promises high pay, it should immediately raise suspicion.

Red flag 2: The pay is wildly unrealistic

The message claims:

$200 to $600 per day
$10,000 or more per month

Those numbers are a major warning sign. Entry-level remote work, such as “boosting video views” or “YouTube optimization,” does not pay anywhere near that range. Scammers often use unusually high pay to trigger excitement and urgency. When money sounds too good to be true, it usually is.

Red flag 3: No experience required but huge income

The text says “no experience required, free paid training provided.” Scammers often combine high income with zero qualifications. That combination is designed to attract as many people as possible.

Real digital marketing jobs usually require:

SEO or marketing experience
Analytics knowledge
Platform expertise

A company offering $10K per month with no requirements is not realistic.

BE AWARE OF EXTORTION SCAM EMAILS CLAIMING YOUR DATA IS STOLEN

Scammers often claim no experience is required and that training is provided. The goal is to lure you in quickly before you start asking questions. (Kurt “CyberGuy” Knutsson)

Red flag 4: The job description is vague

The text claims the job is to “increase video exposure and view count.”

That description is extremely vague. It does not explain:

What tools you would use
What company you would work for
How the work is measured

Scam job offers often stay vague so they can adapt the story later.

Red flag 5: Pressure to respond immediately

The message says: “5 urgent openings available, first come first served.” This is a classic scam tactic. Urgency pushes people to respond quickly before they have time to research the offer. Real companies rarely hire qualified candidates on a first-come basis through text messages.

Red flag 6: The strange reply instructions

The message tells recipients to reply “OK” and then send a numeric code. This step is often used to move the conversation to another messaging platform, such as Telegram or WhatsApp, where scammers continue the scheme. Once the conversation moves there, victims may be asked to:

Complete fake tasks
Send cryptocurrency
Pay deposits for “training”

These scams are often called task scams, where victims complete simple online tasks and may even receive small payments at first before scammers demand larger deposits for payouts that never come. They have exploded worldwide over the past few years.

Red flag 7: No company information

The message never names a real company. It mentions a “manager” named Goldie but provides:

No company website
No corporate email
No office address

Legitimate employers want applicants to know who they are. Scammers avoid details that can be verified.

How these YouTube job scams usually work

Many of these scams follow the same pattern. First, scammers promise easy money for simple tasks lsuch as liking videos or boosting views. At the beginning, they may even send a small payment to build trust. Then things change. Victims are asked to deposit money to unlock larger payouts or complete “premium tasks.” Once payments are sent, the scammers disappear. The Federal Trade Commission says Americans lost hundreds of millions of dollars to job scams in recent years, and text message recruitment scams are rising fast.

Google warns about growing job scams and how to verify recruiters

We reached out to Google, and a spokesperson provided the following statement to CyberGuy:

“Google is aware of these job scams happening across the industry and believes they’re growing around the world. We strongly encourage any candidate, or individual receiving them, to exercise caution and report it to the platform you received it on as a phishing attempt and/or spam. Our recruiting team focuses on contacting candidates in official capacities and are very clear about who we are, why we’re reaching out, and do so from legitimate emails or profiles on job sites. Jobseekers should verify anyone contacting them by email addresses, looking up the person online, such as on LinkedIn, and if something does seem suspicious, flag it to the outlet where it was received. Folks can also vet and report these scams to Google at support.google.com. Our Google careers page reflects all of our current job postings, so candidates should check offers against those. Generally speaking, Google also continues to offer a range of tools and insights that help people automatically spot and avoid scams like these whether they receive them via email, search results, text messages, etc.”

FAKE GOOGLE GEMINI AI PUSHES ‘GOOGLE COIN’ CRYPTO SCAM

Messages that push you to reply immediately or move the conversation to apps like Telegram or WhatsApp are a major red flag. (Kurt “CyberGuy” Knutsson)

Ways to stay safe from job text scams

If you receive a message like Peter’s, here are some smart steps to take.

1) Never respond to unknown job texts

Replying confirms your number is active. That can lead to more scam messages.

2) Do not click links or download attachments

Scam texts sometimes include links that lead to phishing pages designed to steal login credentials or financial information. Install strong antivirus software on your devices, which can help detect malicious links, block dangerous websites and warn you before you open something risky. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com.

3) Reduce how easily scammers can find your information

Scammers often harvest phone numbers and personal details from data broker sites and public profiles. Using a data removal service to remove your information from these sites can make it harder for criminals to target you with job scams and other fraud. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

4) Research the company independently

Search for the company name online. Look for an official website, verified social media or job listings.

5) Avoid jobs that ask for money

Legitimate employers never require deposits for training, equipment or task access.

6) Block and report the number

You can report scam texts directly from your phone.

On iPhone:

Open the message, tap the phone number at the top of the screen, scroll down and select Block Contact. You can also tap Report Spam under the message. If the option appears, then click Delete and Report Spam, which sends the report to Apple and deletes the message.

On Samsung Galaxy phones:

Steps may vary slightly depending on your Samsung model and software version.

Open the Messages app and select the conversation. Tap the three-dot menu in the upper right corner, then tap Block and report spam, then confirm by tapping Yes. This blocks the number and helps Samsung identify and filter future scam messages.

7) Report it to the FTC

In the United States, you can report scams at reportfraud.ftc.gov. Reports help investigators track large scam networks.

So what should Peter do next?

The safest move is simple. Peter should not reply to the message. Instead, he should block the number and report it as spam. If he has already responded, he should stop communicating immediately and avoid clicking any links or sending money. If he shared personal information such as his phone number, email address or financial details, it may also be wise to monitor his accounts closely and consider signing up for an identity theft protection service. The good news is that spotting the red flags early can prevent a much bigger problem later. See my tips and best picks on Best Identity Theft Protection at Cyberguy.com.

Kurt’s key takeaways

Scammers constantly adapt their tactics. Today, it might be a fake delivery notice. Tomorrow, it might be a high-paying remote job. The message Peter received hits many of the classic warning signs: unrealistic pay, vague job duties, urgent language and a request to reply quickly. When a stranger promises easy money through a random text message, pause for a moment. That short pause can save you a lot of trouble.

Now I am curious. If a text suddenly promised you $10,000 a month for simple online tasks, would you recognize the warning signs before replying? Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report