Beware of a call regarding Google business listing updates…

hackedmouseWe are always alerting our clients about security. A recent case, however, shook us from the ‘theoretical’ to an adrenaline-inducing very ‘real’ understanding of the threat.  A client received a phone call stating Google needed to verify a recently added business listing.  The caller and call appeared legitimate since the business was recently listed and it was not surprising given the steps required to get the business listed on Google.

So the business owner almost provided confidential business information, such as EIN and bank account numbers, which could have led to identity theft or any number of types of fraud.  But one key fact that made all the difference was that the client had been instructed to refer all such inquiries to us; I immediately interrogated the caller as to their identity.  They responded that they were an ‘authorized Google representative’, but when I requested clarification and verification from Google, they immediately hung up.

Our findings: Internet criminals are sophisticated; they know exactly where businesses are their weakest and exploit information such as new Google listings in phishing schemes where they induce a company to give up critical information such as credit card and EIN and bank account numbers.  Adding that to other information they may already have from bank or retailer security breaches and they can do a lot of damage; opening accounts, getting credit in the company’s name, or even filing to take ownership of a company.

ALERT: PLEASE CALL US when you receive a phone call and they wanted your business information to update your Google listings. Let them know you need to get your advisor on the phone. When they insist to speak with the business owner only, simply ask them to hold on. A legit business would not mind if you have your advisor on the call because they want to protect your interest while working with you. A criminal one does not want to loose the opportunity to lure you to release your information. Contact us when this happens and you may just have saved your company.