BBB warns of email scams

The Better Business Bureau is warning consumers to be aware of phishing scam emails posing as legitimate online transactions that they may receive during the holiday shopping season.

Criminals are sending emails that appear to look like legitimate confirmation emails, but in fact contain an attachment that can harvest personal information from your computer.

"The scammers target individuals posing as major online sellers like Amazon, eBay and airlines," says Steve J. Bernas, president and CEO of the Better Business Bureau serving Chicago and Northern Illinois. "Because consumers are anxious to receive confirmation of their purchases, they more easily fall into the trap of opening phishing and other malicious emails."

As an example, a phishing emails have a subject of "Your order on Amazon.com" and return address of "amazon.com" and use actual Amazon graphics making them appear real. But the email also has an attachment that when opened, installs a Trojan virus that creates a process that will harvest banking information, email logins and social media accounts.

Bernas also suggests employers warn their employees not to open attachments from major retail sites.

"Trying to stay ahead of their Christmas shopping employees try to get some purchases done during the work day," Bernas said. "However, doing so can put your company at risk for a security breach."

The BBB offers some tips to avoid becoming a victim:

•If you are expecting a confirmation receipt, log into your account and check for confirmation there.

•Be cautious of emails that contain attached files.

•Don't respond to unsolicited emails.

•Don't click on links in unsolicited emails.

•Avoid filling out forms contained in email messages asking for personal information.

•Make sure that all links in an email match.

•If you are requested to act quickly or are told that there is an emergency it may be a scam.

•Install anti-virus software and keep it up to date.

•Install a personal firewall and keep it up to date.

If you might have been tricked by a phishing email:

•File a report with the Federal Trade Commission at www.ftc.gov/complaint.

•Visit the FTC's Identity Theft website. Victims of phishing could become victims of identity theft; there are steps you can take to minimize your risk.

•Forward phishing emails to spam@uce.gov - and to the company, bank, or organization impersonated in the email.

For more information, visit www.bbb.org.