The Federal Bureau of Investigation is warning that people who post their phone numbers online as a point of contact when selling goods, or for other reasons, could be exploited by Google Voice authentication scams.
The FBI’s Portland Oregon’s office said that they’ve even been getting reports from victims who posted their phone numbers in conjunction with sites about missing pets.
Fraudsters successful in authenticating a phone number can then go on set up a Google Voice account in victims’ names or hijack their Gmail accounts, both of which can be used to execute additional fraudulent schemes or to initiate phishing attacks.
See also: Combating the ‘Bad Guys’ Through Sophisticated Digital Identity Verification
To initiate the scam, cyber thieves will reach out to a listed phone number by text message or email and express an interest what’s for sale, and ask the seller for additional verification information. To prove the seller is not a bot, the scammer will request that they share an authentication code from Google.
“What [the scammer] is really doing is setting up a Google Voice account in your name using your real phone number as verification,” the FBI said. “Once set up, he can use that Google Voice account to conduct any number of scams against other victims that won’t come back directly to him.
“He can also use that code to gain access to, and take over, your Gmail account.”
Read more: The FBI On Revamping Fraud Prevention Strategies To Protect Against Digital-First Financial Crime
The FBI advises that first and foremost, people can help themselves avoid being scammed by never sharing their Google verification code with others. When someone is coordinating with buyers, sellers or pet finders, finalize dealings in person. If payments are exchanged, use only legitimate processors.
The FBI’s Internet Crime Complaint Center (IC3) has further information about sidestepping fraudsters and filing a complaint if victimized.
You may also enjoy: How Trust, Choice, Ease and Fast Approvals Fight Foul-Ups at Checkout