FREELANCERS ALERT! New Scam Impersonates Online Job Platform Support: Protect Your Data and Money

The world of freelance work and online money-making platforms offer great opportunities, but they also expose users to new types of cyber threats. Recently, a dangerous scam has been detected that impersonates the technical support team of well-known platforms, such as Upwork, with the aim of stealing users' personal and financial information.

The scam, described in detail by affected users, begins with the receipt of a message purporting to come from the platform's official support channel (e.g., "Upwork Support"). This fraudulent message typically claims "recent privacy policy adjustments" and, with an urgent tone, requires the user to "authenticate their account quickly," usually within a 24-hour deadline. To further pressure the user, the message threatens to restrict the user's account and render all job postings inactive if the supposed verification is not completed.

The scam includes a link that, while seemingly legitimate at first glance (using https protocols and domain names that mimic official ones), directs to a fake website. This cloned page asks the user to enter sensitive information, such as their payment method details registered on the platform, including the cardholder's name, card number, expiration date, and security code.

This tactic is particularly dangerous because it exploits the trust users place in the internal communications of the platforms they use to work and receive payments. The combination of a seemingly official sender, the imposed urgency, and the threat of losing access to their source of income can lead victims to act impulsively, without properly verifying the authenticity of the request.

In the face of these types of threats, it is crucial to be alert and follow security recommendations:

• Be Wary of Urgency: Requests for sensitive information with extremely short deadlines and threats of account suspension are a classic red flag.
• Verify the Source Through Independent Channels: If you receive a suspicious message, even within a platform, don't click on any links or provide any information. Instead, contact the platform's official customer service directly through their website or app, using contact channels you already know and trust. Ask if the communication is legitimate.
• Examine Links Carefully: Even if a link appears secure (https), carefully review the entire URL. Scammers often use domains that are very similar to official ones, but with slight variations.
• Never Share Full Passwords or Security Codes via Message: Legitimate platforms rarely request this information directly through a support chat.
• Beware of Requested Payment Methods: As the Social Security Administration (SSA) warns in a broader context of scams, fraudsters often insist on payments via gift cards, prepaid debit cards, direct wire transfers to individuals, cryptocurrency, or cash by mail, as these methods are difficult to trace. If any "verification" asks you to make a payment this way, it's a scam.
• Keep Calm and Report: If you suspect attempted fraud, report it immediately to the platform and, if you have been a victim, to the appropriate authorities and your bank.

The sophistication of these scams, which adapt to new work technologies and emerging payment methods, creates a risky ecosystem where ongoing user education is the primary line of defense. As more people seek opportunities to make money online, the attack surface for cybercriminals expands. It's critical not only to be aware of specific scams but also to develop a healthy skepticism and a set of good security practices for all online interactions involving personal or financial information.

Follow us on our X La Verdad Noticias profile and stay up to date with the most important news of the day.