Facebook Marketplace & Google Voice Scam Asking for Code Allows Scammer to Steal Identity

If you use Facebook Marketplace to buy or sell things, you need to be careful of scammers who might try to steal your identity. A TikTok user named Michel Janse (@michel.c.janse) shared her experience of being tricked by a fake buyer who asked her to send a code to prove she was real. But the code was actually a way for the scammer to take over her Google Voice number and use it to create fake accounts.

Woman Scammed with Google Voice to Steal Facebook Profile

Michel Janse explained in a TikTok video that she was selling some furniture and a woman contacted her with an offer. She checked the woman’s profile picture and thought she looked trustworthy. She preferred to sell to women because they seemed less sketchy, however, this story proves that anyone can be a scammer.

Google Voice Scam

Here's how it happened: The woman asked Janse to accept a phone call from Google Voice to verify her identity. Janse agreed and gave her number to the scammer. The scammer went on Facebook and had a code sent to Janse, asking her to tell her the code. Janse complied and gave her the code. This was a big mistake which allowed the scammer to steal her Facebook profile. Janse could sense that something was wrong.

She googled the situation and found out that this is a common scam. The scammer then used the code to claim her Google Voice number and link it to their own phone. They could then make calls and create accounts using her number, which is a form of identity theft. Janse said she was able to get her number back by sending herself another verification code on Google Voice.

Many people commented on Janse’s video and said they knew about this scam. They advised her to never send any codes and to keep communicating with the scammer on Facebook Messenger. They also suggested using a burner phone number or a different app for voice calls. Some people criticized Janse for falling for the scam, but she said she wanted to warn others and prevent them from making the same mistake.

Facebook Marketplace Scams

Facebook Marketplace can be a great place to find deals and sell your stuff, but you have to be smart and cautious when dealing with strangers online. Facebook has some guidelines on how to avoid scams and stay safe on its platform. You should always check the profiles of buyers and sellers, use secure payment methods, meet in public places, and report any suspicious activity. Don’t let scammers ruin your online shopping experience.

Never Give Out Your 2-Factor Authentication Code

Never give out your Google Voice number to strangers or provide an account PIN or 2-factor authentication Code to anyone who is trying to assist you. No technical support person needs a PIN or 2-factor authentication code to access your account.

Google Drive Phishing Scam from Rev. Dr. Karen

Fake Google Login used for Phishing 

Beware of the Google Drive phishing scam. One is particular going around is from a Rev. Dr. Karen.

What does Google Drive have to do with Rev. Dr. Karen?

The email says that it is urgent, under the name of Rev. Dr. Karen. The email says she is "serving humanity spiritually" and gives a phone number to call.

The message reads:

Hello,

Kindly click the link to view the document I uploaded for you using Google cloud drive.

{Link here}

Thank you.

The signature section of the email has a quote from Mother Teresa.

How the Google Drive Phishing Scam Works

The email appears to be a link that connects the email recipient to a Google Drive doc, but the link redirects you to a webpage that is hosted on one of Google's servers. However, it is not operated by Google. Do not be fooled by the SSL encryption that makes this phishing scam look authentic.

When the user enters their information into the page, it is then stored in the hacker's database for retrieval.

Symantec points out on their blog that Symantec users are protected against this particular phishing threat.

Protect Yourself Against Compromised Google Servers

First of all, never click on any links contained within an email. If you need to go to a website, then go there directly and log in. Never use a link contained within an email. Doing so puts your security credentials at risk for phishing scams. Don't ever open documents or files attached to an email from someone you don't know.

Google has not commented on how or why their servers are being compromised, and how hackers gain access of their servers.