The Marriott Pillows Scam E-mail

I just checked my e-mail this morning and received an interesting message that is obviously a scam. The subject line says, "Welcome to Our Marriot Luxury Pillows Survey Zone." The first thing I noticed is that they spelled Marriott wrong as there are 2-T's at the end of the name, not 1. My curiosity drove me to figure out what the scam is.

I am not foolish enough to click on the link in the message and so I typed the subject of it into my usual Internet search engine and came across a nice Reddit post explaining the scam. Unfortunately it is a world-wide scam as people from the UK posted about it as well as fellow Americans. It seems you fill out the survey and then to get the pillows you have to pay a $7 or $8 shipping fee. Later they go back and try to charge you around $60. If you use a debit card, you have to rely on your bank to catch the fraud as credit card companies provide protection from such nefarious individuals.

I am a big fan of Marriott hotels having recently stayed at one during a trip to Orlando with 2 of my grand kids. I hate to see a good company like that associated with such a scam even though they can't control bad actors on the Internet. Hopefully others will see my post and not fall for such an obvious fraud. I also can't believe the thieves are only trying to get $60. That seems like a lot of work on their part for very little reward. I wonder if they think that is the threshold where people don't pursue recourse. Whatever their thoughts, don't click on the link and stay safe online.

Digital Privacy

This afternoon I checked my personal e-mail and received a message claiming to be from my company. While I work for Sony, my personal e-mail is through a domain that I own and it looks like another company. The message claimed to be from the admin account and said that I had 3 undelivered e-mails because they were SPAM. My e-mail account has a different filtering mechanism and I would never get an e-mail from the "admin". I had a link I could have clicked but I'm sure the results would have been nefarious. This is what is known as a Phishing attack. Paying attention helps ensure I don't inadvertently install a virus or malware on my computer. This has the potential of releasing all sorts of personal information to bad actors that can steal my identity, drain my bank account, and ruin my credit.

Your digital privacy is very important and you should do everything you can to protect it. Being aware of potential phishing attacks is only one step of many. I also limit the information I share with various websites where I have login accounts. I never provide my social security number nor do I provide my birthday. There are many websites that require a birthday simply to verify age. I use the same fictitious date for such occasions and avoid providing my real birthday if I can help it.

Another trick to maintaining your digital privacy is to limit your payment information. There are a lot of websites that want to make purchases as simple as possible and so they offer to store your credit card information. Then you just have to hit the "purchase" button and it automatically bills your credit card. I actually have my primary credit card memorized and re-enter the information every time I make a purchase from infrequent accounts. It only slows me down a few seconds but gives me piece of mind every time I receive an e-mail about websites being hacked and payment information stolen.

One final word of caution is to severely limit who has access to your bank account information. This includes debit cards. Once someone gets into your bank account, it is very difficult to get your money back once it is gone. By using credit cards for all payments, you have a level of protection that ensures you don't lose any money. You just need to notify your credit card company about fraudulent transactions and they will credit your account while they investigate. You may have to provide additional documentation but most credit card companies will catch the invalid purchases before you do.

Unfortunately there are some thieves out there and the ubiquity of the Internet makes it easy for a small number of bad guys to inflict harm on a large number of good ones. Taking your digital privacy seriously will help reduce damages. I just wish there was a sure-fire way to keep yourself 100% secure.