Uncle Sam compensates you for data leaks (yeah, right)

[harlan4096]

Under the pretext of compensation for data leaks, fraudsters are selling “temporary U.S. social security numbers.”

Data leaks of all sorts regularly crop up in the news, and recently so have fines, some potentially reaching into the billions, slapped on the companies responsible. If companies have to pay for data leaks, surely some of that money goes to the victims, right?

Surprise from the US Trading Commission

Recently, a curious site caught our eye. Seemingly owned by a certain Personal Data Protection Fund, the website’s main page states that the fund was created by the “US Trading Commission.”

At first glance, the site looks reasonably sound, with a restrained design showing a hefty sum on the right. A large banner at the top of the page announces that the fund awards compensation for leaks of personal data — for which citizens of any country in the world can apply.

For those interested, the site offers to check whether your data has ever leaked. For this, you need to specify your surname, first name, phone number, and social media accounts. Above the input form is a warning that entering other people’s data will result in a severe penalty.

However, it turns out that the website accepts any information, even complete gobbledegook. For example, we inquired about the personal data of a citizen named fghfgh fghfgh. The site pondered for a while, seemingly connecting to a database of information about leaks…

…and lo and behold, found that our fictional character with an unpronounceable name had indeed had their data leaked. Moreover, it turned out that someone had already used their photos, videos, and contact information, and so fghfgh was entitled to compensation in excess of $2,500!

Buy a temporary SSN

One might think it would suffice to give a bank card number and wait for the payment to be credited. Not quite. The charitable fund cannot send money without knowing your SSN (social security number), a nine-digit number issued to U.S. citizens as well as permanent and temporary working residents.

This unique number is used for almost everything in the U.S., including paying taxes, applying for a job, renting a home, and so on.

But if you don’t have one, never fear: You can simply check the box next to the line “I’am don’t have SSN” (English grammar doesn’t seem to be the scammers’ strong point).

To get around the problem of not having an SSN, the site offers to sell you a temporary one! In comparison with the amount of compensation dangling in front of your eyes, the $9 price tag is a trifle.

f you do try to complete the transfer without buying an SSN, the site will return an error and demand a temporary number. And if by some chance you happen to specify a valid SSN in the fraudulent form, you will still be asked to buy a temporary one.

Those who decide to purchase a temporary SSN get redirected to a payment form. If you happen to do it from a Russian IP address, this payment form appears in Russian, and the purchase price is specified in rubles. This is strange. Why would a U.S. government agency require payment in a foreign currency?

Residents of other countries are likely to be redirected to a less suspicious English-language form asking for payment in dollars.
...

Continue Reading