TSA PreCheck Scams

By
June Adams
December 20, 2021
Share on:

TSA PreCheck Scams

 

TSA PreCheck is garnering a lot of interest, from both travelers and scammers alike. In addition to pocketing your renewal/application fee, these scammers take your personal information to sell on the dark web or create false identities that can be used illegally. TSA PreCheck scam emails are quite sophisticated, lacking many of the typical red flags such as misspellings, grammatical errors, and slightly-off-looking versions of TSA logos. We recommend that you continue to check the email address and web address of the sender, as well as how they’re asking for payment.

Always verify that the TSA PreCheck web and email address ends in ‘.gov’ – not ‘.com’, ‘.org’ or anything else. If they don’t, these are not official TSA PreCheck communications and you should not provide personal information or payment information. Additionally, don’t purchase or renew a TSA PreCheck membership by clicking on a link you were sent via an email. Instead, go directly to the TSA or Homeland Security website.

The other major red flag comes when it’s time to pay for your renewal or application fees. While there are multiple ways to make a payment for government services, scammers typically only give you the option of using PayPal. If you get an email and suspect it’s a scam, or end up clicking on a bad link yourself, TSA says to do the following:

  1. Report the fraud to your local Police Department.
  2. File a report with the Federal Trade Commission website.
  3. Contact your credit card company or bank and let them know about any fraudulent charges.

In the event that your credit card information ended up in the wrong hands, you will need to work through your bank or credit card company. TSA specifically states on its website that it “will not issue a reimbursement to applicants who attempt to enroll in TSA pre-check through a fraudulent website.”

You may also like:

By Trilogy Financial
June 7, 2024

CryptoChameleon is a phishing-as-a-service kit that makes it easier than ever for cybercriminals to create convincing phishing campaigns. Criminals often use it to impersonate reputable companies to steal passwords, account information, and other sensitive data.

 

A recent scam using CryptoChameleon targets LastPass, a popular password manager. Scammers pretend to be from LastPass, starting with seemingly authentic support calls. They later send follow-up emails with links to fake login pages, designed to look like legitimate LastPass sites. Once victims enter their master passwords on these fraudulent pages, scammers can access their password vaults and potentially lock them out of their accounts.

 

Reputable companies will never ask for your master passwords through phone calls, emails, or text messages. To protect yourself from these scams, remember to:

 

  • Hang up immediately if you receive a suspicious call claiming to be from LastPass or another reputable company.
  • Do not press any options in automated messages or clicking on links in emails from unfamiliar sources.
  • Report suspicious activity to the reputable company, including screenshots of suspect text messages and forwarded emails.
By Trilogy Financial
January 15, 2020

Get Started on Your Financial Life Plan Today