The general types of COVID‑19 scams are as follows:
Stealing your personal data
Scammers who ask for too much information to "fix" your insurance policies, loan or do false contact tracing, such as your username, bank account data or even the PIN code.
Fake offers of goods and services
Massive discounts from anonymous third parties on masks or access to the web entertainment providers.
Impersonation of authorities
Imitation of government organisations like Ministry of Health and Family Welfare (MoHFW) and Indian Council of Medical Research (ICMR) offering COVID‑19 information
Fraudulent medical offers
Offers of medical help such as cures, treatment, test kits, hand sanitizer or face masks that never come.
Fake requests for charitable donations
Donations should be closely reviewed and support to endorse COVID‐19 relief from non-profits organisation, civil society, hospitals or other organizations.
Google give tips to avoid and prevent COVID-19 scams
Know how scammers may reach you
Scammers and fraudsters are taking undue advantage of the increase of COVID‐19 communications by disguising their scams as genuine updates about the virus. In addition to emails, scammers may also use SMS, phone calls and fake websites to get to you. Although online scams are very common with emails, hackers may still seek to reach people via SMS, automated calls and malicious websites. Keep an eye out on both of those sites for updates.
Check trusted sources directly
Scammers also act as well-known sources of trust and authority. To get the most accurate information about COVID‐19, contact websites directly such as the Ministry of Health and Family Welfare (MoHFW), WHO.
Be cautious of requests for personal or financial information, pause and evaluate before sharing
When you get an unsolicited information letter, take some additional time to analyze the message. Scammers will also ask you to share more information with them than is required, such as login numbers, bank details and addresses. They also can seek payment via bank transfer or virtual currency.
Donate directly through non-profit organizations
Scammers and fraudsters take advantage of sympathy for collecting funds for humanitarian activities at COVID‐19, or impersonating non-profit organizations. To make your money more secure, you should donate directly from their website to a non-profit group or organisation rather than clicking a link sent to you.
Double check links and email addresses before clicking
Fake links also resemble existing pages by inserting additional words or letters. If it says something like "click here," hover over the link or press the text for a long time to search the URL for errors. Misspelled words or random letters and numbers can also suggest fraud in the URL or email address.
Search to see if it's been reported
If somebody has sent you a fraudulent message, it’s likely they’ve sent it to other people as well. Copy and paste the email address, phone number, or most suspicious portion of the message into a search engine to check if it’s been report by others.
If anyone has sent you a fake letter, it is possible that they have also sent it to others. Copy and paste the email address , telephone number, or most doubtful section of the post into a search engine to test if others have reported it.
Add an extra layer of security to your account
For extra security defense, apply two-factor authentication to your accounts — also known as 2-step verification. It adds another authentication measure by allowing two measures to obtain access to your account: for example, something you know (your password) and something you have physically on hand (such as a phone or a security key).
Apart from the advice that Google offers, we 'd like to say that if you get a fake message and you're convinced it's a cybercrime attempt, make sure you tell everyone about it and they'll be aware of it as well. Also, if you see something suspicious you can report it to https://cybercrime.gov.in/
Image -1 Dr. Karen DeSalvo, Chief Health Officer, Google
Image-2 Mark Risher, Senior Director for Account Security, Identity, and Abuse, Google
All Images Courtesy – Google