A close call with a Facebook scam that tried to steal credit card info

Have you ever received a suspicious email or pop-up that made your heart race, even for a second? You're not alone. Online scams are getting more convincing every day, and even the most tech-savvy among us can find ourselves just one click away from trouble.

Phishing is one of the most common ways scammers can access your personal information. Many people fall victim to it every day, which is why this email we received was not surprising.

Just ask "Pamela," who wrote to us: "I thought I couldn't be scammed, but I almost was."

Her story is a reminder that anyone can fall for a well-executed scam. We'll share what happened to her below, how she caught on just in time, some tips on how to avoid being scammed on Facebook, and how to report it.

"I was working on my Facebook and it suddenly had a screen flash and voice that said the computer was locked and I needed to call a number to report the breach. I thought it was Microsoft so I called the number. The guy was good. He gave me a name and employee number and we went through some things on my computer which brought up a screen that said 'scammers were listening' and my IP was being used on the Porn Hub. I thought, how could that be? But still, I was obtuse.

"The screen listed what he said were all my credit cards that had been compromised, but only the beginning numbers: 3xxx, 4xxx, 5xxx, etc. He said in order to make a report to the FTC I needed to tell him all of the numbers. I told him I was not going to do that even though he insisted I had to for the 'report.' Then he said he would transfer me to the FTC and gave me a number in case we were disconnected. A different guy answered, gave me his name and said he was Andrew Ferguson, head of the FTC.

"I've been in politics and business for over 50 years. I looked him up while still on the phone and realized the head of the FTC wouldn't be answering a support line. When I refused to give him my information, he yelled that my IP was being used on porn sites and didn't want to stop it. I hung up.

"I have great virus software on all my devices and use two-step authentication for almost everything - but I still almost fell for it. I'm sharing this story to help others."

Pamela was fortunate. Her security measures and quick thinking saved her, but these tactics are becoming more common and more aggressive. Here's what you can do to stay safe.

Scammers often use alarming pop-up messages or automated voices claiming your device is compromised, urging you to call a number for help. As described in Pamela's experience, a pop-up claimed her computer was locked and played a voice message directing her to call what appeared to be a Microsoft support number. The scammer then impersonated both a Microsoft employee and a government official, using fake names and employee numbers, and tried to pressure her into revealing sensitive information.

If you ever receive a pop-up or voice message claiming your device is at risk, do not call the number provided or share any personal information. Instead, contact the organization directly using official contact details from their website. Legitimate companies and government agencies will never ask you to provide sensitive information or credit card numbers over the phone in response to unsolicited pop-ups or calls.

Scammers will create a false sense of urgency to make you act quickly without thinking. Take your time to verify any urgent requests, especially those involving money or personal information. Don't act on impulse.

Scammers often scour the internet for your personal information. Using a personal data removal service can help reduce the amount of your sensitive data available online, making it harder for scammers to target you with convincing attacks. While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren't cheap and neither is your privacy.

Monitor your bank accounts, credit cards, and credit reports for any unusual or unauthorized activity. Early detection is key. If you spot something suspicious, report it immediately to your financial institution and the proper authorities.

Keep in mind that scammers are constantly evolving their tactics. You must always be on guard. Do not rely too heavily on technology to protect you, since there is a psychological aspect to their methods as well. Have a skeptical mindset and trust your instincts. By sharing experiences and staying informed, we strengthen our community's defense against cybercrime.

Follow Kurt on his social channels:

Answers to the most-asked CyberGuy questions:

New from Kurt:

Copyright 2025 CyberGuy.com. All rights reserved.