www.wyocan.org
www.cyberwyoming.org
307-223-1265, PO Box 2332, Laramie, WY 82073
Patreon Invitation "Invoice" Scams:
A Laramie citizen reported receiving an unsolicited email from Patreon with the official-looking sender address no-reply@info[dot]patreon. The email had an incredibly long and suspicious subject line: "You've been invited to join $397.98 will be charged for your McAfee® Antivirus Renew Your Subscription Via Bank. Call +1 (843) 446-8838 if unauthorized...'s team on Patreon". The message body claimed that an "account" named after this unauthorized McAfee charge had invited the recipient to join their Patreon team. It prompted the reader to click a link to "accept the invitation" and even provided a phone number to call if the charge was unauthorized. CyberWyoming Note: This is a clever variation of a "billing" or "invoice" scam. Instead of hacking an account, scammers set up a free account on a legitimate platform (like Patreon) and name that account a frightening message. When the platform sends out automated "join my team" notifications to victims, the platform's official email is used to bypass spam filters. This tricks the recipient into calling a fraudulent helpline to dispute the fake charge, where scammers will try to steal bank details or install remote access software. If you receive a notification about a charge through an unrelated app or platform, never call the number provided in the message, instead, check your bank accounts independently.
Deceptive SNAP Benefit Offers:
A suspicious email from penniestosave[dot]com was reported with the subject line, "Unlock Free Groceries: How SNAP Can Help You Today!". The email urged readers to click a link to "See If You Qualify" for free groceries through SNAP (Supplemental Nutrition Assistance Program) benefits, alongside links to other financial advice regarding debt and savings. The bottom of the email contained standard disclaimer text suggesting that these links could lead to third-party advertisements. CyberWyoming Note: While some newsletters share general financial tips, scammers often use the promise of "free groceries" or government benefits like SNAP as bait to harvest personal and financial information. Clicking these links can lead to phishing sites designed to steal your Social Security number, income details, and bank routing numbers, or redirect you to aggressive marketing spam. Always bypass email links and apply for or check eligibility for government assistance programs directly through official state portal websites (usually ending in .gov).
Beware of "Ego Bait" Phishing:
A citizen reported an unusual email with the subject line, “AIRTIME OPPORTUNITY + INFLUENCER - ROKU & AMAZON FIRE TV + I HEART RADIO,” offering an exclusive streaming interview alongside A-list celebrities. The message was packed with references to trusted brands (NBC, FOX, MSN), creating an “authority overload” designed to lower the recipient’s defenses. CyberWyoming Note: While this specific email was a legitimate “pay-to-play” marketing offer, the same language and tactics are commonly used in Business Email Compromise (BEC) scams. Attackers often bypass automated security filters with clean, text-only emails, appeal to a victim’s ego through flattering opportunities, and then introduce fraudulent invoices or other scams once trust has been established. If an unsolicited opportunity sounds too flattering to be true, independently verify the source before replying.
Venezuela Earthquake Scam Domains:
Following Venezuela’s June 2026 earthquake, researchers identified 212 newly registered domains referencing the disaster and warned that some could be used for donation scams, fake missing-person pages, or fraudulent aid campaigns. While many sites may belong to legitimate responders, the sudden wave of registrations creates opportunities for criminals to exploit public urgency and sympathy. Experts advise donors to verify relief organizations through official channels, avoid unverified crypto-only appeals, and be cautious about sharing personal information through newly created disaster-related websites.
– Brought to you by HackRead & CISA Region 8
hackread.com/venezuela-earthquake-domains-donation-scam-warnings/
AARP Alert - Sweepstakes and Prize Scams:
Reports of sweepstakes and contest fraud are surging as criminals exploit people's excitement over potential financial windfalls or luxury vacations. This type of scam relies on emotional triggers to manipulate victims into paying upfront processing fees, taxes, or disclosing confidential financial and account details. AARP emphasizes that no legitimate sweepstakes or contest will ever demand advance payments or ask for sensitive data like Social Security numbers. To stay safe, individuals are urged to take an "active pause" when receiving unexpected high-stakes offers to critically analyze the scenario and search the contest or company name online with terms like “review,” “complaint,” or “scam” to see what others are reporting before responding.
– Brought to you by AARP Fraud Network
aarp.info/fwnPrizeScams26
Interested in cybersecurity business training?
The Made Safe™ Cybersecurity Training Program is a one-on-one program designed specifically for micro-businesses to reduce cyber risk and relieve anxiety around cybersecurity. Thanks to CyberWyoming’s members and sponsors, scholarships are available for Wyoming companies. Learn more at cyberwyoming.org/cyber-training/ or email info@cyberwyoming.org.
MS-ISAC and CISA Patch Now Alert:
The Multi-State Information Sharing and Analysis Center (MS-ISAC) or the Cybersecurity & Infrastructure Security Agency (CISA) has published a patch now (update your software) alert for Microsoft products, Adobe products, and Google Chrome. If you use any of these products, make sure the software (or firmware) is updated.
Data Breaches in the News:
Accenture, United HealthCare Services, Premium Select Sires, Frontier Airlines, Exact Sciences, First National Holdings LLC, Inter-Con Security Systems, Inc., TriWest Healthcare Alliance, and Estée Lauder. Note: If you have an account with these companies, be sure to change your password and consider placing a credit freeze on your accounts through the three credit reporting agencies: TransUnion, Experian, and Equifax.
Please report scams you may experience to phishing@cyberwyoming.org to alert your friends and neighbors.
Other ways to report a scam:
- Better Business Bureau Scam Tracker: bbb.org/scamtracker/us/reportscam
- Wyoming Attorney General’s Office, Consumer Protection
- File a complaint with the Federal Trade Commission at reportfraud.ftc.gov
- Get steps to help at www.IdentityTheft.gov
- Report your scam to the FBI at www.ic3.gov/complaint
- Reported unwanted calls to the Federal Trade Commission’s Do Not Call Registration. Online at donotcall.gov/report.html or call 1-888-382-1222, option 3
- Office of the Inspector General: oig.ssa.gov
- If you believe someone is using your Social Security number, contact the Social Security Administration’s (SSA) fraud hotline at 1-800-269-0271.
- AARP Fraud Watch Network (any age welcome) Helpline 877-908-3360
- IRS: report email scams impersonating the IRS to phishing@irs.gov
- Call the Wyoming Senior Medicare Patrol (SMP) for assistance with potential Medicare fraud, abuse, or errors at 1 800 856-4398
- Victim Support: The AARP Fraud Watch Network and Volunteers of America (VOA) created a new, free program to provide emotional support for people impacted by a scam or fraud, called ReST. Visit www.aarp.org/fraudsupport to learn more about the free program and register
