BE AWARE — Issue #001 (the first real one)
Welcome to the first real issue of the Be Aware Digest. No samples, no placeholders — three things worth knowing this week.
1. The CAPTCHA that hacks you
There's a new phishing trick going around: a pop-up that looks exactly like one of those "prove you're human" CAPTCHA checks. Except instead of clicking traffic lights, it tells you to press Windows + R, then Ctrl + V, then Enter — "for security verification."
Do that and you've just pasted and run hidden malware on your own computer. From there, scammers can grab your email logins, banking credentials, whatever they can reach.
The rule is simple: a real CAPTCHA never asks you to type commands or press key combos. If a "verification" wants you to run something, close the tab. If something already downloaded, disconnect from the internet, run a security scan, and change your passwords from a different device.
(Source: FTC consumer alert, June 2026)
2. "Unpaid toll" texts just cost America $3.5 billion
Imposter scams were the #1 fraud complaint to the FTC for the ninth year straight — over a million reports, $3.5 billion lost in 2025. The fastest-growing flavor: texts about unpaid tolls, spoofing real names like E-ZPass, SunPass, FasTrak, or TxTag, threatening late fees or a suspended registration if you don't pay right now.
Toll agencies don't text you out of the blue demanding payment. Got one? Don't click. Look up your state's toll agency yourself — a number you already trust — and check there.
(Source: FTC consumer alert, May 2026)
3. The $10,000 loan you never applied for
"You've been preapproved for a $10,000 loan — reply YES to claim." You didn't apply for anything. That's the point.
Scammers blast these texts hoping the "process already in motion" feeling makes you reply first and think later. Reply and you're handing over your Social Security or bank details for "the last step" — straight into identity theft.
The move: don't reply (not even "STOP" — any reply confirms your number is live), don't click, delete it. Your phone's "report junk" option, or forwarding the text to 7726 (SPAM), helps kill the campaign. Already gave info away? IdentityTheft.gov walks you through recovery step by step.
(Source: FTC, January 2026)
4. The phone call from someone you love (who isn't them)
Your phone rings. It's your kid's voice — panicked, saying they've been in an accident and need money sent right now. It sounds exactly like them. It isn't.
Scammers only need a short audio clip of someone's voice — pulled from a video or post online — and AI voice-cloning does the rest. Then they call the family with a fake "emergency," counting on panic to override judgment.
Two defenses beat it every time:
- A family code word. Pick one now, with your people — something no scammer could guess. Real emergency? They say the word.
- Hang up, call back. Don't stay on the line, don't send anything. Call your loved one directly on the number you already have. If it's real, they'll pick up.
Voice alone is no longer proof of anything. The code word is.
(Source: FTC consumer alert on AI-enhanced family emergency scams, August 2026)
That's the first real issue. Three scams, zero jargon. Forward it to someone who clicks first and asks questions later — they'll thank you.
Be aware. — ERAWAEB
P.S. Got a scam text or a sketchy email? Hit reply and send it my way. The best ones make future issues.