Beware of the 'Your Identity Has Been Stolen!' Pop-Up Scam
Our researchers uncovered the "Your Identity Has Been Stolen!" scam while looking into suspicious websites. This type of scam falsely asserts that a user's computer is infected and their identity has been stolen in order to promote untrustworthy or harmful software or bogus security services.
This scam was created to look like an antivirus application. When a visitor arrives on the page, they are first greeted with a fake interface, quickly replaced by a different pop-up that scans the device and lists multiple threats. These include spyware, trojan, and adware as well as an accusation that the user's identity has been stolen. The scam then recommends the visitor to protect themselves and their computer.
It is essential to note that all of these claims are false and in no way related to the real antivirus product being spoofed. Additionally, no website can detect or diagnose issues on a visitor's device, so any site making such claims is fraudulent.
In many cases, this type of virus scam is used to promote fake anti-virus tools, adware, browser hijackers, and potentially unwanted programs (PUAs). In some instances, it may even spread malware, such as trojans, ransomware, or cryptominers.
Scammers may also use this deceptive content to promote legitimate products and services in order to make an illegitimate profit.
Why Should You Never Trust Scary Warnings You See on Websites?
One of the biggest red flags to look out for on websites is scary warnings. They are usually written in bold, all-caps, with exclamation marks and can make you feel like you're in danger if you don't take action. In many cases, these warnings are simply meant to shock or scare visitors into taking a certain course of action. Unfortunately, they are often used as a way to manipulate users into paying for something they don't need, or click on something they don't want to.
When you come across a scary warning, the best thing to do is take a step back and assess the situation. Ask yourself if there is any real danger present, or if the warning might be nothing more than an attempt to get you to click on a link or purchase something.
