419 fraud see Nigerian Prince scheme

account identity fraud 103

advance-fee fraud 45–66, 83

affinity fraud 81

AI (artificial intelligence) 54, 64, 88, 134

Ashley Madison data breach 147, 149

backups 118, 125, 126, 136, 137

BeenVerified 34

Bitcoin 5, 74, 60, 82, 83, 99, 101, 121, 123, 127, 128, 129, 131, 138, 145, 150

blackmail 36, 127, 144, 150

bogus job offers 58–9

business email compromise (BEC) 10, 26–31, 37, 39

catfishing 34

children 151–2

cloned websites 57, 75–6

consensus 15, 81

content in context 63

COVID-19 98, 121

credit card fraud 101, 102

criminal identity fraud 102

cryptocurrency 65, 74, 79, 81, 82, 83, 84, 86

Cryptolocker 127, 128

cybercrime 1, 10, 31, 49, 66, 85, 87, 99, 156, 158

definition 3

history of 4–5

impact of 5

impersonation 10–41

legalities of 6–8

personal impact of 38, 59–64, 87, 110–11

cyber-dependent crime 3

cyber-enabled crime 3

cyber extortion 3, 7, 118–38, 143, 145, 155, 158

cyber sextortion 143–56

dark web, the 5, 99, 100, 101, 102, 103, 104, 111, 112, 114, 126, 130, 131, 146

data breaches 5, 93, 94, 98–102, 103, 111, 112, 114, 126, 135, 146, 147, 149, 158

deepfake 38, 39, 154

distributed denial-of-service (DDoS) 122–3, 130, 131, 135, 136, 137, 138

double extortion 126

drive-by attack 124

due diligence 45, 46, 51, 72, 89

email attacks 51–5, 145–7

email ransom campaigns 121

email spoofing 28

emotional decision making 49–51, 158

employee payroll redirection 33

extortion 3, 7, 35, 90, 118–38, 143, 145, 147, 155, 158

Facebook 1, 25, 27, 29, 51, 56, 64, 78–80, 84, 104, 108–9, 124, 148, 152, 153

fake celebrity endorsements 79–81

fake prizes 56

fake websites 56–8, 74–6, 77, 79, 85–6

fraud

419 fraud see Nigerian Prince scheme

account identity 103

advance-fee 45–66, 83

affinity 81

credit card 101, 102

criminal identity 102

investment 69–90

invoice redirection 31–2

lender loan 58

Letters of Jerusalem 47–8, 53

medical identity 102–3

romance 34–7, 40

Spanish Prisoner 48

synthetic identity 103–4, 113

tax identity 103

tech support 33

fraudulent advertisements 77–9

gaming console attacks 150–1

General Data Protection Regulation (GDPR) 101

Google 1, 12, 25, 27, 28, 57, 64, 77, 78, 112, 121, 135, 137, 149, 150

government impersonation 33–4

identity theft 55, 75, 93–114

identity theft settlement 55

impersonation 10–41

Internet of Things (IoT) 133, 134, 135

investment fraud 69–90

invoice redirection fraud 31–2

lender loan fraud 58

lessons from history

advance-fee fraud 47–9

extortion 119–21

identity theft 94–7

impersonation fraud 11–14

investment fraud 70–3

sextortion 144–5

Letters of Jerusalem fraud 47–8, 53

LinkedIn attacks 148–9

‘love bombing’ 36

machine learning 39

malware 1, 18, 32, 105, 107, 112, 123, 124, 132, 134, 136, 137, 145, 146, 149–50

medical identity fraud 102–3

message attacks 56

methods 2, 3, 10, 66, 88, 112, 138, 158

advance-fee attack 49–59

extortion 121–32

identity theft 97–110

impersonation fraud 25–37

online investment fraud 69, 74–82

persuasion 15, 18, 50, 83, 87, 112, 128

psychological 45, 129, 132

sextortion 145–52, 155

social engineering 41

mobile apps 104–5

mobile malware attacks 149–50

money mules 36–7

National Cyber Security Centre (NCSC) 79, 80, 98, 148

Nigerian Prince scheme 49, 52–5

‘No More Ransom’ 132

obedience 16

Omegle 148

online advance-fee fraud 45–66, 83

online investment fraud 69–90

online smear campaigns 121–2, 135

overconfidence 86–7

passwords 18, 99, 104, 105, 111, 112, 113, 132, 136, 146, 149

PC Cyborg attack 126, 127

personal data 5, 93, 94, 97, 100, 104

personal impact

advance-fee fraud 59–64

cyber extortion 132–3

identity theft 110–11

impersonation fraud 38

investment fraud 87

sextortion 152–4

personally identifiable information (PII) 97, 98, 99, 102, 103, 105, 111, 114

persuasion 14–18, 27, 28, 29, 36, 37, 41, 49–51, 63, 64, 79, 81, 83, 87, 106, 107, 128, 129, 132, 151, 158

phishing 18–26, 28, 31, 35, 51, 55, 105–7, 124, 128, 132

Ponzi schemes 81–2

pop-ups 124

‘porn scam email’ 145, 146

preventative measures

advance-fee fraud 65

extortion 135–6

identity theft 112

impersonation fraud 40

online investment fraud 88–9

sextortion 154–5

principle of authority 15, 16–18

principle of liking 15, 87

principles of persuasion 15, 16

pump and dump schemes 82

pyramid schemes 81–2

quiz attacks 110

RaaS (ransomware as a service) 130–1

ransomware 4–7, 28, 118, 123–32, 133, 136, 137, 138, 158

reciprocity 15, 63, 87

removable media 125

reputation 27, 73, 85, 111, 119, 121, 123, 126, 146, 147, 148, 149, 153, 156

romance fraud 34–7, 40

scarcity 15, 87

sextortion 143–56

Shodan 135

sideloading 149, 150

SIM port hacking 97

smishing 21–4, 105–7

social engineering 10, 11, 14–25, 27, 31, 32, 39, 41, 88, 109, 145

social media 6, 158

cyber extortion 121, 125, 136, 137

cyber identity theft 105–10, 112

cyber sextortion 147, 148, 151, 153–5

impersonation cyber frauds 11, 18, 21, 25, 34, 35, 39, 41

online advance-fee threats 48, 57, 63, 66

online investment fraud 75–7

software updates 125

Spanish Prisoner fraud 48

spear phishing 21, 26

‘suckers lists’ 54, 66, 69, 70, 79, 123

sunk cost fallacy 59, 60, 61

support for victims 41, 66, 88, 89–90, 113, 136–7, 155

synthetic identity fraud 103–4, 113

tax identity fraud 103

tech support fraud 33

threatening calls/messages 122, 145–7

Truth-Default Theory (TDT) 61–2

virtual private network (VPN) 6, 112

vishing 24–5, 56, 105–7

warning signs

advance-fee fraud 65

extortion 136

identity theft 112–13

impersonation fraud 40–1

online investment fraud 89

sextortion 155

webcam attacks 135, 147–8, 154

WhatsApp 26, 29, 33, 35, 56, 124, 147, 158

Zoom 27, 147