Understanding Impersonation Scams: How to Stay Safe

Image of a scammer posing as senior executive sending an email to a colleague

18 Oct 2024

What are Impersonation Scams?

Impersonation scams are a type of social engineering attack where malicious actors imitate trusted contacts or organisations to deceive individuals into acting without using standard practices or platforms.

These scams can range from pretending to be family members or friends in need of urgent help, to impersonating senior level managers, IT Services, HR, or even external authorities like the Gardaí.

By using familiar names or organisations, scammers attempt to create a sense of urgency, pressuring victims to make quick decisions or disclose sensitive information without due diligence.

Common Targets of Impersonation Scams

Family and Friends: Scammers may pose as loved ones, claiming they are in trouble and need immediate financial assistance.

Senior Managers: These scams often involve requests for urgent tasks, such as transferring funds or sharing sensitive company information, pretending to be from someone in a position of authority.

Business Services (IT or HR): Attackers may imitate internal services like IT Services or HR, asking for login credentials, personal information, or requesting urgent changes.

Outside organisations (e.g., Gardaí): Scammers may impersonate law enforcement or government agencies, often creating fear of legal consequences to manipulate victims into compliance.

sample email from an impersonation scam

How to Protect Yourself from Impersonation Scams

To avoid falling victim to impersonation scams, follow these essential steps:

Check Links and Contact Details Carefully

Scammers often send emails or messages that appear legitimate, but if you hover over the links or check the sender's details, you may notice discrepancies. Always verify that any links lead to legitimate websites and check that the sender's email or phone number matches the official contact information of the organisation or person they claim to be.
Stop and Think Before Acting

If something feels off, or if the message creates a sense of urgency, stop and take a moment to assess the situation. Scammers rely on pushing you to act quickly without thinking. Take your time to process the request and ensure it makes sense before taking any action.
Be Cautious When Transferring Data

Never share personal or sensitive information, especially through unverified channels. If someone requests data or access to accounts unexpectedly, make sure to confirm their identity using a trusted method before proceeding.
Use Trusted Platforms for Verification

When in doubt, use established communication channels to verify the request. For instance, if you receive a suspicious message from a supervisor or a service provider, reach out through a phone call or official company email to confirm whether the request is genuine. Avoid responding directly to suspicious emails or messages.
When in Doubt, Trust Your Instincts

If something feels wrong, it's better to be cautious. Verify the identity of the person or organisation making the request, and don't be afraid to question the legitimacy of the message.

By staying vigilant and following these steps, you can avoid the pitfalls of impersonation scams and protect yourself and your organisation from potential harm.