Imagine getting an email saying your streaming service subscription is about to renew. For hundreds of dollars, no less.
There’s no link to click, only a phone number to call if you want to cancel. It seems urgent and suspicious enough to grab your attention.
That’s the setup for a callback scam.
It's a growing tactic cybercriminals use to trick people into calling them. Instead of clicking on a malicious link, it's a number. It’s a clever form of phishing that gets around many email filters. It relies on you making the first move.
How the Scam Works
- You receive an email that looks like a receipt, invoice, or subscription notice.
- It urges you to call a phone number to cancel or dispute the charge.
- On the other end of the line is a scammer posing as a helpful representative.
- They may ask you to share personal information or log in to your accounts. They may want to install software that gives them control of your device.
These scams work by creating a sense of urgency. They sound just believable enough to make you act quickly.
How to Stay Safe
You can protect yourself—and others—by following these simple steps:
- Don’t call numbers from suspicious emails. If unsure about a charge, go directly to the company’s official website or use a verified number.
- Never allow remote access to your device unless you initiated the request with a trusted service.
- Pause before you act. Scammers count on catching you off guard. When something feels off, take a moment to verify it first.
You're Not Alone—We've Got Your Back
Have questions about a suspicious email? Submit it to information.security@yale.edu and our team will investigate and respond to you directly.
We know it’s easy to get caught off guard—especially when you're juggling a million things. But with a little extra caution, you can steer clear of these scams. And by sharing these tips, you can help protect the people in your life, too.
Together, we can keep our Yale community safer.
Want more cybersecurity tips?
- Listen to Identity, Access, and You: Leveling Up Your Cybersecurity Game at Yale and at Home. Learn how to strengthen your digital identity with smart password habits and more. The new episode of the Bee Cyber Fit podcast has you covered.
- Ready to get in the game? Join us for a cybersecurity trivia challenge on Thursday, May 22. We’ll throw you some curveballs to help you build your cyber know-how. Register now!
