ArtsAutosBooksBusinessEducationEntertainmentFamilyFashionFoodGamesGenderHealthHolidaysHomeHubPagesPersonal FinancePetsPoliticsReligionSportsTechnologyTravel

Another Phishing Modus Operandi by Scammers on UpWork

Updated on July 7, 2017
Arleen Roja profile image

I work from home as a Lead CSR and I love my job. I love sharing stories hoping it will help or motivate other people.

About UpWork

UpWork is a great platform for people that have great skill set and prefer to work from home. Signing up is free and will only ask for fee when you start earning. The fee might be high for us Freelancers but I appreciate the effort they put in to protect us from scammers and phishing activities.

My first phishing encounter

I heard about the danger of getting into an unsecured link or fake site that will look like the legit one and will ask you to Log-in in order for them to obtain your account information, so I am very cautious with the URL every time I need to enter any information.
As I was browsing for a freelance gig on UpWork, I found one that could be a great fit for my skills. Like the normal process, I bid and submitted a proposal letter and got a response back. It's a great thing when you get a response that fast, and so I responded right away. The next step from him was to click the link, and so I did.

His first instruction for the job process.
His first instruction for the job process.

The link did not work, so I informed him about it and gave him a screenshot of the error.

the error for the first URL
the error for the first URL

He then gave a new URL for me to try. I doubt it but I still gave it a try. I was routed to a page that looks exactly the same as the UpWork's log-in page the only difference is the URL. It shows unsecured and the URL is not www.upwork.com (sorry there's no screenshot and I forgot the exact URL because I closed the window right away).

I was surprised that when I got back to our conversation, it shows that the person does not have access to UpWork which I believe that he deactivated his account right after giving me a working URL. I believe he thought that I will enter my information right away (Hah!).

I am sure that the people behind this will create another Client account and will continue to fraud Freelancers. I am not assuming that the man on the photo is the man behind this fraud. I think that the name and the photo is not the real identity of the person/group behind it.

I reported the job post as SCAM/PHISHING and UpWork did the right action and they sent me an email about it.

Second URL he gave
Second URL he gave

Why did I trust the job post or the client?

I trusted the client or this job post because of the following reason:

  • Client profile shows Verified
    -
    Freelancers are looking at the client's payment if it's verified or not. If the payment is verified, Freelancers will trust that the client will pay. Clients that have their payment verified will tend to get more applicants.
  • This client has an on going project
    -
    Some Freelancers does not check their prospect client's projects. As for me, I always check current and previous projects of my prospect client for me to see the client's behaviour and/or attitude. I saw that this client has an on going project which is a fix $6 contract (see photo below).
  • Job Post seems legit and does not ask for any fee
    - When a client ask for a fee to work, I will turn it down right away. I did not suspect anything since they just wanted me to answer a set of question using the link. It's not a new process, some clients have that process too where they will ask you to answer the question on their Google form.


It shows "Payment Verified"
It shows "Payment Verified"
The on-going project of this client
The on-going project of this client

About the Freelancer

For the record, I believe that the Freelancer on their on-going job is not a fraud. It's possible that they hired the Freelancer to work on the project for a fixed $6 just to show on their profile that they are a paying client. Even if the work is done, the client could just simply ignore to cancel or end the contract so it will remain open and will show as "Job In Progress". Freelancers does not want to end the contract themselves because it will effect their Job Success score so I believe that the Freelancer just let it open.

How to avoid phishing and What to do about it?

  • How to avoid phishing?
    Always observe the URL when entering any information. Even when transacting with your online banking, you need to check the URL. It should have HTTPS, the URL that has https means secured.
  • What if you did not know that it is phishing and you entered your log-in information?
    Good thing UpWork sends email if you've opened a link that they think is fraud/phishing. You need to change your password right away. Think of an unpredictable password that will have special characters and change your security question.
  • What to do if you encounter such fraud activity?
    REPORT. Report them or flag them as scammers or phishing activity. Be a hero for other people who are working hard to earn a living. Even if you did not enter any information, it is still better to change your password and/or security question.

Frauds, scammers, hackers, they are everywhere. We need to be careful not to be a victim. I am sharing this to let you know another way on how they fraud people. Freelancers tend to trust as long as they see the payment is verified. I'm thankful that I did not fall for it but I still changed my password and security question after that incident.

For the scammers, I hope someday you will realize that you are wasting your time. I hope you still have the heart to stop this wrong doings because everybody is working hard to earn. If you want to earn money, study and learn a new skill. A skill that is legal and will not harm anyone.

© 2017 Arleen Roja

Comments

Submit a Comment

  • profile image

    andrea 

    13 months ago

    I encountered this issue before, it's a good thing that UpWork removed the phishing message that I received from the client before I know it. I just found out when UpWork sends me an email that they removed 1 invitation because they suspect it's a phishing message.

working

This website uses cookies

As a user in the EEA, your approval is needed on a few things. To provide a better website experience, hubpages.com uses cookies (and other similar technologies) and may collect, process, and share personal data. Please choose which areas of our service you consent to our doing so.

For more information on managing or withdrawing consents and how we handle data, visit our Privacy Policy at: https://hubpages.com/privacy-policy#gdpr

Show Details
Necessary
HubPages Device IDThis is used to identify particular browsers or devices when the access the service, and is used for security reasons.
LoginThis is necessary to sign in to the HubPages Service.
Google RecaptchaThis is used to prevent bots and spam. (Privacy Policy)
AkismetThis is used to detect comment spam. (Privacy Policy)
HubPages Google AnalyticsThis is used to provide data on traffic to our website, all personally identifyable data is anonymized. (Privacy Policy)
HubPages Traffic PixelThis is used to collect data on traffic to articles and other pages on our site. Unless you are signed in to a HubPages account, all personally identifiable information is anonymized.
Amazon Web ServicesThis is a cloud services platform that we used to host our service. (Privacy Policy)
CloudflareThis is a cloud CDN service that we use to efficiently deliver files required for our service to operate such as javascript, cascading style sheets, images, and videos. (Privacy Policy)
Google Hosted LibrariesJavascript software libraries such as jQuery are loaded at endpoints on the googleapis.com or gstatic.com domains, for performance and efficiency reasons. (Privacy Policy)
Features
Google Custom SearchThis is feature allows you to search the site. (Privacy Policy)
Google MapsSome articles have Google Maps embedded in them. (Privacy Policy)
Google ChartsThis is used to display charts and graphs on articles and the author center. (Privacy Policy)
Google AdSense Host APIThis service allows you to sign up for or associate a Google AdSense account with HubPages, so that you can earn money from ads on your articles. No data is shared unless you engage with this feature. (Privacy Policy)
Google YouTubeSome articles have YouTube videos embedded in them. (Privacy Policy)
VimeoSome articles have Vimeo videos embedded in them. (Privacy Policy)
PaypalThis is used for a registered author who enrolls in the HubPages Earnings program and requests to be paid via PayPal. No data is shared with Paypal unless you engage with this feature. (Privacy Policy)
Facebook LoginYou can use this to streamline signing up for, or signing in to your Hubpages account. No data is shared with Facebook unless you engage with this feature. (Privacy Policy)
MavenThis supports the Maven widget and search functionality. (Privacy Policy)
Marketing
Google AdSenseThis is an ad network. (Privacy Policy)
Google DoubleClickGoogle provides ad serving technology and runs an ad network. (Privacy Policy)
Index ExchangeThis is an ad network. (Privacy Policy)
SovrnThis is an ad network. (Privacy Policy)
Facebook AdsThis is an ad network. (Privacy Policy)
Amazon Unified Ad MarketplaceThis is an ad network. (Privacy Policy)
AppNexusThis is an ad network. (Privacy Policy)
OpenxThis is an ad network. (Privacy Policy)
Rubicon ProjectThis is an ad network. (Privacy Policy)
TripleLiftThis is an ad network. (Privacy Policy)
Say MediaWe partner with Say Media to deliver ad campaigns on our sites. (Privacy Policy)
Remarketing PixelsWe may use remarketing pixels from advertising networks such as Google AdWords, Bing Ads, and Facebook in order to advertise the HubPages Service to people that have visited our sites.
Conversion Tracking PixelsWe may use conversion tracking pixels from advertising networks such as Google AdWords, Bing Ads, and Facebook in order to identify when an advertisement has successfully resulted in the desired action, such as signing up for the HubPages Service or publishing an article on the HubPages Service.
Statistics
Author Google AnalyticsThis is used to provide traffic data and reports to the authors of articles on the HubPages Service. (Privacy Policy)
ComscoreComScore is a media measurement and analytics company providing marketing data and analytics to enterprises, media and advertising agencies, and publishers. Non-consent will result in ComScore only processing obfuscated personal data. (Privacy Policy)
Amazon Tracking PixelSome articles display amazon products as part of the Amazon Affiliate program, this pixel provides traffic statistics for those products (Privacy Policy)