US-CERT Provides Advice About Identifying Online Donation Scams

In the aftermath of the tragic earthquake and tsunami in Japan, US-CERT would like to remind users to apply the same caution when e-donating to relief efforts that they would exercise when making any other online transaction.  Cyber criminals have already used email scams as well as fake antivirus and phishing attacks to steal American donations for Japan’s relief efforts.  Phishing emails and websites requesting donations for bogus charitable organizations commonly appear after these types of natural disasters.

US-CERT encourages Internet users to take the following precautions to ensure that their donations end up in the right hands:

Do not follow unsolicited web links or attachments in email messages.

Maintain up-to-date antivirus software.

Refer to the Recognizing and Avoiding Email Scams (pdf) document for additional information on avoiding email scams.

Review the Federal Trade Commission's Charity Checklist.

Verify the legitimacy of the email by contacting the organization directly through a trusted contact number. Trusted contact information can be found on the Better Business Bureau National Charity Report Index.

US-CERT will provide additional information as it becomes available.