What are the most common scams targeting seniors right now?

Phone-based vishing and fake tech-support calls, romance scams, phishing texts and emails, SIM-swapping, fake Wi-Fi "evil twin" networks, check washing, and title or deed fraud by mail are among the most commonly reported.

How can I tell if a phone call is a scam?

A legitimate agency or business will never demand immediate payment by gift card or wire transfer, ask you to stay on the line while you go to the bank, or ask you to confirm your full Social Security number over the phone. Hang up and call the organization back on a number you look up yourself.

What is vishing, and how is it different from regular phishing?

Vishing is phishing carried out by voice call rather than email or text. A caller impersonates a bank, government agency or tech company to pressure you into revealing personal information or moving money quickly.

How do I protect against identity theft and SIM-swapping?

Freeze your credit with the three major bureaus, set up a PIN or passcode with your mobile carrier so a SIM cannot be transferred without it, and watch for your phone suddenly losing signal — that can be the first sign of a SIM swap in progress.

What should I do if I think I've been scammed?

Contact your bank or card issuer immediately, file a report at reportfraud.ftc.gov and with local police, and change any passwords that may have been exposed. Acting quickly gives you the best chance of stopping or reversing a transaction.

Does Fred Flamer speak publicly about senior scam prevention?

Yes — Fred gives talks on senior cybersecurity and fraud prevention for community groups, libraries and senior centers. Reach out through the contact links on this site to inquire about a speaking engagement.

Fake Wi-Fi Networks (Sometimes Referred to as an "Evil Twin" Attack)

Information explaining Fake Wi-Fi Networks (Sometimes Referred to as an "Evil Twin" Attack)

Fred Flamer· August 23, 2026· 2 min read

By Fred Flamer

The "Evil Twin" attack is indeed evil!

Let me give you a scenario. You are chilling at Starbucks and plan on being there for a while. To give your cellular data plan a rest, you decide to take advantage of the free Wi-Fi being offered by the store.

The legitimate Starbucks Wi-Fi network is called "Starbucks4you" and the password is "extrashot."

Seems harmless enough, right?

Well, unbeknownst to you, a cybercriminal sitting nearby has set up a fake Wi-Fi network. The attacker has configured a wireless router with a very similar name, "Starbucks4all," and has even used the same password, "extrashot."

Now comes the trap.

When you open the Wi-Fi settings on your cellphone, tablet, or laptop, you are presented with a list of available networks. Among the choices are "Starbucks4you" and "Starbucks4all."

If you are distracted, in a hurry, or simply not paying close attention, you may accidentally connect to the fake network (Starbucks4all), instead of the legitimate one.

Congratulations—you have just entered the lion's den.

Once connected to the attacker's network, a number of malicious activities can occur:

Your internet activity can be monitored.
Websites you visit can be recorded.
Usernames and passwords may be intercepted.
Session cookies may be stolen, potentially allowing attackers to impersonate you on websites.
You may be redirected to fake login pages designed to steal your credentials.
Malware could be delivered to your device.
Your online activity may be captured and reviewed later, allowing an attacker to take their time and maximize the damage.

Think of it this way: instead of communicating directly with the internet, you may be communicating through the attacker's equipment first. That is exactly what makes the Evil Twin attack so dangerous.

How to Protect Yourself

Never use public Wi-Fi to conduct sensitive business such as banking, investing, shopping, or accessing important personal accounts.
Verify the exact Wi-Fi network name with an employee before connecting.
Disable the "Auto Connect" feature on your devices.
Be suspicious of network names that closely resemble legitimate businesses.
Whenever possible, use your cellular data connection instead of public Wi-Fi.
If you must use public Wi-Fi, use a trusted VPN to encrypt your internet traffic.

Remember, just because a Wi-Fi network appears legitimate doesn't mean it is. Cybercriminals are counting on consumers being distracted, rushed, or trusting. Taking a few extra seconds to verify a wireless network could save you from becoming the next victim of an Evil Twin attack.

-Fin-

#EvilTwin #SeniorSecurityAware #SeniorCyberScams

433 words