Anti-Phishing Reminders

Defend yourself from scammers looking to steal your account

Though we have previously published articles on “phishing,” we think it never hurts to remind you of ways to protect yourself from these scammers.

You may receive an e-mail that looks like it came from Yahoo!, taking you to something that looks like a Yahoo! Search Marketing log-in page. But in reality it can be a phishing scam from somebody who is trying to duplicate our login page to get your user name and password to hijack your account.

Well, don’t fret. To help combat these phishing scams, we have installed what’s called a “sign-in seal” on our log-in page. Already in use by many financial institutions, a sign-in seal is a cookie-based secret message or image that is displayed on your computer only. (That is, the machine you use to log in to your account.) If you use more than one computer, you’ll need to set up your seal for each. You can create your own custom text message to use as a seal, or upload your own image.

If you do not see your custom seal—and you haven’t cleared your cookies on your browser—when signing into your account, the site you’re on may be a “spoof” site designed to hoodwink you into giving up your valuable personal information. We encourage you to create a customized sign-in seal for your Yahoo! Search Marketing account today, then look for it every time you log in. You can set up your seal from your Yahoo! Search Marketing log-in page (the real one).

How to Recognize a Scam Email
Phishing emails usually try to hook you with some official-sounding message about your account. A common subject line is “Please Verify Your…”. Once you open the email, you’ll often see familiar corporate colors, branding, logos and language. Sometimes they will tell you that your account has been disabled for a bogus reason. At other times, they’ll offer a “free upgrade” to a new (and often non-existent) service.

Don’t Give Out Account or Personal Info to Anyone
The biggest clue in the fake email is that it asks for your username and password. We will never send you an email asking for your password.

Another way to help tell the faux from the friendly is by looking at the sender’s email address. Most of the official communications we send you will come from an address that looks like this: solutions(at)ysm.yahoo-email.com. If you get an email from a yahoo.com address asking you for info, it’s a good bet that it’s a fake.

If you think you’ve been “phished” for info, please let us know by emailing phishing(at)cc.yahoo-inc.com, or forward the email in question to that address.

To learn more about how you can keep from getting reeled in by “phishermen,” and how to guard against other Internet-based scams, visit these resources:

• Common Abuse Issues
• Yahoo! Security Center

—The Team