Every year around Valentine’s day, romance scams seem to rear their ugly heads. As more and more of our lives are online, it’s easier to meet people and get to know them without ever meeting in person. However, internet friendships and romances are also ripe for scammers and grifters looking to separate you from your money without regard to your feelings. And with the advent of AI, the thieves’ job just got a whole lot easier.
You may think that romance scams don’t affect a lot of people, or doesn’t net the scammers a lot of money, but when the heart gets involved, things can get out of control. In 2022, the FTC reported losses due to romance scams were upwards of $1.3 billion, with a median loss of $4,4001. Of course, that’s not to mention the pain and anguish caused by the deceit itself.
Some of these scams are 1 on 1 and manual for the attacker, but increasingly they’re automating their attacks to cast a wide net and catch as many unsuspecting victims, and their wallets, as possible. They’re leveraging publicly available web and mobile app APIs and using automated tools like bots, and with the advent of AI, they can reach even more potential victims with less effort. Through these tools and tactics, they can create fake accounts en masse as well as steal existing accounts through account takeover (ATO) attacks.
Cequence analyzed traffic and attack data across multiple customers in the dating and media vertical throughout 2023 that shows just how pervasive these attacks can be.
Are you looking for love, but also want to protect yourself? You can’t always be perfectly vigilant – everyone is a potential target for scammers – but there are some guidelines you can follow to reduce the likelihood of falling prey yourself.
Look for red flags:
 |
You never meet in person, but things are moving fast. |  |
Slow down and try to authenticate their claims by searching for past activity online. |
|
They claim to work overseas or make repeated excuses for being unavailable to meet. | |
Search or ask others online if they are being told similar fabrications. |
|
You’re asked to send a gift or provide money to help them with a sudden ‘emergency.’ | |
Stop. NEVER send money, gifts, or buy tickets on behalf of someone you’ve never met. It’s now time to consider filing a fraud report. |
Dating app and website companies can also do their part to protect their users from scams. Cequence’s customers and their users are already protected – API Spartan, part of the Cequence Unified API Protection platform, detects API attacks and blocks them natively in real time. API Spartan protects organizations from the full range of bot attacks, including those often found in romance scams.
Here are the top five things to look for in a bot management solution to protect businesses against scams like fake account creation, account takeovers and more:
- No Application Modification – Easy to deploy without agents, JavaScript, or SDKs.
- Broad Use Case Coverage – Protects mobile apps, web applications, and cloud- and microservices-based infrastructure.
- Rapid Time to Value – Effective immediately without requiring extensive configuration.
- Retooling Resiliency – Sustains protection even as attackers change their methods.
- Plays Well with Others – Works and integrates with your existing infrastructure.
Check out (and share!) our Valentine’s Day infographic.
Give us a try – get started with a free API security assessment of your public-facing APIs.
The post Broken Hearts and Empty Wallets: Romance Scams Plague Dating Apps appeared first on Cequence Security.
*** This is a Security Bloggers Network syndicated blog from Cequence Security authored by Jeff Harrell. Read the original post at: https://www.cequence.ai/blog/bot-management/romance-scams-plague-dating-apps/