How a Cybersecurity Veteran Fell for a PPP Loan Scam

David Ford had always believed in the tight-knit brotherhood shared among EMS, police, and fire personnel. This camaraderie, built on shared experiences and mutual trust, was something he relied on throughout his career. So, when he received a call from someone claiming to be a police officer, he had no reason to doubt their authenticity.

A Lifetime of Service and Sacrifice: David enjoyed a long career in information technology, starting in New Jersey and later moving to North Carolina. He even authored a book, "The Cybersecurity Primer," to educate people on online risks. But before his IT career, David was an EMT and part of New Jersey's pioneering paramedical program. His dedication to medicine began in high school, interrupted only by his father's stroke, which forced him to drop out of college to support his family.

The Call That Changed Everything: David had always been careful about answering calls from unknown numbers. But on a particularly stressful day, dealing with his brother's Social Security issues, he received a call from a number he recognized as being from near his daughter's home. Answering it, he was greeted by someone claiming to be a Wake County Sheriff's officer, informing him of an arrest warrant for his involvement in a fraudulent PPP loan application.

A Convincing Fraud: Initially skeptical, David's doubts began to erode when the caller sent an email with an official-looking warrant. The caller's detailed knowledge about David's PPP loan—right down to the loan amount, date, and issuing bank—further convinced him of the call's legitimacy. The caller insisted that David was already under arrest but could avoid jail by paying back the loan immediately.

David, overwhelmed and anxious, followed their instructions. He withdrew cash and deposited it into a Bitcoin machine, making payments as directed. However, each time he made a payment, the caller claimed there was an issue, requiring another payment. This process drained David of $11,500.

The Realization and the Aftermath: The next day, David went to the US District Court to retrieve a promised refund check and to clear his name. It was only then that he discovered there was no warrant, no investigation, and no refund check. The court clerks informed him that they had been receiving similar calls, indicating a new and widespread scam.

How They Did It: David's story highlights a significant vulnerability: public access to personal information. Details of his PPP loan were readily available online, providing scammers with all they needed to concoct a convincing story. This realization was a shock to David, who had spent his career teaching others about cybersecurity.

A Call to Action: David's experience underscores the importance of being vigilant about sharing personal information and questioning unsolicited calls, no matter how convincing they may seem. He urges others to be cautious and to verify any unexpected communication with law enforcement directly.

Signs this was a Scam

• Unsolicited call from someone claiming to be law enforcement.
• Caller knew specific personal details, adding to their credibility.
• Request for immediate payment to avoid arrest or legal trouble.
• Payment requested via untraceable methods like Bitcoin.
• Repeated requests for additional payments due to 'issues.'

How to Avoid this Type of Scam

• Always verify unsolicited calls by contacting the organization directly.
• Do not share personal information or make payments based on unsolicited calls.
• Check the official website for any official communication or notices.
• Be wary of requests for payment via unconventional methods like Bitcoin.
• Report suspicious calls to local law enforcement or relevant authorities.