| Cybercriminals often exploit the compassion and generosity of the public by conducting fraudulent schemes in the aftermath of events, such as the recent attacks on Israel that began on October 7. Individuals seeking to donate to relief efforts are targeted in charity scams initiated by threat actors using social engineering tactics through emails, SMS text messaging, phone calls, and direct messages via social media. They often create a sense of urgency and may impersonate reputable organizations. For example, phishing emails may contain display name spoofing to appear as a known or trusted charity and attempt to convince the potential donor to open an attachment or click a link directing them to a cloned or spoofed website impersonating the legitimate charity with the intent to steal sensitive information, user credentials, or relief funds. |
| Although many legitimate organizations call to solicit donations, potential donors are advised to take the time before donating to research the name of the charity properly, understand who they are and their cause, and where the funds are directed. Also, search the name of the charity to determine if there are any bad reviews, complaints, scams, or fraud associated with the charity. Credit card payments offer more consumer protections and are easier to track than payments of gift cards, wire transfers, cash, or cryptocurrency. Additionally, donations are not recommended through payment apps, such as Venmo, CashApp, or Zelle, as funds through these apps should be sent to known and familiar individuals such as family and friends. |
| Fraudulent charities or fundraising efforts may also be created to aid terrorist organizations. Traditional fiat currency is typically used for fraudulent fundraising and terrorist financial activity. However, Hamas is one of the first terrorist organizations to use cryptocurrency for fundraising efforts, and authorities recently froze cryptocurrency accounts used by Hamas to elicit donations for their operations. |