Police issue warning regarding scams involving obscured and obfuscated links

Release Date: June 12, 2023

Recently, researchers have discovered another technique that cybercriminals use to try to steal your information. In this technique, cybercriminals are using obfuscated links to show IP addresses instead of websites. Obfuscated links are URLs that have been modified to hide the real location of a website.

In this scam, cybercriminals send an urgent email that appears to come from a legitimate source and prompts you to click on a link. The link seems legitimate, but hovering over it shows an IP address instead of a URL. Without a URL, it’s nearly impossible to verify if the link is legitimate. If you open the link in your browser, cybercriminals can download malware onto your device or redirect you to a malicious website.

Follow the tips below to stay safe from similar scams:

• When you receive an email, stop and look for red flags. For example, watch out for emails with different reply-to and sender addresses.
• Before you click a link, hover your cursor over it. If it shows an IP address, it could be a phishing link.
• Be cautious of urgent requests. Cyberattacks are designed to catch you off guard and trigger you to click links impulsively.

Stop, look, and think. Don’t be fooled by the scammers.