Signal App Scams: Stay Safe & Report Suspicious Activity

Signal has become a very popular communication platform in an era where large agencies want to listen in on our private conversations. With end-to-end encryption and lack of data collection, Signal is viewed by many as the standard for secure salutations.

However, privacy is a two-way street, and cybercriminals have infiltrated the block. The same features that have drawn in 70 million users(1) have also been exploited by bad actors.

These ne’er-do-wells navigate the app with negative intentions, but that doesn’t mean you can’t use the platform safely. In fact, knowing these scammers are out there, how they commonly operate, and what to do if you come across one is the key to Signal app safety.

Understanding Common Signal App Scams

You need to understand the type of scams which are carried out on Signal app to know what to look out for while using the platform. Continue reading to learn some of the more common Signal app scams and how they are conducted so you can use the app safely.

Sextortion on Signal

Sextortion scams on Signal present themselves similarly to how they pop up on other online platforms. Sextortionist often create fake accounts complete with pilfered profile pictures and phony personalities. In many cases, digitally altered media is used to increase the illusion. This has become even more prevalent with the advancement and accessibility of AI.

Perpetrators will seek out targets and sweep them off their feet with fraudulent claims of love. The scam then escalates, the conversation proposing a potential nude exchange.

Once the target divulges their indecent data, their world is soon rocked with the realization that they’ve been speaking with a scammer. Blackmail ensues and the victim soon faces the ultimatum of paying the sextortionist or having their intimate images leaked to loved ones and close contacts.

Online Blackmail and Extortion

Outside of sextortion, Signal app scammers inflict other forms of blackmail and extortion on the platform’s users. This can include extracting personal data to use as blackmail leverage or creating doctored media to support fabricated accusations.

Much like how Signal sextortionists use the app’s encryption to their advantage, blackmailers also exploit this perceived privacy to ease worries and extract private information. This can include passwords, credentials, financial data, and other personally identifiable information.

Fake Job Scams

Another common Signal scam involves promoting fake job opportunities. This is often done through unprompted messages or listings on other platforms that direct you to Signal. The scammer may even do a little homework and study your online presence to craft your perfect pretend position.

A fake job scammer may ask you to make an upfront payment to cover training fees or background checks. Some scammers may simply ask for financial data as part of the alleged onboarding process. However, this information will be used to commit financial fraud and identity theft, not set up your direct deposit.

Some scammers go to great lengths to uphold the plausibility of their schemes. This includes staging fake interviews and even setting up victims with “training managers”. In one instance, an individual from Ontario was supposedly sent money for work supplies. When it didn’t go through, they were asked to withdraw nearly $3,000 and deposit it at a bitcoin ATM(2).

Other Scams

Some Signal scams that don’t pop up quite as often as the last three but are nonetheless prevalent on the platform include:

Investment Scams: Similar to fake job scams, these schemes propose a lucrative opportunity that seems, and is, too good to be true. They typically pose as wealthy individuals and may include elements of a romance scam.
Romance Scams: Users may receive unsolicited romantic messages or have an interaction on a dating app or social media platform that leads them to Signal for “more private” conversation.
Impersonation Scams: For many reasons, including the scams previously discussed, a bad actor may assume the role of another person to weaponize their good name and acquire their target’s trust. Signal’s secrecy can make confirming identities difficult.

Red Flags: Identifying Potential Scams

Signal app scams typically follow a similar structure, so there are some indicators that should set off alarm bells. Be on the lookout for any of these behaviors that may threaten your Signal app safety:

Unsolicited messages from unknown users
Unrelinquished requests for money or personal data
Messages that create a sense of urgency or exclusivity
Messages containing suspicious links and attachments

Protecting Your Signal Account and Personal Information

For the sake of your Signal app safety, it’s imperative that you shelter yourself before a threat presents itself. The following safety measures can keep your Signal activity as secure as the encryption of your messages:

Adjust the privacy settings on your account to maximize the protection of your profile. This includes limiting who can contact you, hiding your phone number and other data, and requiring a pin or biometric log in to access your account.
Always use strong and unique passwords and update them regularly. Use two-factor authentication (2FA) whenever it’s offered to ensure your account is secure even if your password becomes public.
Avoid sharing sensitive information with anyone you don’t know online, even on encrypted messaging platforms. Just because no third party sees your chat log doesn’t mean that data won’t reach the wrong hands.
Be wary of accounts contacting you with offers claiming to be a trusted entity. Most official organizations will not use Signal as a contact method. If you are unsure, you can verify by going to their website.
Ensure that you always use the most up-to-date version of whichever platforms and programs you use. Outdated apps are often plagued with security vulnerabilities that can be exploited by scammers.

What to Do if You’ve Been Scammed

If you’re the victim of a Signal scam, it’s important that you report the issue to the proper authorities to protect the safety of you and your fellow Signal users. You can report scams on Signal via email at security@signal.org or by submitting a support request.

You can also block users or group chats from contacting you. To do this:

Open the group chat or chat with the individual contact
Tap the header with the name of the chat
Choose “Block this user” or “Block this group”
Confirm by choosing “Block” and “Ok”(3)

You will want to make sure that you’ve collected all of the necessary evidence from your conversation before blocking the contact or group. Take screenshots of their account, profile picture, phone number if it’s displayed, and any messages that contain threats or display that a crime was committed against you.

You should then report the Signal scammer to law enforcement. Begin by filing a police report and work your way up to the FBI’s Internet Crime Complaint Center (IC3) if the circumstances require you to. It’s important to remember these agencies are here to help, not judge, so don’t let feelings of embarrassment stop you from reporting the scam and getting help.

It’s also important to allocate your efforts in repairing the damage done to your mental wellbeing. There are resources available to help victims of online scams deal with the emotional devastation that ensues. They include:

The National Crisis Hotline
The Cybercrime Support Network
BBB Scam Survival Toolkit
AARP Fraud Watch Network

Staying Safe in the Future: Prevention Tips

It’s natural to become less concerned with your online safety when an immediate threat is no longer present. However, you need to fight this complacency and continue to take a proactive approach to prevent future scams on Signal and other platforms.

With how easy it is to claim your someone else, you should take a zero-trust approach to all of your online encounters. Additionally, continue to expand your internet intelligence by staying up to date on the latest trend in scam tactics and cyber security. Relay your new knowledge with your close circle and consider sharing your personal story with them.

Maintaining a Secure Signal Experience

As we’ve covered, the security of the messages sent between users on Signal does not guarantee the security of the users themselves. In actuality, these built-in privacy features are exploited by criminals.

Knowing that these scammers are out there, Signal users need to understand their methods to safely avoid falling into their traps and know who to turn to if they’ve been ensnared. Make sure to stay informed on current scams and know that if you run into a Signal cybercriminal, Digital Investigation Inc. is here to help.

Sources: