It’s the world’s number one social media platform, which also means it’s the biggest target for scammers, hackers and shady characters
Launched in 2016, TikTok has 6.44 million active users currently in South Africa above the age of 18, which is no small feat in comparison to Facebook which has been running since 2006 with 24.20 million users in the country. With such a broad reach, scammers are never far behind. Cybercriminals are exceptionally creative with their tactics and always follow trends closely, often predicting change ahead of the masses in order to increase the likelihood of their scams being successful. However, scams are not the only dangers lurking on the popular video-sharing application, and users would do well to know how to stay safe while enjoying themselves. Given that it’s so easy to lose track of time scrolling the app, it’s not hard for scams to catch people off guard, which can cause them to lose money, their account, or even their reputation.
Top TikTok scams to be aware of and avoid
1. Don’t be fooled by get-rich-quick and crypto scams
Is Elon Musk really going to give random web strangers a million dollars? Is a worldwide brand really going to give away a luxury vehicle just for following a new account? Unlikely. If it sounds too good to be true, it usually is. Con artists are known for luring people into their web of deceit with offers of huge reward for little effort. Cryptocurrencies have skyrocketed (and hit rock bottom) recently, so they remain a favourite topic for scammers when attempting to part unsuspecting people from their cash. Competitions and giveaways must be carefully scrutinised. Even if they’re not looking to scam you out of money, your personal information could be just as useful to a scammer looking to commit identity theft.
2. Don’t click those TikTok phishing messages
A TikTok scam email or text is a message that goes out at random, like a typical phishing message, but with the intention of landing in a TikToker’s inbox. Such a message might purport to offer a verified badge, more followers, or even a brand sponsorship. Once the target clicks the link in the message, they will be redirected to a site requesting TikTok login credentials. If the user does not have two-factor authentication (2FA) enabled (which TikTok accounts do not, by default), the hackers can take complete control over the account and lock the owner out completely, using their login details.
3. Don’t engage with bot accounts
Despite their best efforts, TikTok is still unfortunately rife with bot accounts that cleverly interact with users in a way that make the targeted users think they are chatting with a real person. These bots may ultimately ask victims for sensitive information or even suggest the victims be redirected to a site that is in fact a scam site attempting to phish information from them or install malware on their phones.
4. Don’t get caught by TikTok scam apps
Fake accounts on TikTok often promote apps that are available to download. The problem is that these apps are also in fact fake. Some accounts will claim that specific paid-for apps can be downloaded free from certain third-party app stores. However, in an attempt to steal your information, these apps will actually install malware or adware onto your device. Avoid downloading any additional apps that do not come from an official app store.
5. Don’t fall for fake celebrities
Some accounts attempt to impersonate real celebrities. They usually do this by duplicating the content of a celebrity’s account. This tactic is used to get as many followers as possible. Before the scammer is caught out and reported, they may use this account to promote further scams such as cryptocurrency investment scams. Alternatively, scammers use this account to gather as many followers as quickly as possible, and then switch to a personal account, so that they can exploit their now-high follower account by monetising or promoting other scams.
Staying safe on TikTok
While hacking into someone’s TikTok is challenging without being near the target’s phone and carrying out a spot of shoulder surfing, it is a good reminder to make sure that 2FA is turned on. This makes it harder for cybercriminals as they might be able to see the reset code sent to your mobile number (using spyware) but it’s unlikely they’ll have access to your second authenticating medium (email) as well.
Other important safety tips
Finally, if you ever see videos on TikTok that you think could be spam or phishing attempts, or you see any harmful content, report it to TikTok straight away and avoid the associated links or accounts.
-Ends-
For PR information, contact GinjaNinja:
Aloma Swanepoel
aloma@ginjaninja.co.za
About ESET
For more than 30 years, ESET® has been developing industry-leading IT security software and services to protect businesses, critical infrastructure and consumers worldwide from increasingly sophisticated digital threats. From endpoint and mobile security to endpoint detection and response, encryption and multifactor authentication, ESET’s high-performing, easy-to-use solutions unobtrusively protect and monitor 24/7, updating defences in real-time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company that enables the safe use of technology. This is backed by ESET’s R&D centres worldwide, working in support of our shared future. For more information, visit www.eset.com/za or follow us on LinkedIn, Facebook, and Instagram.
© Press Release 2022
Disclaimer: The contents of this press release was provided from an external third party provider. This website is not responsible for, and does not control, such external content. This content is provided on an “as is” and “as available” basis and has not been edited in any way. Neither this website nor our affiliates guarantee the accuracy of or endorse the views or opinions expressed in this press release.
The press release is provided for informational purposes only. The content does not provide tax, legal or investment advice or opinion regarding the suitability, value or profitability of any particular security, portfolio or investment strategy. Neither this website nor our affiliates shall be liable for any errors or inaccuracies in the content, or for any actions taken by you in reliance thereon. You expressly agree that your use of the information within this article is at your sole risk.
To the fullest extent permitted by applicable law, this website, its parent company, its subsidiaries, its affiliates and the respective shareholders, directors, officers, employees, agents, advertisers, content providers and licensors will not be liable (jointly or severally) to you for any direct, indirect, consequential, special, incidental, punitive or exemplary damages, including without limitation, lost profits, lost savings and lost revenues, whether in negligence, tort, contract or any other theory of liability, even if the parties have been advised of the possibility or could have foreseen any such damages.