Protect Yourself from Scams

Scammers around the world are constantly looking for new ways to trick you into sending them money or sharing personal information.

The City uses advanced technology and robust cybersecurity to protect information on our systems. But scammers sometimes obtain information that is publicly available by law. They may use this to impersonate City employees and try to steal your money, get your personal information, or install malware on your system.

Scammers have targeted:

• People who live or work in Portland.
• People who do business with the City, including vendors and suppliers.
• People who have applied for licenses or permits.

Protect yourself by knowing:

• How the scams work
• How to spot suspicious messages
• How to verify messages
• Basic precautions

What should I do if I get a suspicious message?

If you think a message might be a scam, stop!

• Don't open any files or attachments.
• Don't click on any links.
• Don't install software.
• Don't enter your login or password.
• Don't reply.

See below for more information on spotting scams and what to do if you get scammed.

How do these scams work?

Scammers use email, text, or phone calls pretending to be the City of Portland. These messages often look or sound official. They can be very convincing. Like this:

• "Your account with the City is past due. You will lose service unless you make a payment immediately."
• "You need to pay a $300 fee before we can process your permit. Click here to begin."
• "We made an error, and we're refunding you $416.34. Click this link so we can complete your payment."
• "This is Officer Jones. Your account was hacked. I need you to verify your information right now, so we can refund your money."

A lot of these scams have common themes:

• The scammers convince you to send them money by claiming that you haven't paid bills or fees you owe to the City.
• The scammers pressure you into giving them access to your account. Once they get access, they use it to steal your money or your personal information.
• Scammers trick you into clicking on a link that installs malware on your system.
• Scammers use fake forms that look official.
• Scammers use an urgent tone and insist that you act now.
• They threaten that something bad will happen if you don't act. They threaten that your account will be frozen, or you'll have to pay a fine, or your credit score will go down. These threats are known as stressors and they're designed to pressure you into complying with the scam.

How do I spot suspicious messages?

Scammers use messages that look or sound official with an immediate call to action. They may send you an email with a City logo, or send a text using your legal name, or call you while you're driving. Here are some red flags that should raise your suspicions.

• Is the message unexpected? If you have an account with the City, you get routine notices or updates on a regular basis. Is this message a total surprise?
• Is the message in a new or unexpected format? Maybe you get your water bill in the mail, but this message is a text or phone call pretending to be someone from the City.
• Does it come from a strange email address? Almost all City emails look like this:
  • someone@portlandoregon.gov
  • someone@police.portlandoregon.g…
  • someone@portland.gov
  • someone@info.portland.gov
  • Look carefully! Scammers use deceptive addresses like "portland-or.com" or "city-portland.us"
• Does it request payment now?
• Does it request payment through wire transfer, money transfer app, or cryptocurrency?
• Does it ask for account information or personal information?
• Does it ask you to click on a fishy link? Hover over the link to see the address. Do you recognize the URL?

How can I verify?

If you get a suspicious email, text, or phone call claiming to be from the City of Portland, Multnomah County, the police, the sheriff, or any local government office: Don't reply right away. Stop and verify.

You have two simple ways to verify a suspicious message:

• Ask PDX 311 if the contact is legitimate. 311 call takers can help you figure out if the message is real or fake.
• Look up contact information on Portland.gov to reach a City employee in a relevant department. Ask them about the message you got.

If the message is a scam, don't open files, don't click any links, and don't reply.

Report phishing attempts to the FBI's Internet Crime Complaint Center.

Report fraud, scams, and bad business practices to the Federal Trade Commission.

I think I've been scammed. What now?

If you get scammed, take action as soon as possible. The sooner you respond, the better your chances of limiting the impact.

If you paid money or gave personal information, file a police report with the Portland Police Bureau.

• Go to Police Report: Online Submission and scroll to the bottom of the page.
• Click Start a New Police Report.
• Select Fraud Other.
• Scroll to the bottom of the page.
• Click Continue.
• Provide details as requested.

Report phishing, spam, or fraud attempts to the FBI's Internet Crime Complaint Center.

Get more tips on What to do if you were scammed from the Federal Trade Commission.

How can I avoid getting scammed?

Take simple steps to limit your exposure to scams.

• Limit the personal information you share online.
• Use privacy settings.
• Don't use location features.
• Keep apps and operating systems up to date.
• Create strong passwords. Use a password manager and multi-factor authentication.
• Change passwords regularly.
• Don't share PINs or passwords.
• Use a secure Internet connection and Wi-Fi network.
• Back up your files regularly.
• Don't open attachments or click links from suspicious messages.
• Don't install suspicious software.
• Hover over links (without clicking) to see what URLs they lead to.
• Think before you click. When in doubt, DO NOT click.

Fine more cybersecurity tips at Ready.gov.

What we're doing

When the City becomes aware of scams targeting our community, we share alerts and provide resources to help residents recognize and avoid fraud. While scammers are always finding new ways to deceive people, we're committed to keeping our community informed so you have the information you need to spot suspicious activity and protect yourself.

Behind the scenes, the Bureau of Technology Services works to protect the City's information systems and data through a comprehensive cybersecurity program which includes strengthening the City's security, promoting employee awareness and staying informed about emerging threats and cybersecurity best practices.

More resources

• Phishing scams can be hard to spot – Federal Trade Commission
• A way to spot scams: how someone asks you to pay – Federal Trade Commission
• Business email compromise scams – Federal Bureau of Investigation
• Common frauds and scams – Federal Bureau of Investigation
• Report Identity Theft – Federal Trade Commission