Are you looking for a holiday? Get special deals.

Don't fall for fake settlement sites that steal your data

14 Oct 2025 By foxnews

Sometimes, data breaches result in more than just free credit monitoring. Recently, Facebook began paying out its $725 million settlement, and AT&T is preparing to distribute $177 million. Those payouts caught scammers' attention.

Now, fake settlement claim emails and websites are flooding inboxes. They look convincing, but behind the plain design and official-sounding language is a trap for your Social Security number, banking info and more. So how can you make sure you get your money without losing even more in the process?

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you'll get instant access to my Ultimate Scam Survival Guide - free when you join my CyberGuy.com newsletter.

TOP 5 OVERPAYMENT SCAMS TO AVOID

Settlement claim websites rarely look polished. Most have generic layouts, long URLs and simple forms asking for a claim ID from your email or postcard. That makes it easy for scammers to mimic them. To test how simple it is, we created a fake settlement site (below) in minutes using AI tools like ChatGPT.

If we can do it, you can bet criminals are already exploiting the same shortcuts. Facebook has been the target. A fake site once popped up around the Equifax settlement, tricking thousands before it was shut down. The lesson? If the site appears unusual, it doesn't necessarily mean it's fake, but it should prompt you to double-check before entering your details or clicking on any links.

Spotting a scam often comes down to noticing the little details. Watch for these common warning signs before you hand over your information.

If a site asks for your full Social Security number or the names of your children, stop. For example, the official Equifax settlement only requested the last six digits of SSNs. Genuine claim sites may ask for limited info (like the last four digits of your SSN), but they rarely demand complete Social Security or bank details.

Real administrators calculate payments only after the claim period closes.

Settlements are announced by mail or email, not through random DMs or SMS.

Even one extra letter in the web address is a sign of a spoof site. Legitimate settlements use official or clearly named administrator domains. Be wary of addresses with unusual add-ons, such as "secure-pay" or "claims-pay."

Scammers rely on urgency to pressure you into acting fast. Real settlement sites don't demand 24-hour turnarounds.

A sure giveaway of a fake. Real settlement administrators never require money to file or to receive your payout.

Scam sites often throw in fake "secure" seals. Look for recognized security seals and make sure they're clickable and verifiable.

Official sites list multiple, verifiable contacts. If the email or phone number matches the weird domain, that's a red flag.

Sloppy errors in legal-sounding text are a classic sign you're looking at a scam.

Before filing any claim, follow these steps to ensure you're dealing with a legitimate settlement site and protecting your information.

The Federal Trade Commission keeps updated lists of approved class action settlements at ftc.gov/enforcement/refunds. The legitimate links always point to a .gov website. If your email sends you elsewhere, treat it with caution.

Trusted outlets often cover large settlements and include safe links. ClassAction.org is another resource for checking legitimate URLs.

Your claim notice may include a mailing address. Sending a paper form avoids the digital phishing minefield altogether.

Strong antivirus software can block malicious links, warn you about dangerous websites and prevent malware from taking over your device.

The best way to safeguard yourself from malicious links that install malware and potentially access your private information is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.

Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices at CyberGuy.com.

HOW RETIREES CAN STOP FAKE DEBT COLLECTOR SCAMS

Data removal services work to scrub your personal information from broker lists, making it more difficult for criminals to target you.

While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren't cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It's what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting CyberGuy.com.

Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.

If a site asks for "administrative fees" or a "processing charge," close it immediately. Real settlement administrators will never ask for money.

Spot a fake? Protect others by reporting it to:

Quick reporting helps authorities shut down scams before more people fall victim.

Take our quick quiz at Cyberguy.com/ScamCheck to learn how to spot phishing scams, protect your inbox, and stay a step ahead of hackers.

Class action settlements can feel like rare wins for consumers after data breaches. But scammers see them as easy hunting grounds. The best defense is skepticism. Check URLs, avoid clicking direct links and never give away details that don't match the claim's purpose. Your payout should help you recover, not put you at greater risk.

Have you ever received a settlement notice that felt suspicious, and how did you handle it? Let us know by writing to us at CyberGuy.com.