--- title: "Scam Alert: Beware of Session Hijacking" description: Here are three steps you can take to prevent a scam called session hijacking, where criminals can take your credentials and steal your assets. image: https://go.hfcu.org/hubfs/Untitled%20design%20(48).jpg --- [![MoneyWisdom_HFCU_r2](https://go.hfcu.org/hs-fs/hubfs/MoneyWisdom_HFCU_r2.png?width=464&name=MoneyWisdom_HFCU_r2.png "MoneyWisdom_HFCU_r2")](https://go.hfcu.org/blog) Filter by Category** - [Show All](https://go.hfcu.org/blog) - [Security](https://go.hfcu.org/blog/topic/security) - [Personal Finance](https://go.hfcu.org/blog/topic/personal-finance) - [Auto](https://go.hfcu.org/blog/topic/auto) - [Business](https://go.hfcu.org/blog/topic/business) - [Credit Score](https://go.hfcu.org/blog/topic/credit-score) - [Home](https://go.hfcu.org/blog/topic/home) - [Credit Cards](https://go.hfcu.org/blog/topic/credit-cards) - [Life Changes](https://go.hfcu.org/blog/topic/life-changes) - [Insurance](https://go.hfcu.org/blog/topic/insurance) - [Investments](https://go.hfcu.org/blog/topic/investments) Filter by Category** - [Show All](https://go.hfcu.org/blog) - [Security](https://go.hfcu.org/blog/topic/security) - [Personal Finance](https://go.hfcu.org/blog/topic/personal-finance) - [Auto](https://go.hfcu.org/blog/topic/auto) - [Business](https://go.hfcu.org/blog/topic/business) - [Credit Score](https://go.hfcu.org/blog/topic/credit-score) - [Home](https://go.hfcu.org/blog/topic/home) - [Credit Cards](https://go.hfcu.org/blog/topic/credit-cards) - [Life Changes](https://go.hfcu.org/blog/topic/life-changes) - [Insurance](https://go.hfcu.org/blog/topic/insurance) - [Investments](https://go.hfcu.org/blog/topic/investments) ### Posts by Topic - [Personal Finance (262)](https://go.hfcu.org/blog/topic/personal-finance) - [Home (164)](https://go.hfcu.org/blog/topic/home) - [Life Changes (109)](https://go.hfcu.org/blog/topic/life-changes) - [Credit Cards (92)](https://go.hfcu.org/blog/topic/credit-cards) - [Security (74)](https://go.hfcu.org/blog/topic/security) - [Credit Score (69)](https://go.hfcu.org/blog/topic/credit-score) - [Auto (60)](https://go.hfcu.org/blog/topic/auto) - [Checking (54)](https://go.hfcu.org/blog/topic/checking) - [Business (48)](https://go.hfcu.org/blog/topic/business) - [Investments (36)](https://go.hfcu.org/blog/topic/investments) - [Mortgage (32)](https://go.hfcu.org/blog/topic/mortgage) - [Savings (29)](https://go.hfcu.org/blog/topic/savings) - [Scams (29)](https://go.hfcu.org/blog/topic/scams) - [Work (28)](https://go.hfcu.org/blog/topic/work) - [Debt (25)](https://go.hfcu.org/blog/topic/debt) - [Holidays (25)](https://go.hfcu.org/blog/topic/holidays) - [Money Management (22)](https://go.hfcu.org/blog/topic/money-management) - [Hanscom FCU (21)](https://go.hfcu.org/blog/topic/hanscom-fcu) - [Home Ownership (21)](https://go.hfcu.org/blog/topic/home-ownership) - [Credit Report (20)](https://go.hfcu.org/blog/topic/credit-report) - [Government (20)](https://go.hfcu.org/blog/topic/government) - [Home Equity (18)](https://go.hfcu.org/blog/topic/home-equity) - [Budget (17)](https://go.hfcu.org/blog/topic/budget) - [Mobile Banking (17)](https://go.hfcu.org/blog/topic/mobile-banking) - [Investment Property (16)](https://go.hfcu.org/blog/topic/investment-property) - [Saving Money (16)](https://go.hfcu.org/blog/topic/saving-money) - [Insurance (15)](https://go.hfcu.org/blog/topic/insurance) - [Taxes (15)](https://go.hfcu.org/blog/topic/taxes) - [Children (13)](https://go.hfcu.org/blog/topic/children) - [College (11)](https://go.hfcu.org/blog/topic/college) - [Financial Wellness (11)](https://go.hfcu.org/blog/topic/financial-wellness) - [Retirement (11)](https://go.hfcu.org/blog/topic/retirement) - [Community (10)](https://go.hfcu.org/blog/topic/community) - [Online Banking (10)](https://go.hfcu.org/blog/topic/online-banking) - [Estate Planning (8)](https://go.hfcu.org/blog/topic/estate-planning) - [COVID (7)](https://go.hfcu.org/blog/topic/covid) - [Deals (7)](https://go.hfcu.org/blog/topic/deals) - [Death (7)](https://go.hfcu.org/blog/topic/death) - [Shopping (7)](https://go.hfcu.org/blog/topic/shopping) - [Fraud (6)](https://go.hfcu.org/blog/topic/fraud) - [Mass Save (6)](https://go.hfcu.org/blog/topic/mass-save) - [Teens (6)](https://go.hfcu.org/blog/topic/teens) - [Divorce (5)](https://go.hfcu.org/blog/topic/divorce) - [Travel (5)](https://go.hfcu.org/blog/topic/travel) - [ATM (4)](https://go.hfcu.org/blog/topic/atm) - [Baby (4)](https://go.hfcu.org/blog/topic/baby) - [Debit Cards (3)](https://go.hfcu.org/blog/topic/debit-cards) - [Motorcycles (3)](https://go.hfcu.org/blog/topic/motorcycles) - [Weddings (3)](https://go.hfcu.org/blog/topic/weddings) - [Boats (2)](https://go.hfcu.org/blog/topic/boats) - [Charity (2)](https://go.hfcu.org/blog/topic/charity) - [Family Finance (2)](https://go.hfcu.org/blog/topic/family-finance) - [Lending (2)](https://go.hfcu.org/blog/topic/lending) - [Credit Unions (1)](https://go.hfcu.org/blog/topic/credit-unions) - [Green (1)](https://go.hfcu.org/blog/topic/green) - [Medical (1)](https://go.hfcu.org/blog/topic/medical) - [Pets (1)](https://go.hfcu.org/blog/topic/pets) - [dormant account (1)](https://go.hfcu.org/blog/topic/dormant-account) - [inactive account (1)](https://go.hfcu.org/blog/topic/inactive-account) # Scam Alert: Beware of Session Hijacking ** [Monica Parks](https://go.hfcu.org/blog/author/monica-parks) ** Feb 05, 2020 ![](https://go.hfcu.org/hubfs/Untitled%20design%20(48).jpg) I like to think that I’m tech savvy and well informed for someone not formally educated in or working in the tech space, but I recently learned about a sophisticated scamming technique that shocked me. It's called "session hijacking," and here's how it happens. In the case that caught my attention, the victim was a self-employed man who runs a YouTube channel for his company. He received an email about a business opportunity involving advertising on his channel. After communicating back and forth for a bit, the unknown person sent an email discussing pricing that included a link to their website. This link, however, took the victim to a page that hijacked his session, copied information, and allowed the criminal to log in to the victim's Google accounts, including his YouTube channel, and bypass his passwords. From there, the scammer made themselves the manager of the channel and removed the real owner, thereby hijacking the account completely. The first step to this scam is called [“social engineering," in which a scammer plays a role to trick their target into taking some action](https://www.knowbe4.com/what-is-social-engineering/) — in this case, clicking a harmful link in their email. The second step is what was new to me. When you go to a website and enter your login credentials, that starts what is called an “active session," where your computer sends information to the website’s servers in small pieces called “cookies." In this particular scam, the scammer was able to intercept those cookies and use them on their own computer, creating a copy of their victim’s session, logged in to the website they were on with access to their account. From there they could take over the account. This is why it's called “session hijacking." So how can you prevent session hijacking from happening? ### **Avoid Clicking links** You’ve heard it before, but it really is the safest option.[ If there’s a link in an email you want to click on, open your web browser and type the URL manually.](https://go.hfcu.org/blog/protect-your-computer-from-malware) Ideally you would use a link you saved in your favorites or bookmark. Or instead of clicking on a link, do a Google search for the company name to get there. But be leery of any ‘ads’ sites that appear in the search results – don’t click on those links. ### **Don’t open the attachment, either** [Viruses and malware get passed along in attachments.](https://go.hfcu.org/blog/protect-your-computer-from-malware) Only open attachments if you're expecting them from someone you know personally...and even then, be extremely careful. Someone may be spoofing your friend's or family member's account with an .exe file filled with bad news. ### **Do your due diligence** If you're a business owner or freelancer and you get an email about something like a sponsorship or other opportunity, make sure to take some extra time to vet the person who contacted you. Some questions to ask yourself may be: - - What’s their web presence like? (Remember: use Google to determine this, not a link from their email.) - Do they have a verifiable mailing address and phone number? - Call the publicly published number, **not** the one in the email. Can you make direct contact with the person who emailed you? Being aware of the techniques scammers use to target their victims takes some of their power away from them. If you’re contacted by someone with a link or attachment in their email, be wary! Vigilance and a few extra minutes could wind up saving you time and money in the end. **Hanscom Federal Credit Union will never send members emails that include links to their Online Access HD login pages.** If you receive an email like this, don't click the link. Please contact our Remote Support team immediately at 800-656-4328. [![Get a Free Credit Score Review](https://no-cache.hubspot.com/cta/default/118438/a8286a76-0660-4508-aa2a-2ee8eae5ed10.png)](https://cta-redirect.hubspot.com/cta/redirect/118438/a8286a76-0660-4508-aa2a-2ee8eae5ed10) * Note that Hanscom FCU's Credit Score and Report Review requires a hard pull on your credit, which will temporarily reduce your credit score.   *Others are reading:* - [How to Protect Yourself From Mobile App Fraud](https://go.hfcu.org/blog/how-to-protect-yourself-from-mobile-app-fraud) - [Fraud Alert: Here’s Why You Shouldn’t Abbreviate 2020](https://go.hfcu.org/blog/fraud-alert-heres-why-you-shouldnt-abbreviate-2020) - [4 Best Practices to Protect Your Online Access HD Account](https://go.hfcu.org/blog/4-best-practices-to-protect-your-online-access-hd-account) - [What You Need to Know Now About Bluetooth Security](https://go.hfcu.org/blog/what-you-need-to-know-today-about-bluetooth-security) - [3 Tips to Create Stronger Passwords](https://go.hfcu.org/blog/3-tips-to-create-stronger-passwords) ** [Security](https://go.hfcu.org/blog/topic/security), [Business](https://go.hfcu.org/blog/topic/business), [Scams](https://go.hfcu.org/blog/topic/scams), [Work](https://go.hfcu.org/blog/topic/work) [** 5 Ways to Find a Mentor for Your New Business ](https://go.hfcu.org/blog/5-ways-to-find-a-mentor-for-your-new-business) [** Gift Ideas for Valentine's Day That Won't Break the Bank ](https://go.hfcu.org/blog/gift-ideas-for-valentines-day-that-wont-break-the-bank) ### About Author ![Monica Parks](https://go.hfcu.org/hubfs/Monica_Parks_webopt.jpg) Monica Parks Monica Parks is the communications specialist for Hanscom FCU. A millennial who just got her student loan debt under $40,000, she writes about what she knows. You can reach her at mparks@hfcu.org. Related Posts [![Navigating Financial Challenges After a Job Loss](https://go.hfcu.org/hubfs/iStock-1444494544.jpg) Navigating Financial Challenges After a Job Loss ](https://go.hfcu.org/blog/job-loss) [![Protect Your Accounts from the Rise of Check Fraud](https://go.hfcu.org/hubfs/Untitled%20design%20(16)-2.png) Protect Your Accounts from the Rise of Check Fraud ](https://go.hfcu.org/blog/protect-your-accounts-from-the-rise-of-check-fraud) [![How to Avoid ID Theft Over the Holidays](https://go.hfcu.org/hubfs/Blog%20Photos%20800%20x%20800px%20(1)-1.png) How to Avoid ID Theft Over the Holidays ](https://go.hfcu.org/blog/bid/155005/don-t-let-identity-theft-ruin-your-holidays) ** - [**](http://www.facebook.com/share.php?u=https://go.hfcu.org/blog/scam-alert-beware-of-session-hijacking/) - [**](https://X.com/share?url=https://go.hfcu.org/blog/scam-alert-beware-of-session-hijacking/) - [**](http://www.linkedin.com/shareArticle?mini=true&url=https://go.hfcu.org/blog/scam-alert-beware-of-session-hijacking/&summary=&source=CeBIT) ## You are Leaving Hanscom Federal Credit Union #### **Please read the following before proceeding to:** The website you are about to visit is solely the responsibility of the merchant or other party providing the site. The content of this third-party site, including materials and information, is solely the responsibility of the provider of the site. The Credit Union is not responsible for any such third-party content. Any transactions that you enter into with a vendor, merchant or other party that you access through this third-party site are solely between you and that vendor, merchant or other party. The Credit Union does not endorse the content contained in this third-party site, nor the organization publishing the site, and hereby disclaims any responsibility for such content. The Credit Union Privacy Policy does not apply to this third-party site, and for further information you should consult the privacy disclosures of the third-party site. ### Comment ### Subscribe To Blog ### Subscribe to Email Updates ### contact **Hanscom Federal Credit Union** 1610 Eglin St. Hanscom AFB, MA 01731 Call us: [800-656-4328](tel:8006564328) [https://www.hfcu.org/](https://www.hfcu.org/) ### About Us [The MoneyWisdom Blog](https://www.hfcu.org/the-moneywisdom-blog.html) ### Social ** ## You are Leaving Hanscom Federal Credit Union #### **Please read the following before proceeding to:** ### https://www.facebook.com/HanscomFederalCreditUnion The website you are about to visit is solely the responsibility of the merchant or other party providing the site. The content of this third-party site, including materials and information, is solely the responsibility of the provider of the site. The Credit Union is not responsible for any such third-party content. Any transactions that you enter into with a vendor, merchant or other party that you access through this third-party site are solely between you and that vendor, merchant or other party. The Credit Union does not endorse the content contained in this third-party site, nor the organization publishing the site, and hereby disclaims any responsibility for such content. The Credit Union Privacy Policy does not apply to this third-party site, and for further information you should consult the privacy disclosures of the third-party site. ## You are Leaving Hanscom Federal Credit Union #### **Please read the following before proceeding to:** ### https://X.com/HanscomFCU The website you are about to visit is solely the responsibility of the merchant or other party providing the site. The content of this third-party site, including materials and information, is solely the responsibility of the provider of the site. The Credit Union is not responsible for any such third-party content. Any transactions that you enter into with a vendor, merchant or other party that you access through this third-party site are solely between you and that vendor, merchant or other party. The Credit Union does not endorse the content contained in this third-party site, nor the organization publishing the site, and hereby disclaims any responsibility for such content. The Credit Union Privacy Policy does not apply to this third-party site, and for further information you should consult the privacy disclosures of the third-party site. ## You are Leaving Hanscom Federal Credit Union #### **Please read the following before proceeding to:** ### https://www.instagram.com/hanscomfcu/ The website you are about to visit is solely the responsibility of the merchant or other party providing the site. The content of this third-party site, including materials and information, is solely the responsibility of the provider of the site. The Credit Union is not responsible for any such third-party content. Any transactions that you enter into with a vendor, merchant or other party that you access through this third-party site are solely between you and that vendor, merchant or other party. The Credit Union does not endorse the content contained in this third-party site, nor the organization publishing the site, and hereby disclaims any responsibility for such content. The Credit Union Privacy Policy does not apply to this third-party site, and for further information you should consult the privacy disclosures of the third-party site. ## You are Leaving Hanscom Federal Credit Union #### **Please read the following before proceeding to:** ### https://www.linkedin.com/company/hanscomfcu/ The website you are about to visit is solely the responsibility of the merchant or other party providing the site. The content of this third-party site, including materials and information, is solely the responsibility of the provider of the site. The Credit Union is not responsible for any such third-party content. Any transactions that you enter into with a vendor, merchant or other party that you access through this third-party site are solely between you and that vendor, merchant or other party. The Credit Union does not endorse the content contained in this third-party site, nor the organization publishing the site, and hereby disclaims any responsibility for such content. The Credit Union Privacy Policy does not apply to this third-party site, and for further information you should consult the privacy disclosures of the third-party site. ## You are Leaving Hanscom Federal Credit Union #### **Please read the following before proceeding to:** ### http://www.youtube.com/c/HanscomFederalCreditUnion The website you are about to visit is solely the responsibility of the merchant or other party providing the site. The content of this third-party site, including materials and information, is solely the responsibility of the provider of the site. The Credit Union is not responsible for any such third-party content. Any transactions that you enter into with a vendor, merchant or other party that you access through this third-party site are solely between you and that vendor, merchant or other party. The Credit Union does not endorse the content contained in this third-party site, nor the organization publishing the site, and hereby disclaims any responsibility for such content. The Credit Union Privacy Policy does not apply to this third-party site, and for further information you should consult the privacy disclosures of the third-party site. ### Popular Posts [What You Need to Know About Putting Your Home in a Trust](https://go.hfcu.org/blog/what-you-need-to-know-about-putting-your-home-in-a-trust) ![older man looking at top retirement worry on digital device](https://go.hfcu.org/hubfs/Untitled%20design%20-%202022-02-10T072804.753.jpg) [What You Need to Know About Your Federal Tax Bracket](https://go.hfcu.org/blog/what-you-need-to-know-about-your-tax-bracket) ![older man looking at top retirement worry on digital device](https://go.hfcu.org/hubfs/Untitled%20design%20-%202021-03-22T123305.900.jpg) [6 Boat Types to Get on the Water](https://go.hfcu.org/blog/6-boat-types-to-get-on-the-water) ![older man looking at top retirement worry on digital device](https://go.hfcu.org/hubfs/images/Jet_Ski.jpg) [23 Organizations Dedicated to the Needs of Seniors](https://go.hfcu.org/blog/23-organizations-dedicated-to-the-needs-of-seniors) ![older man looking at top retirement worry on digital device](https://go.hfcu.org/hubfs/Senior%20citizens.jpg) [9 Smart Moves for Lottery Winners](https://go.hfcu.org/blog/lottery) ![older man looking at top retirement worry on digital device](https://go.hfcu.org/hubfs/images/lottery_winner.jpg) ### Recent Posts - [![National Credit Union Administration](https://go.hfcu.org/hs-fs/hubfs/NCUA-logo-small.png?width=95&name=NCUA-logo-small.png) ](https://www.ncua.gov/) [![Equal Housing Lender](https://go.hfcu.org/hs-fs/hubfs/EHL-logo-small.png?width=65&name=EHL-logo-small.png)](https://www.hud.gov/fairhousing) - @ 2023 [Hanscom Federal Credit Union](https://www.hfcu.org/) - Federally insured by the National Credit Union Administration. - [Privacy Policy](https://www.hfcu.org/content/docs/Privacy_Notice.pdf) **Disclosure:** Hanscom Federal Credit Union does not provide and is not responsible for any products, services, or overall website content available at any third-party sites linked within this blog. Moreover, Hanscom Federal Credit Union's privacy policies do not apply to any of the linked websites within this blog. Please consult the privacy disclosures on those linked sites for further information. ```json { "@context" : "http://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Monica Parks" }, "dateModified" : "May 16, 2022, 8:44:29 PM", "datePublished" : "2020-02-05 12:00:00", "description" : "Here are three steps you can take to prevent a scam called session hijacking, where criminals can take your credentials and steal your assets.", "headline" : "Scam Alert: Beware of Session Hijacking", "image" : { "@type" : "ImageObject", "url" : "https://cdn2.hubspot.net/hubfs/118438/Untitled%20design%20%2848%29.jpg" }, "mainEntityOfPage" : { "@id" : "https://go.hfcu.org/blog/scam-alert-beware-of-session-hijacking", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://cdn2.hubspot.net/hubfs/118438/Logo%202.jpg" }, "name" : "Hanscom Federal Credit Union" } } ```