The Call That Cost $42,000”
Derek Mathis, a cautious small business owner, never expected to be scammed. One morning, he received an urgent email from his accountant—or so he thought—asking him to confirm a $42,000 wire transfer. At the bottom was a phone number to call his bank if he had concerns.
Suspicious but in a rush, Derek called the number. A calm, professional voice claimed to be with the bank’s fraud department. They asked for his full name, account details, and phone number to “secure” his account.
In reality, the email was fake, and the call routed to scammers. Using the info Derek provided, they performed a SIM swap—convincing his phone carrier to transfer his number to a new SIM in their control. Derek’s phone lost service shortly after.
With access to his texts and authentication codes, the scammers quickly drained $42,000 from his account. By the time Derek contacted his real bank, the money was gone.

Protecting Your Email from Browser-Based Hacking
Common Email Hacking Risks via Browsers
- Phishing Attacks
- Fake login pages mimicking Gmail, Yahoo, or Outlook trick users into entering passwords.
- Always check the URL before logging in—look for “https://” and the correct domain (e.g., mail.google.com).
- Malicious Browser Extensions
- Some extensions secretly capture keystrokes (including passwords).
- Only install extensions from official stores (Chrome Web Store, Apple App Store).
- Session Hijacking
- If you stay logged in on a public computer, someone else could access your email.
- Always log out after using email on shared devices.
- Keyloggers & Spyware
- Malware can record everything you type, including passwords.
- Use antivirus software and avoid downloading suspicious files.
How to Secure Your Email in Browsers
- Avoid simple passwords like “password123.” Use a mix of letters, numbers, and symbols.
- Consider a password manager (like Bitwarden or 1Password) to store credentials securely.
- Adds an extra step (e.g., a text code or authentication app) to verify your login.
- Set up 2FA in your email account settings.
- Never log in if the website lacks “https://” (the “s” means secure).
- Look for a padlock icon in the address bar.
- Stored data can be exploited. Go to browser settings and clear history/cookies periodically.
- Hackers can intercept data on open networks. Use a VPN (like NordVPN or ProtonVPN) for added protection.
- Scammers send urgent warnings (e.g., “Your account has been locked!”) to steal logins.
- Never click links in suspicious emails—log in directly through the official website.

What to Do If Your Email Is Hacked
- Change your password immediately.
- Check for unauthorized forwarding rules (hackers often set up auto-forwarding).
- Scan your device for malware using trusted antivirus software.
- Notify contacts if spam is being sent from your account.
Stay safe and secure online! 🛡️