Don’t Let Scammers During COVID-19 Fool You!

If COVID-19 wasn’t stressful enough, now you have to watch out for scammers trying to take advantage of you. Below are a few tips:

  • Watch out for any links that get texted to your phone that promise to track coronavirus (through an app or otherwise). This might be malware designed to spy on you or get other information such as logins and passwords.
  • Watch our for links in random emails talking about the coronavirus. Phishing attempts are running rampant right now. If you aren’t sure about a link in an email you get, don’t click on it. If you aren’t sure about an email that’s in your inbox, simply call the company to ensure it’s a legitimate email and safe to open. Better to make a phone call than be sorry.
  • Understand that there is a flood of disinformation/misinformation about the virus, including remedies, cures, etc. This is especially true among the naturopath/DIY groups. If it is not coming from a reputable source (local hospital, your doctor’s office, the CDC, WHO, etc.) please don’t share it. If you do share information, cite the source that you obtained the information from so others can determine reliability of the information. Remember, anyone can buy a domain and anyone can make a meme.
  • If you receive a call from someone claiming to be from a charity, asking for personal information of financial information, hang up. If you want to give to a charity, go directly to their website. Also, only go to known charities. Just because a website looks like a “charity” doesn’t mean it is. Again, anyone can buy a domain and make a website.
  • If random strangers are showing up at your house, suggesting they are there to do coronavirus testing, etc., do not let them in your house! Ask for credentials/information and then call the organization that they say they are with to confirm they are who they say they are. Remember, anyone can lift a picture or information off of a website and make a fake badge, etc.

Some related reading:

https://arstechnica.com/information-technology/2020/03/the-internet-is-drowning-in-covid-19-related-malware-and-phishing-scams/

https://www.forbes.com/sites/thomasbrewster/2020/03/18/coronavirus-scam-alert-covid-19-map-malware-can-spy-on-you-through-your-android-microphone-and-camera/

https://www.usatoday.com/story/opinion/2020/03/17/fda-chief-stop-using-unapproved-products-claiming-prevent-coronavirus-column/5041971002/

https://www.military.com/daily-news/2020/03/16/army-white-house-issue-warnings-about-coronavirus-hoaxes-and-scams.html

Lexington PD advises of COVID-19 related phone scam

Disclaimer: This is for general information purposes only and none of this is meant to be legal advice and should not be relied upon as legal advice.

Advertisement

The Ugly Side of Reputation Management: What Attorneys and Judges Need to Know

Once upon a time, not so long ago, there was no such thing as the Internet.  Information and news came from your local newspaper, television, or radio channel.  Research was done in good old fashioned books, often at your local school, university or public library.  If the content you were seeking was “old” chances are you had to go look at microfiche. For those that are young enough to have no clue what I’m talking about, watch this video. Then BOOM! Along came the internet! Well, sort of.  It was a slow work in progress, but by 1995 the internet was fully commercialized here in the U.S.  Anyone else remember that horrible dial up sound followed by the coolest thing you ever heard in your life “You’ve got mail!“?

As technology and the internet evolved so did the ease of gathering and sharing information; not only by the traditional media, but by every day users of the internet.  I’ve dedicated an entire series of blogs called Fighting Fair on the Internet just to the topic of people’s online use.  Not every person who has access to the internet publishes flattering content (hello Free Speech) nor do they necessarily post truthful content (ewww, defamation).  Of course, not all unflattering content is defamatory, so it’s not illegal to be a crap talker, but some people try to overcome it anyway.  Either way, whether the information is true or false, such content has brought about a whole new industry for people and businesses looking for relief: reputation management.

Leave it to the entrepreneurial types to see a problem and find a lucrative solution to the same.  While there are always legitimate ethical reputation management companies and lawyers out there doing business the right way (and kudos to all of them)…there are those that are, shall we say, operating through more “questionable” means.  Those that want to push the ethical envelope often come up with “proprietary” methods to help clients which are often sold as removal or internet de-listing/de-indexing techniques that may include questionable defamation cases and court orders, use of bogus DMCA take down notices, or “black hat” methods.  In this article I am only going to focus on the questionable defamation cases that result in an order for injunctive relief.

BACKGROUND: QUESTIONABLE DEFAMATION CASES AND COURT ORDERS

UCLA Professor, Eugene Volokh and Public Citizen litigation attorney, Paul Alan Levy, started shedding public light on concerns relating to questionable court orders a few years ago.  In an amicus brief, submit to the California Supreme Court in support of Yelp, Inc. in Hassell v. BirdVolokh offered his findings to the court discussing how default proceedings are “far too vulnerable to manipulation to be trustworthy.”

As the brief says:

Injunctions aimed at removing or deindexing allegedly libelous material are a big practice area, and big business….But this process appears to be rife with fraud and with other behavior that renders it inaccurate. And this is unsurprising, precisely because many such injunctions are aimed at getting action from third parties (such as Yelp or Google) that did not appear in the original proceedings. The adversarial process usually offers some assurance of accurate fact finding, because the defendant has the opportunity and incentive to point out the plaintiff’s misstatements. But many of the injunctions in such cases are gotten through default judgments or stipulations, with no meaningful adversarial participation.

The brief further pointed to seven (7) different methods that plaintiffs were using to obtain default judgments:

(1) injunctions gotten in lawsuits brought against apparently fake defendants;

(2) injunctions gotten using fake notarizations;

(3) injunctions gotten in lawsuits brought against defendants who very likely did not author the supposedly defamatory material;

(4) injunctions that seek the deindexing of official and clearly nonlibelous government documents – with no notice to the documents’ authors – often listed in the middle of a long list of website addresses submitted to a judge as part of a default judgment;

(5) injunctions that seek the deindexing of otherwise apparently truthful mainstream articles from websites like CNN, based on defamatory comments that the plaintiffs or the plaintiffs’ agents may have posted themselves, precisely to have an excuse to deindex the article;

(6) injunctions that seek the deindexing of an entire mainstream media article based on the source’s supposedly recanting a quote, with no real determination of whether the source was lying earlier, when the article was written, or is lying now, prompted by the lawsuit;

(7) over 40 “injunctions” sent to online service providers that appear to be outright forgeries.

Well, isn’t that fun?  Months after the brief was filed in Hassell, Volokh published another article with the title “Solvera Group, accused by Texas AG of masterminding fake-defendant lawsuits, now being sued by Consumer Opinion over California lawsuits.”  What was clear from all of this is that website owners who have been victims of the scheme are likely watching and the authorities are too.  The US Attorney Generals office in the District of Rhode Island and the State of Texas both took interest in these situations…and I suppose it is possible that more will be uncovered as time goes on.

So how are these parties getting away with this stuff?  With the help of unscrupulous reputation management companies, associated defamation attorneys…and, unfortunately, trusting judges.  Some judges have taken steps to correct the problem once the issue was brought to their attention.  As for the attorneys involved, you have to wonder if they were actually “duped” as this Forbes article mentions or do they know what they are doing?  Either way, it’s not a good situation.  This isn’t to necessarily say that every attorney that is questioned about this stuff is necessarily guilty of perpetrating a fraud upon the court or anything like that.  However, it should serve as a cautionary warning that this stuff is real, these schemes are real, clients can be really convincing, and if one isn’t careful and fails to conduct appropriate and precautionary due diligence on a client and/or the documents provided to you by a client…it could easily be a slippery slope into Padora’s box.   After all, no one wants to be investigated by their state bar association (or worse) for being involved with this kind of mess.

Yes, there have been lots of great articles and discussion shedding light on the subject but the question then becomes, how do you tell the difference between a legitimate situation and a questionable situation?  The answer: recognize red flags and question everything.

RED FLAGS THAT SHOULD CAUSE YOU PAUSE

In December of 2016 I had the pleasure of traveling to Miami, FL for the Internet Lawyer Leadership Summit conference to present, for CLE, on multiple topics including this subject.  At that time I provided the group with some “red flags” based upon information I had then.  Since that time I have gained an even greater knowledge base on this subject simply by paying attention to industry issues and reading, a lot.  I have now compiled the following list of cautionary flags with some general examples, and practical advice that, at minimum, should have you asking a few more questions:

RED FLAGS FOR ATTORNEYS

  • If the entity or person feeding you the “lead” is in the reputation management industry.  You want to do some due diligence.  You could be dealing with a total above board individual or entity , and the lead may be 100% legit, BUT the industry seems to consist of multiple “companies” that often lead back to the same individual(s) and just because they are well known doesn’t necessarily mean they are operating above board.  Do your homework before you agree to be funneled any leads.
  • If the client is asking you to make some unusual adjustments to your fee agreement.  Your fee agreement is likely pretty static.  If the client is requesting some unusual adjustments to your agreement that make you feel uncomfortable, you might want to decline representation.
  • If the client already has “all of the documents” and you don’t actually deal with the defendant. We all want to trust our clients, but as some counsel already experienced, just accepting what your client tells you and/or provides you as gospel without a second thought can land you in hot water.  Consider asking to meet the defendant in person or have them appear before a person licensed to give an oath and check identification, such as a notary public of YOUR choosing to ensure the defendant is real and that the testimony that they are giving in the declaration or affidavit is real.  You want to make sure everything adds up and communication by telephone or email may not protect you enough.  When it comes to documents provided by the client, or the alleged post author, watch for the following:
    • Ensure that the address listed on any affidavit or other document isn’t completely bogus.  Run a search on Google – is it even a real address?  For all you know you could be getting an address to the local train track.
    • Ensure that any notary stamp on an affidavit is inconsistent with where the affiant purports to live. It will rarely make sense for an affiant list their address as, for example, Plains, New York but the notary stamp suggests the notary is based out of Sacramento, California. It will make even less sense if the affiant supposedly lives out of country, but is being notarized by a notary in the states.
    • Ensure that the notary is actually a real notary.  You can typically find record of notaries with the Secretary of State that the notary is in.  Make sure they are a real person.  If you really want to be sure that they actually signed your document, and that it wasn’t “lifted” from elsewhere (yay technology) check in with the notary and/or see if their records are on file somewhere publicly that you can check.
  • If the entity alleged to be the plaintiff isn’t actually a real entity in the state that they are purporting in the complaint to be from.  If the plaintiff is supposed to be ABC Ventures, LLC out of San Diego, California, there should be a record of ABC Ventures, LLC actually listed, and active, on the California Corporation Commission website.  The people that you are talking to also should, in theory, be the members/managers of such entity too.  For example, if you are always talking to a “secretary” you might want to insist on a more direct contact.
  • If the person or entity listed to be the plaintiff isn’t actually listed in the subject URL in the complaint.  If a plaintiff is going to bring a case, they should at least have standing to do so.  You should be cautious of any plaintiffs that aren’t actually at issue or fails to have a valid direct connection that would give them standing to bring the claim.
  • If the subject post doesn’t contain any defamatory statements in the first place.  Just because a post isn’t flattering doesn’t mean that it is actually defamatory.  Similarly, public documents aren’t typically seen as defamatory either. Who is saying it is false? Why is the statement false? What evidence supports the allegation that it is false?  
  • If the subject posting is outside of the statute of limitations for bringing claims in the state in which you intend on filing.  Now I know that some may disagree with me, and there may be bar opinions in different states that suggest otherwise, however, if you are presented with a post that is outside of the statute of limitations to bring a claim for defamation, subject to the single publication rule, and there is no real reason for tolling (like it was held in a secret document not generally public – which pretty much excludes the items on the internet) that may be of concern to you.  I wrote before on why statute of limitations is important, especially if you are the type to follow ABA’s Model Rules of Professional Conduct, Rule 3.1.  Even here in Arizona the bar has raised in disciplinary proceedings, in connection with other infractions, concerns about bringing claims outside of the statute of limitations, citing a violation of ER 8.4(d).  See generally, In re Aubuchon233 Ariz. 62 (Ariz. 2013).
  • If a case was filed in a wholly separate state from the Plaintiff and Defendant and you are asked to be “local counsel” to marshal documents to court or simply to submit it to a search engine like Google.  It is not improbable that local counsel will be called to assist with basic filings or to submit an order to Google.  It may be possible that such documents contain questionable materials.  It’s always a good idea to review the materials and give it a heightened level of scrutiny before just marshaling them off to the court or search engine.  This is especially true if the Plaintiff is no longer associated with prior counsel and is just looking for a different lawyer to help with this “one thing” as if a submission from an attorney bears more weight that anyone else submitting it.
  • If the plaintiff claims to already know who the author of a subject alleged defamatory post is, yet the post itself is anonymous.  Yes, it is possible that based on an author’s content, and how much detail is placed in such post, that one might be able to figure out who the author is. However, in my experience, many authors tend to write just vague enough to keep themselves anonymous.  If that is the case, without a subpoena to the content host, how does one actually know who the author is?  Some states like Arizona have specific notice requirements for subpoenas that are seeing identifying user information which require notice being posted in the same manner, through the same medium, in which the subject posting was made.  If a notice isn’t present on the website, there likely wasn’t a subpoena (assuming the website requires strict compliance with the law). Mobilisa, Inc. v. Doe, 170 P.3d 712, 217 Ariz. 103 (Ariz. App., 2007).
  • If the case was settled in RECORD TIME.  Often these matters are being “resolved” within a few weeks to only a couple months.  As most of us know, the wheels of justice are SLOW.
  • If the case is settled without any answers or discovery being done.  This goes to my prior point about knowing who the real author is, or, for that matter, that the allegations in a subject post are even false.
  • If notice about the case was not personally served by a process server.  Many states allow certified mailing for service.  Do you really know who is signing that little green form and accepting service?  Was some random person paid to sign that?

RED FLAGS FOR JUDGES (Consider all of the above generally plus the following)

  • If a Complaint is filed and shortly thereafter a stipulated judgment is presented requesting injunctive relief without the defendant ever actually making an appearance.  This seems to be one of the more popular tactics.  A way to curb this kind of abuse would be to hold a hearing where all parties must appear, in person (especially the named defendant signing the stipulation) before the court before any such injunctive order is signed and entered.
  • If an attorney files an affidavit of making a good faith attempt in order to locate the defendant but discovery was never conducted upon the hosting website.  Many sites will respond to discovery so long as their state laws for obtaining such information (like Arizona’s Mobilisa case) is followed.  Arguably, it is disingenuous for an attorney to say they have tried when they really haven’t.  Chances are, the real author may not even know about the case and entering a default judgment under such circumstances deprives them of the opportunity to appear and defend against the matter.
  •  If you order the parties to appear and then suddenly the case gets dismissed.  It thwarts the scheme when the court requests the parties to appear.  If this happens, in a defamation related case, it could be seen as a red flag.  The plaintiff may very well try to dismiss the action and simply refile under a different plaintiff and defendant name but for the same URL that was originally filed in the prior dismissed action.
  • If the order for injunctive relief contains URLs that were not originally part of the Complaint.  Sneaky plaintiffs and their counsel may attempt to include other postings, from the same or different websites, that are not really at issue and/or that were arguably written by other individuals.  Make sure that the URLs listed on the order are all the same as what is listed on the complaint.
  • If the complaint contains a host of posts, with wide range of dates, and the syntax of the posts are different yet the plaintiff claims that it was written by the same person.  In my experience, very rarely (though it does happen) will one person go on a binge and write a bunch of different posts about one person or entity.  There are typically more than one author involved so if any statement to the alternative should raise a red flag.

Some journalists that have been tracking these kinds of matters think that these schemes may be nearing an end.  I would like to think so, however, in my opinion these problems are far from over unless unsuspecting attorneys, judges, and even websites and search engines get a little more cautious about how they process these court orders for content removal, especially if they are older orders.  I have already discussed why I thought search engine de-indexing isn’t necessarily a viable reputation management solution and in part that is because, arguably, at least for now, Section 230 of the Communications Decency Act  bars injunctive relief, i.e., there is no obligation for websites to remove content anyway.  If a platform or search engine decides to remove content or otherwise de-index content, at least here in the U.S., they are doing so based upon their own company policy…not some legal duty.

In a perfect world none of these issues would exist. Unfortunately, that’s not the world we live in and the best we can do is be vigilant. Hopefully, through this article, I have provided some food for thought for attorneys and judges alike. You never know when such a situation will arise.

All information contained in this blog (www.beebelawpllc.blog.com) is meant to be for general informational purposes only and should not be misconstrued as legal advice or relied upon.  All legal questions should be directed to a licensed attorney in your jurisdiction.

Data Privacy: Do most people even deserve it?

Repeat after me: Everything connected online is hackable.  Nothing online is really ever totally private. Most everything about my online activity is likely being aggregated and sold.  This is especially true if the website is free for me to use. 

Okay, before we get going, realize that this article is not discussing things that we would like to think is relatively safe and secure…like banking and health records.  Even then, please repeat the statements above because even for those situations it still holds true.  What I’m going to talk about is the more run of the mill websites and platforms that everyone uses.

The truth of the matter is, most people never read a website’s terms of service or privacy policy and readily click the “I agree” or “I accept” button without knowing if they have just agreed to give away their first born or shave their cat.  Or, to be more realistic, that a free to use website which you don’t have to spend a penny to use is likely to track your behavior so they can render you ads of products and services that you might be interested in and/or sell aggregated data and/or your email address to marketers or other businesses that might be interested in you as a customer or to learn more about consumer habits in general.  Hello people…NOTHING IS FREE!  Indeed, most humans are lazy as sh*t when it comes to all of that reading and so forth because really, who in the hell wants to read all that?  Hey, I’m guilty of it myself,  although since I write terms of service and privacy policies as a way to make a living sometimes I will read them for pure entertainment.  Don’t judge me…I’m a nerd like that.

We are quick to use, click or sign up on a website without knowing what it is that we are actually agreeing to or signing up for…because we want entertainment and/or convenience…and we want it NOW.  Talk about an instant gratification society right? Think about the following situations as an example: Go to the grocery store and buy ingredients then take another 35-40 minutes to make dinner or simply use an app to order pizza? Send someone a handwritten letter through the mail (snail mail) or shoot them an email? Sit down and write checks or schedule everything through bill-pay? Pick up a landline phone (they do still exist) and call someone or send them a text from your mobile device?  Go to the local box office and purchase tickets to your favorite concert or buy them online? Stand in line at the theater for tickets or pre-pay on an app ahead of time and walk right in using a scan code through that app? Remember and type in your password all the time or ask your computer or use your thumb print to remember it all?  Take pictures with a camera that has film, get it developed and send those images to family and friends or take pictures with your phone and instantly upload them to a social media platform like Facebook to share with those same people, for free? By now you should be getting my point…and that is that we want convenience, and technology has been great at providing that, but for that convenience we often forget the price that is associated with it, including a loss of data privacy and security.

Low and behold, and not surprisingly (to me anyway), something like the Facebook – Cambridge Analytica situation happens and Every. Damn. Person. Loses. Their. Mind!  Why? Well, because mainstream media makes it into a bigger story than it is…and suddenly everyone is “conveniently” all concerned about their “data privacy.”  So let me get this straight: You sign up for a FREE TO USE platform, literally spend most of your free time on said platform pretty much posting everything about yourself including who your relatives are, what you like and don’t like, the last meal you ate, your dirty laundry with a significant other, spend time trolling and getting into disputes on bullsh*t political post (that are often public posts where anyone can see them), check in at every place you possibly go, upload pictures of yourself and your family…all of this willingly (no one is holding a gun to your head) and you are surprised that they sell or otherwise use that data?  How do you think they are able to offer you all these cool options and services exactly? How do you think they are able to keep their platform up and running and FREE for you to use?  At what point does one have to accept responsibility for the repercussions from using a website, signing up or clicking that “I agree” button?  Damn near ever website has a terms of service and privacy policy (if they don’t steer clear of them or send them my way for some help) and you SHOULD be reading it and understand it…or at least don’t b*tch when you end up getting advertisements as per the terms of service and privacy policy (that you didn’t bother to read)…or any other possible option that could be out there where someone might use your information for – including the possibility that it will be used for nefarious purposes.

I’m not saying that general websites/platforms that house such content shouldn’t have reasonable security measures in place and that terms of service and privacy policies shouldn’t be clear (though its getting harder and harder to write for the least common denominator).  But again, nothing is 100% secure – there will always be someone that will find away to hack a system if they really want to and it’s really your fault if you fail to read and understand a website or platforms terms of service and privacy policy before you use it or sign up for something.  Why should people scream and cry for the “head” of a platform or website when people freely give their data away?  That’s like blaming the car dealership for theft when you take your fancy new car to a ghetto ass neighborhood, known for high crime and car theft, leave it parked on a dark street, unlocked and with the keys in it.  “But they should have watned me it would get stolen!” Wait! What?Okay, maybe that’s a little too far of an exaggeration but seriously, the internet is a blessing and a curse.  If you don’t know of the potential dangers, and you don’t take the time to learn them, perhaps you shouldn’t be on it?  Remember, entertainment and convenience is the reward for our sacrifice of data privacy and security.

You know who has a heightened level of privacy, doesn’t have social media accounts hacked, data isn’t mined from online habits and doesn’t get spammed to death?  My dad.  Why? He doesn’t get on computers let alone get online and he doesn’t even own a smart phone.  True story.  The dude still has checks, writes hand written notes, and hunts for his meat and gardens for his vegetables. Can you say “off the grid”?  Want heightened data privacy?  Be like dad.

Repeat after me: Everything connected online is hackable.  Nothing online is really ever totally private. Most everything about my online activity is likely being aggregated and sold and sold.  This is especially true if the website is free for me to use.

All information contained in this blog (www.beebelawpllc.blog.com) is meant to be for general informational purposes only and should not be misconstrued as legal advice or relied upon.  All legal questions should be directed to a licensed attorney in your jurisdiction. 

 

 

Tax Season is Here: Identity Protection Tips!

I have been hearing more and more about people getting calls from people, acting like they are IRS agents, and threatening all kinds of crazy stuff.  In order to help out I have compiled some information that may be helpful to you.

1) The IRS is not going to e-mail you or contact you through social media and ask you for personal or financial information! If you are unlucky enough to get one of these things, forward that e-mail to phishing@irs.gov.

2) The IRS is not going to call you out of the blue and threaten you with arrest, deportation or some other crazy crap if you don’t pay! If you get a call from someone claiming to be an agent, report that call to the Treasury Inspector General for Tax Administration at 1-800-366-4484 or online at:https://www.treasury.gov/tigta/contact_report_scam.shtml

3) The IRS is not going to call and request financial information in order to send you a refund. If you get a call from someone asking for this kind of information report that call to the Treasury Inspector General for Tax Administration at 1-800-366-4484 or online at:https://www.treasury.gov/tigta/contact_report_scam.shtml

4) The IRS has their own legitimate website. It starts with “www.irs.gov“. If you stumble across any website that claims to be the IRS but doesn’t start with the “www.irs.gov” it is NOT the IRS. If you see this you should forward the impersonating link that you find to phishing@irs.gov.

Don’t just ignore these people…  Report them.