We live more of our lives online than ever — banking, shopping, working, communicating. And while technology has made life more convenient, it's also opened the door to new kinds of crime. If you've ever received a suspicious email, had your credit card information stolen, or worried about your personal data being exposed — this post is for you.

Here's what you need to know about protecting yourself online and what the law says when things go wrong.

The Most Common Online Scams

Scammers are creative, and their tactics evolve constantly. But most scams fall into a few familiar categories:

Phishing Emails and Texts These are messages that look like they're from a legitimate company (your bank, Amazon, the IRS, etc.) but are designed to trick you into clicking a link and entering your personal information. Red flags include:

• Urgent language ("Your account will be suspended!")
• Misspelled company names or odd email addresses
• Links that don't match the company's actual website
• Requests for passwords, Social Security numbers, or payment

Romance Scams Scammers create fake profiles on dating apps and social media, build emotional relationships, and then ask for money. These scams are devastating — both financially and emotionally. They disproportionately target older adults but can happen to anyone.

Tech Support Scams A pop-up appears on your screen saying your computer is infected and you need to call a number immediately. The person on the phone then asks for remote access to your computer — and your credit card number. Legitimate tech companies will never do this.

Government Impersonation Scams Someone calls or emails claiming to be from the IRS, Social Security Administration, or immigration services, threatening arrest or deportation unless you pay immediately. Real government agencies do not operate this way.

Online Marketplace Fraud Fake listings on Craigslist, Facebook Marketplace, or other platforms. You send money for an item that never arrives — or you sell something and receive a fake payment.

Identity Theft: What It Is and What to Do

Identity theft happens when someone uses your personal information — name, Social Security number, credit card number, etc. — without your permission, usually to commit fraud.

Signs you may be a victim:

• Unfamiliar charges on your bank or credit card statements
• Bills or collection notices for accounts you didn't open
• Your credit score drops unexpectedly
• You stop receiving mail (someone may have changed your address)
• The IRS says a tax return was already filed in your name

If you think you're a victim, act quickly:

1. Place a fraud alert on your credit reports by contacting one of the three credit bureaus (Equifax, Experian, or TransUnion). They're required to notify the other two.
2. Freeze your credit. This prevents anyone from opening new accounts in your name.
3. Report the theft to the Federal Trade Commission at IdentityTheft.gov — they'll create a personalized recovery plan for you.
4. File a police report with your local San Jose police department. This creates an official record you may need for disputes.
5. Review your accounts and close any that have been tampered with.
6. Keep records of everything — every call, every letter, every report.

What Does California Law Say?

California has some of the strongest consumer protection and privacy laws in the country. Here's what's relevant:

California Consumer Privacy Act (CCPA) If a company collects your personal data, you have the right to:

• Know what data they're collecting
• Request that they delete it
• Opt out of the sale of your data
• Not be discriminated against for exercising these rights

California Identity Theft Laws Identity theft is a crime in California (Penal Code 530.5). Victims can:

• File a police report
• Place a security freeze on their credit at no charge
• Get fraudulent records cleared from their name
• Sue the person who stole their identity for damages

Data Breach Notification Law If a company experiences a data breach that affects your personal information, they are required by law to notify you. If they fail to do so, they can face significant penalties.

Protecting Yourself: Practical Steps

You don't need to be a tech expert to stay safe. These basic habits go a long way:

• Use strong, unique passwords for every account. A password manager (like Bitwarden or 1Password) makes this easy.
• Turn on two-factor authentication (2FA) wherever possible — especially for email, banking, and social media.
• Don't click links in unexpected emails or texts. When in doubt, go directly to the company's website by typing the address yourself.
• Monitor your credit regularly. You're entitled to free credit reports from each bureau once a year at AnnualCreditReport.com.
• Be cautious on public Wi-Fi. Avoid logging into bank accounts or entering sensitive information on public networks.
• Shred documents that contain personal information before throwing them away. Yes, old-school identity theft still happens.
• Keep your software updated. Those update notifications are annoying, but they often include important security patches.

When to Talk to a Lawyer

Most online scams and identity theft cases can be handled through the steps above. But there are situations where legal help makes a difference:

• A company failed to protect your data and you suffered losses as a result
• You're being wrongly pursued by a debt collector for a fraudulent account
• Someone used your identity to commit a crime and you need to clear your name
• You've lost a significant amount of money to a scam and want to explore recovery options
• A business is violating your privacy rights under the CCPA

The bottom line: The internet isn't going anywhere, and neither are the people trying to take advantage of it. But a little awareness goes a long way. Know the warning signs, take basic precautions, and don't be embarrassed if you do get scammed — it happens to smart people every day.

Dealing with identity theft or an online scam? Contact us for a free consultation. We'll help you understand your rights and figure out your next move.

‍