People are buying high-ticket items on eBay, filing returns, then sending back thank-you cards instead of the product. Sellers are reporting the scam (with proof the return label is on a tiny envelope) but get stuck in an endless appeals process. Good luck getting eBay on the phone to help. I’d steer clear for now.
Small-biz tip: Don't overlook this digital danger

Are you the type of business owner who forgets about ex-employees as soon as they’re gone? Failing to remove former employees’ access to your systems and data could lead to security breaches. Don’t let poor offboarding practices be the weak link in your cybersecurity chain.
How improper offboarding can hurt your business
Whenever an employee leaves the organization, you must remove their access to company systems and data. That’s especially true if you’ve laid off an employee. They may feel a sense of anger or resentment towards the company, which makes them more likely to be malicious.
It’s more common than you might think. A recent study from Beyond Identity examined how ineffective offboarding impacts a business’ cybersecurity. They found that one in three employers has been hacked due to ineffective offboarding.
Oh, and most former employees say they can still access company files. Researchers say 91% of employees can still see private files after offboarding earlier last year. Do you want former employees to know what you’re doing a year later? Probably not!
Plus, the study found only 21% of employers deactivated an employee’s account immediately after they let the worker go. It took 29% a whole week to cut the strings.
Overall, businesses estimated they lost $7,687 to ineffective offboarding. In other words, it’s a mistake you can’t afford to make. Want to build better business practices? Here are the three lessons Kim has for fellow business owners.
Offboarding dangers for small-business owners
⚠️ If you don’t completely cut off former employees, you’re taking on a ton of risks, like:
- Insider threats: Former employees who can still access company systems and data can steal confidential information or sabotage your systems.
- Social engineering: I talk a lot about how dangerous phishing scams are. They can level a company’s computer systems. Former employees are especially dangerous because they know social details about the workplace, which can help them access sensitive information or networks.
- Revenge: In some cases, fired employees may attempt to cause harm to their former employer out of revenge, such as launching a denial-of-service attack or spreading false information about the company.
Beyond Identity’s survey found that 86% of employees have considered taking negative actions against a former employer. People who actually went through with retaliation had diverse reasons: 37% said they didn’t get a raise, while 29% cited a bad relationship.
People had a diverse range of revenge tactics, too. Most of them — 42% — used corporate accounts to access subscriptions, while 34% viewed company financial information and left bad reviews. Others had creepier methods, like reading employees’ emails or hacking into the backend of a company website.
Area codes and numbers that are probably spam

Whew, the election’s over. The onslaught of robocalls and texts is over, too … right? Nope.
There are fewer political calls and messages, sure, but there are always scammers and spammers. It may be easier for these creeps to get a hold of us now that our phones aren’t constantly lighting up with election-related notifications.
Sellers, beware of this new eBay scam
Secret Santa scam
A viral gift exchange claims you’ll get 36 presents for the price of one, but it’s too good to be true. Here’s how this pyramid scheme leaves most people empty-handed.
Clever election scams targeting you

Fake political calls, texts and videos are nothing new. They’ve been flooding Americans’ phones for months. Some have a simple goal: Steal your money. (I’ll pass along a few tips for spotting those below.) Others are looking for detailed personal info, like a text scam warning there’s a problem with your ballot.
Best way to stop spam texts for good

“Official notice from USPS. Your delivery is on hold.” I wonder why …
“Hi, how are you?” Who could this be?
Holiday package scam alert
Scammers are posing as delivery services with fake package problems. One wrong click, and they’ll swipe your passwords. Here’s how to stop them.
Top #1 holiday scam: fake iPhone 16 Pro giveaway
Cybercriminals are targeting holiday shoppers with a fake ‘free iPhone’ scam that can steal your financial data. Here’s how to stay safe.
iPhone digital wallet attack
Cybercriminals are zeroing in on iPhone users with fake Apple emails, tricking them into handing over credit card info. Here’s how to spot the scam and stay protected.
The fight that broke Netflix
Mike Tyson vs. Jake Paul pulled in 60 million viewers. Paul claimed the win, but the real champ was Netflix. Also coming up: a robot dog patrolling Mar-a-Lago, a QR code email scam warning, and Kim’s chat with NordPass VP Gerald Kasulis about the shocking passwords people still use and how a password manager can save the day.
3 security steps every small business needs to take right now

Business accounts can be hacked as easily as personal accounts. Imagine all your hard work being held at ransom by a hacker or your data falling into the hands of someone who can sell it to the competition.
You need to secure your business as best you can, and here are three crucial tips to get started. This tip is brought to you by our sponsor, NetSuite.
Stop annoying political texts

I’ve heard from the presidential candidates, their families and every politician within a 100-mile radius. The texts don’t stop in October of an election year, especially when it comes to a presidential election.
5 things you should never put on a resume
In life, few rewards come without risk. Take your dream job, for instance. If you want to land that position you’ve been dreaming about, you’ll need to make a great first impression.
When you’re applying for jobs, that all comes down to your resume. Every little detail makes a big difference. For example, a small mistake could take you out of the running for a job you’re qualified for.
Massive data leak impacts 1 in 3 Americans

Data broker MC2 Data left more than 100 million records of Americans exposed online for anyone to copy, grab, forward, sell on the Dark Web — you name it. This comes only a month after the National Public Data breach of 2.9 billion records. I’m getting so tired of these data broker companies and people-search sites screwing up, and it’s you and me who have to pay for their mistakes.
New malware looks like a Google login page
Ever get stuck on a webpage that won’t close? A new scam makes it even harder to escape.
Sextortion scams are getting more realistic
Got an email saying your webcam was hacked? Don’t worry — it’s just another sextortion scam. I’ll tell you why it’s all fake and how to stay safe.
How I avoided a $40K scam
Paul emailed me about a $39,500 invoice, demanding I pay up ASAP. The problem? I didn’t owe him a cent. Plus, AI is eyeing 60 million jobs, Gen Z is trauma dumping on TikTok, and a woman was rescued after falling 60 feet off a mountain thanks to her navigation app.
Need some extra cash? 15 jobs you can do from home

Working remotely isn’t suitable for everybody. But in the wake of the pandemic, it has seen a considerable boon globally. Tap or click here for legit ways to find work-from-home jobs.
If you’re interested in earning a living from home, there is no better time to get involved with the right opportunity.
Are scammers using infidelity to manipulate you?
“Your spouse is cheating on you.” That’s the shocking line behind a new sextortion scam. The message includes a link claiming to offer “proof,” but it’s a trap to get you to click. Plus, Gen Z is moving away from Google, and strange science wins big at the Ig Nobel awards.
Big Tech listens to your convos
At least one media group gathers info from conversations and uses it for targeted ads. Plus, a new sextortion scam tactic, Amazon’s “Just Walk Out” tech hits more NFL stadiums, and police are towing Teslas from crime scenes.