Full Report
Don’t let fraud disrupt your civic duty. Learn how to spot and avoid political donation scams that target voters through robocalls, fake websites, and deepfakes.
Analysis Summary
# Best Practices: Mitigating Political Donation and Election Scams
## Overview
These practices address the rising threat of politically driven fraud, including robocalls, deepfake voice cloning, and fraudulent websites. These scams aim to steal financial assets and Personally Identifiable Information (PII) by exploiting the urgency and trust associated with election cycles.
## Key Recommendations
### Immediate Actions
1. **Verify via Official Channels:** Never click links in unsolicited texts or emails. Navigate directly to a candidate’s official `.gov` or verified `.com` website by typing the address into your browser.
2. **Use Protected Payment Methods:** Only use credit cards for donations. Avoid wire transfers, gift cards, or P2P apps (Venmo, Zelle), as these offer no fraud protection or dispute recourse.
3. **Silence Unsolicited Callers:** If you receive a political robocall—even one that sounds like a known candidate—hang up. Do not engage or press buttons to "opt-out," as this confirms your number is active.
4. **Identify Urgency Red Flags:** Be skeptical of any communication creating an artificial sense of crisis (e.g., "Donate in the next 10 minutes or the election is lost").
### Short-term Improvements (1-3 months)
1. **PII Sanitization:** Refrain from participating in social media polls or "surveys" that require name, DOB, or contact info, as these are often data-harvesting fronts for future identity theft.
2. **Enable Call Filtering:** Deploy mobile carrier features or third-party apps that flag "Potential Spam" to reduce the volume of robocalls.
3. **Review Registration Status Safely:** Only check voter registration via official state or local government portals (typically ending in `.gov`).
### Long-term Strategy (3+ months)
1. **Deepfake Awareness Training:** Educate family and staff on the reality of AI-driven voice cloning. Establish a "family/organization code word" to verify identity if a suspicious "urgent" request is made via phone.
2. **Identity Monitoring:** Use a credit monitoring service to alert you if PII stolen during fake voter registration scams is used to open fraudulent accounts.
## Implementation Guidance
### For Individuals and Small Organizations
- **Strict Verification:** Treat every unsolicited political message as a phishing attempt by default.
- **Financial Hygiene:** Dedicate one specific credit card for all charitable/political giving to make spotting fraudulent charges easier.
### For Medium Organizations
- **Security Awareness Training:** Incorporate "Social Engineering in Current Events" (like election cycles) into monthly security briefings to help employees recognize how external scams can lead to Business Email Compromise (BEC).
- **Communication Policy:** Advise employees not to use corporate email addresses for political newsletter sign-ups.
### For Large Enterprises
- **Brand Protection:** Monitor for domain typosquatting that might impersonate your brand’s political action committee (PAC) or corporate social responsibility (CSR) initiatives.
- **Threat Intelligence:** Integrate feeds that track new phishing domains associated with high-profile election keywords.
## Configuration Examples
While primarily behavioral, technical defenses include:
* **Email Filtering:** Configure SPF, DKIM, and DMARC to prevent spoofing of organizational domains that might be used for political outreach.
* **SMS Filtering:** On iOS/Android, enable "Filter Unknown Senders" to segregate unsolicited political texts from primary messaging folders.
## Compliance Alignment
* **NIST CSF (Identify/Protect):** Implementing identity verification and awareness training to mitigate social engineering.
* **CIS Controls (Control 14):** Security Awareness and Skills Training to recognize deepfakes and phishing.
## Common Pitfalls to Avoid
* **Trusting Caller ID:** Scammers frequently "spoof" numbers to make it appear as though a local campaign office is calling.
* **Participating in "Incentivized" Polls:** Avoiding rewards (gift cards/prizes) offered for completing political surveys, which often require "shipping fees" that steal credit card data.
* **Assistance from Strangers:** Never let an unsolicited third party "help" you register to vote over the phone or at your door; handle registration through official government offices.
## Resources
* **Federal Election Commission (FEC):** [fec[.]gov] - To verify legitimate PACs and candidates.
* **FTC Consumer Advice:** [consumer[.]ftc[.]gov] - For reporting fraud and scam calls.
* **Huntress Blog:** [huntress[.]com/blog] - For technical deep dives into AI-enhanced fraud and BEC tactics.