Elance provides a secure online work system. Please review these guidelines to further protect your account while hiring and working online.

Safeguard Your Account Access

• Choose a Safe Elance Username and Password Combination
• Protect Your Password
• Install and Update Online Protection Software
• Monitor Your Account for Suspicious Activity
• Who Should I Notify About Fraud or Scam Attempts?

Reporting Account Theft

• Take Steps to Secure Your Elance Account
• Take Steps to Protect Your Identity
• Account Lock

Avoiding Phishing and Spoof

• Spoof Emails
• Spoof Websites
• Typical Characteristics of Spoof Emails or Spoof Websites
• How to React to a Suspicious Email
  
• Reporting Spoof Email or Website

 Avoiding Common Fraud Scams

• Counterfeit Check or Money Order Scams
• Refund Fraud
• Job Scams

Safeguard Your Account Access

Choose a Safe Elance Username and Password Combination

Your Elance Username and password gives you access to your Elance account. Your Username is also used to identify you on Elance publicly and becomes part of your profile URL if you are a provider (username.elance.com). You should choose a unique username and a password combination that are not related to your email address or any of your other online accounts.  Using the same sign-in information for several online accounts means that if someone gains access to one of your accounts, they will have access to all of your other accounts as well.

Password strength is important to keep in mind.  Hackers use programs specifically designed to "crack" simple passwords. Follow these password guidelines to help keep your account secure.

Protect Your Password

• Elance staff will not ask you for your password. Never give out your Elance password to anyone.
• Change your Elance password every 30 to 60 days.  If you believe that someone has obtained your password,change it immediately.
• Review the privacy policies of third parties that offer you services to determine how your information will be protected.
• Never enter your Elance username and password on a page that doesn't have "elance.com" immediately before the first forward slash (/). If the address includes additional characters prior to the forward slash such as "@," dashes, etc., it is not an Elance page. Even if the Web address contains the word "Elance", it may not be an Elance Web site.  When in doubt, go directly to www.elance.com by typing it in the URL.
• If someone you are working with on Elance asks you to provide a password to access your website or server, be sure the password is not the same as your Elance password.

Install and Update Online Protection Software

• Anti-virus software. Install the latest version of anti-virus software and use it regularly to scan your computer. Computer viruses can not only log and record keystrokes, but can also steal other personal information from you computer. Be wary of any emails with attachments as they can carry viruses that can find and transmit information from your files.
• Spyware protection. Spyware is software that is downloaded onto your computer without your knowledge to collect personal information and record your internet usage. Maintaining current versions of spyware protection will help you further protect your personal information and identity .
• Internet firewalls. Firewalls are either software or hardware that controls access and the flow of information to and from your computer. Using a firewall helps prevent any unauthorized parties from gaining access to your computer. It is especially important to use a firewall if you have a high-speed connection and computer that is always connected to the Internet.

Monitor Your Account for Suspicious Activity

• Periodically check your account activity, workrooms, financial accounts, and preferences to ensure that no one has tampered with your account.
• If you see anything out of the ordinary with your Elance account, report it to Elance immediately and take action quickly to secure your Elance account.
• Elance sends automated alerts when certain information on your account is changed. It’s important that your Elance account settings are set to receive alerts and that your email account is current.

Who Should I Notify About Fraud or Scam Attempts?

If you suspect that a job posted on Elance may be part of a scam, please notify Elance immediately by sending an email to spoof(at)elance(dot)com and also contact one or more of the parties below:

• Federal Trade Commission toll free hotline: 877-FTC-HELP (877-382-4357)
• Federal Trade Commission http://www.ftc.gov/bcp/edu/microsites/idtheft/
• Internet Fraud Complaint Center (www.ic3.gov/)
• Non-emergency number for your local police department.

Reporting Account Theft

If you provided confidential information through a fake website or replied to a questionable email, you should take immediate measures to secure your Elance account and your identity.

Take Steps to Secure Your Elance Account

• Change your Elance password immediately and create a secure password. If the password on your email account is the same as your Elance account, you should also change your email password. Do not use the same password for both your Elance account and your email account.
• Contact Elance to inform us of the theft.
• Upgrade your browser. Browsers with the latest anti-phishing capabilities make recognizing spoof (fake) Web sites easier.
• Review your Elance Transaction History and contact Elance if you note any abnormal transactions.

Take Steps to Protect Your Identity

Your financial information is secure and encrypted on Elance. If you had provided your credit card, debit card, or banking details to an unknown source off Elance, please follow the steps below to protect your identity:

• Place a fraud alert on your credit reports, and then review them. Fraud alerts can help prevent an identity thief from opening credit in your name. You only need to contact one credit bureau since federal law requires that the one you contact must also alert the other credit bureaus.
• If you entered a credit card number, you should contact your credit card company and alert them to the situation. Follow your credit card issuer's instructions for formally documenting and addressing the problem.
• If you provided bank account information, you should contact your bank immediately and ask for instructions about protecting your account.
• File a police report with your local police or the police in the community where the identity theft took place. Make a copy of the report and note the date it was filed in case your credit card company or bank requires proof of the crime.
• File an identity theft complaint with the Federal Trade Commission. The Federal Trade Commission (FTC) maintains a database of identity theft cases. To file a complaint with the FTC, please go to their website: http://www.ftc.gov/bcp/edu/microsites/idtheft/

Credit Bureau Contact Information

Account Lock

If Elance suspects unusual activity on your account, to protect your account information, we may place a temporary lock on your account. If this occurs, please contact us to resolve the situation. We will also send you an email requesting for you to contact us.

Avoid Phishing and Spoof

Spoof Emails

Spoof emails are fake emails claiming to be sent by well-known companies in an attempt to steal your information. They are called "spoof emails" (also known as "hoax" or "phishing" emails) because they mimic the appearance of a legitimate website or company. When unsuspecting recipients reply to or click a link in the email and then provide sensitive personal information, such as  Elance passwords, social security numbers, banking information, or credit card numbers, the fraudsters use this information to commit identity theft.

An email message from Elance:

• Never asks you to provide financial account numbers, passwords, or other sensitive information through email.
• Does not require you to enter information on a page that cannot be accessed from the Elance site. When possible, you should avoid clicking links in emails. While Elance may send emails that contain links for your convenience, you can also copy the link and paste it into the Address/Location area of your Web browser.

Spoof Websites

Spoof websites are phony sites that have been created with the intention of tricking visitors into thinking the site represents a reputable organization.  Normally, the spoof website will have the same design  and a similar web address as the original website.  Be wary of links within a profile, job post, or PMB on Elance, as these are user-generated links and are not regulated by Elance.

Typical Characteristics of Spoof Emails or Spoof Websites

The email you received or website you are directed to may not be legitimate if it:

• Has a generic greeting like “Attention Elance Member.”
• Includes a request to provide personal information, to verify your password, or to confirm account information.
• Includes a forged Elance address in the "From" line of the email. For example, "From: support@elance.com" or "From: billing@elance.com".  Just because the sender line includes “elance.com” does not guarantee that the email is from Elance.
• Contains threats of account suspension or urges quick action to resolve problems with your account.
• Contains links to web pages that look exactly like Elance’s sign in page.

How to React to a Suspicious Email

• Do not send personal information using email. Elance will never ask you to send your account password or other sensitive information, such as credit card numbers, in an email.
• Never click on a link in an email if you are unsure of its origins, especially if the email asks for personal or financial information.
• Never enter your Elance username and password on a page that doesn't have "elance.com" immediately before the first forward slash (/).Even if the Web address contains the word "Elance", if it also includes additional characters prior to the forward slash, such as "@," dashes, etc., it is not a valid Elance page.
• When in doubt, open a new browser window and go directly to the Elance website (www.elance.com).
• Report the email by forwarding it to spoof(at)elance(dot)com.
• Monitor your account for suspicious activities that indicate that it has been compromised.

Important: If you have already replied to a fraudulent email with sensitive personal information or entered data into a bogus web page, please take immediate steps to protect your Elance account.

Reporting Spoof Email or Website

If you have any doubt as to whether an email or web page originated from Elance, report your suspicions immediately to help keep the Elance community safe.

To report a suspicious email:

• Use your email program to forward the message to spoof(at)elance(dot)com
  Important: In order for Elance to investigate your report, you must forward the email without adding attachments, adding text, or altering text.
• Once you have forwarded the email, you can delete it from your email account.

Avoiding Common Fraud Scams

Education is the best defense for identifying and preventing fraud. Never comply with a request to submit payment outside of the  Elance site, as this is most likely a scam and a violation of Elance policies.  If you believe any job posted on Elance violate our policies or are of a fraudulent nature, please immediately report the violation to help keep our community safe.

Below are some common Internet fraud schemes to be aware of:

Counterfeit Check or Money Order Scams

Counterfeit check or money order scams involve sending a fake check or money order and requesting that the recipient send some amount back via wire transfer or another payment method.  While the check or money order may initially appear to clear, it will ultimately fail (often 2 to 3 weeks later) and the bank will reclaim the funds from the victim’s account.  Never accept payment for any service via check or money order as they are easily counterfeited.   These fake cashier's checks and money orders may appear to be authentic, including the name of a legitimate United States bank and even containing the magnetic routing codes that appear along the bottom of the check.

On Elance, this may begin with an employer offering to pay a provider a large sum of money outside of the Elance site (by sending a check or money order) and then requesting a refund by wire transfer or some other payment method.  In another possible scenario, a provider may approach an employer and request that they help them “cash a check". They may even request that payment to be made back to them through Elance once the check has cleared. 

To protect yourself, only make and receive payments on the Elance website for work performed using Elance's Escrow service. You should only release funds from Escrow when the service has been performed to your specifications and all deliverables have been received.

For additional information on fraudulent money orders, call the Money Order Fraud Hot Line, run by the Inspection Service's Criminal Investigative Support Center, at (800) 372-8347.

Refund Fraud

Refund fraud is a variation of the Money Order Fraud scheme.

In the cases listed below, the scam artist will attempt to make a payment to the victim using a fraudulent payment source such as a stolen credit card. The victim is then requested to submit a refund back to a ‘client’, their company, or a third party using an untraceable, non-recourse payment agency, such as Western Union or MoneyGram. In some cases, the scam artist may request a refund via a traceable, but still non-recourse, payment source, such as wire transfer or PayPal.

Never agree to receive funds outside of Elance. If you receive money from a scam artist, you will be responsible for the reimbursement of funds.

Example 1- Refund our clients
An employer posts a job soliciting a service provider to assist with the processing of refunds owed to their clients. The employer typically claims their clients paid those funds, but for some reason cannot issue a refund directly to their client.  Note that if a legitimate employer can receive money from their client or make payment to you, they can also refund their own clients. 

Example 2- Canceling of services
An employer may post a job on Elance, make a payment to a service provider using a fraudulent payment source, and then tell their provider that the job must be cancelled. Rather than requesting that the funds be returned back through the proper channel on Elance, the employer asks the provider to make a refund to them outside the Elance system.

Example 3- Overpayment
In this case, the employer will attempt to purchase services from the provider and then overpay for those services through Elance. They will then claim the payment was an error and request that the provider issues a refund outside of the Elance system.

To ensure the security of your account, only make and receive payments on the Elance website using Elance's Escrow service. Release funds from Escrow only when the required services have been performed satisfactorily and all deliverables have been received.  To request a refund of funds held in Escrow, adjust the Terms of the job to reflect the new amount as agreed upon by both parties.  Once the other party agrees, the funds will be returned to the employer’s original payment source.

Job Scams

Never provide work samples for free and never pay up-front money for a job opportunity.  These types of jobs are against Elance policies and should be reported immediately.  If an employer is offering 100% commission or requires that you purchase certain goods or services as a condition of the job it is most likely a scam. 

Example 1:

“Tremendous work from home opportunity!  Earn up to $200 per hour simply by browsing the Internet! Once you are awarded the job, you must purchase a small manual that will guide you in your daily tasks.  The manual is a small investment compared to the returns you will receive through this opportunity.  I will give more specifics to the winner of the job.”

Example 2:

“We are an early stage start-up looking for a highly motivated individual to be a major contributor to the company's success. To start, you will be paid based on your performance solely on a commission basis.  Top performers typically earn more than $5k per week.” 

Example 3:

Long term opportunity for the right fit.  To be considered for this job, you must submit at least 10 complete articles in the following subject.  The winner will be paid $300 per article after they are chosen.

Other common promises intended to lure you into working for free or below your market rates:

• “This should be an easy job for someone who knows what they are doing."
• "If things go well, this will be a long term opportunity with greater payoff down the road."

Other Resources

• http://getsafeonline.org
• http://wiredsafety.org