These scams are being conducted through both email and malicious
Some of the email scam messages request personal information, which
can then be used for identity theft. Other email scam messages offer
to deposit the stimulus funds directly into users’ bank accounts. If
users provide their banking information, the attackers may be able to
withdraw funds from the users’ accounts.
The website scams entice users by claiming that they can help them get
money from the stimulus fund. These websites typically request payment
for their services. If users provide their credit card information,
the attackers running the malicious sites may make unauthorized
charges to the card, or charge users more than the agreed upon terms.