Rich Hanson did not win the Powerball

Rich Hanson did not win the Powerball

Rich Hanson is the name of yet another prankster who claims to have won the Powerball on January 13th, 2015. However, Rich Hanson did not win the Powerball. Rich Hanson has taken to social media and even created a petition claiming that he was won the Powerball and will be giving away $10,000 to people who share his “winning” Facebook post. Obviously this is not true since Rich Hanson did not win the Powerball.

Rich Hanson powerball

Rich Hanson created a Facebook page called “An act of Kindness – lotto giveaway” and even started an online petition (that currently has no content on it) which claims that he will give away $10,000. Rich Hanson claims that if you share his post that you will receive $10,000 from him. The post he wants people to share is an edited image of Rich Hanson holding a Powerball ticket with the winning numbers. The image was obviously edited with software like Photoshop. The ticket does not contain lines B through E which is an immediate confirmation that the image is doctored. Rich Hanson also has many random images that look Photoshopped, including an image of him standing next to a lion. Even though the winning Powerball ticket image is obviously a fake the fact that Rich Hanson is comfortable with Photoshop helps debunk the Rich Hanson hoax even further.

Rich Hanson

UPDATE: And then there’s this:

real Rich Hanson photo

And this:

Rich Hanson hoax

Rich Hanson does not live in a state where winning tickets were purchased. Rich Hanson lives in Virginia and the winning tickets are from California, Tennessee, and Florida. Some of the winners including John and Lisa Robinson have already been identified.

The Rich Hanson hoax is simply a joke by Rich Hanson. It is not a malicious like-farming scam, survey-scam, or other type of scam that hijacks your Facebook account and posts on your behalf like the JohnAndLisaGiveBack scam. Rich Hanson purely wants to prank people and have a few laughs at the expense of others. It is unethical, deceptive, weird, and crazy, but it is also harmless compared to other similar hoaxes and scams.

There have been many Powerball hoaxes with people like Matthew Kimball and Rickstarr Ferragamo also claiming to have won the Powerball. These people also fraudulently state that they will give away their earnings to people who share their posts.

Don’t be fooled by the latest round of Powerball scams and hoaxes. If it sounds to good to be true it probably is! Do your research before you like, share, promote, or comment on anything. Do not share your personal information or fill out online surveys.

JohnAndLisaGiveBack Powerball Scam

JohnAndLisaGiveBack Powerball Scam

JohnAndLisaGiveBack is a scam. There is a website set up called that claims confirmed Powerball winners John and Lisa Robinson will be giving back money through the website. However, this is entirely false. John and Lisa Robinson did not set this website up and you will not receive $10,000 by visiting the website or following any type of instructions.

JohnAndLisaGiveBack Powerball Scam

When you visit you will notice a compelling “people remaining” counter. This is done to make a sense of urgency in order to persuade visitors to share links on the website to their social media friends and followers. If you follow instructions on the website or simply visit the website while logged into Facebook or another social media account your account will become compromised by what is technically called a manual share web attack, or Facebook manual share web attack.

A manual share web attack usually adds a rogue app or gains access to your social media account automatically by other means. Once this is done your social media account such as Facebook will begin to post links to the website on your behalf. It will also tag your friends in the post. This is known as a Facebook tag-jacking scam and is very common with these types of social media scams.

When I was investigating the JohnAndLisaGiveBack scam I noticed that it had a few fake testimonials from obviously fake people. I actually recognized the images and names of these people from other Facebook scams including one last month that claimed you could get a free Six Flags season pass if you visit a website and share a link.

This finding leads me to conclude that the people who crafted the JohnAndLisaGiveBack scam have had their noses in various similar Facebook scams for quite some time.

  • The JohnAndLisaGiveBack scam has been debunked by various websites.
  • The people countdown timer is fake. This usually starts at around 97. As you’re on the website, reading the page, the countdown timer quickly runs down to say “People Remaining: 6.” If you clear your cache, including all your browser’s cookies, and refresh the page, the counter magically starts up at 97 all over again.
  • Testimonials are fake and have been used for other Facebook scams.
  • People who have tried the website said that it does not work. The website claims that if you invite 2 friends and after the 2 friends click your link that you will get your cash instantly. People on Facebook and Twitter reported that they never got the cash they were supposedly supposed to get.
  • There are many Powerball scams. Also see: Matthew Kimball and Rickstarr Ferragamo.

If your social media account has been affected by this scam or you visited the malicious website you will need to clean your computer and change your social media passwords, as well as remove any rogue social media apps that may have been installed.

  • To remove malware from your computer download Malwarebytes and scan your computer for any threats.
  • To change your Facebook password go to Settings and click Password. Make sure to log out of any devices when promoted to do so.
  • To remove rogue Facebook apps go to Settings and click Apps on the side menu. Hover over a rogue Facebook app with your mouse and click the “x” next to it to remove it.

Matthew Kimball did not win the Powerball

Matthew Kimball did not win the Powerball

There are many Powerball hoaxes and scams since the winning numbers were announced on January 13th. One of the recent Powerball hoaxes is by a man named Matthew Kimball from Florida. Matthew Kimball did not win the Powerball but is claiming otherwise on Facebook. Matthew Kimball posted a message on Facebook that claims he will give away $15,000 to anyone who shares and likes his post. The post has an image of Matthew Kimball holding a Powerball ticket with the winning numbers; However, the date of the Powerball ticket in the image is covered with this finger. This suggests that Matthew Kimball printed out a new Powerball ticket with the old winning numbers.

Matthew Kimball did not win the Powerball

The Matthew Kimball hoax can be debunked because all reputable news outlets have stated that the Florida winner has not been identified. In Matthew Kimball’s Facebook post he claims that he took the winning Powerball ticket back to the store and the woman there almost had a heart attack. This is actually did happen to the real winner and has been published in various news reports. Matthew Kimball took this information and used it in his post to make it seem more realistic.

Do not be fooled by the Matthew Kimball hoax. Matthew Kimball did not win the Powerball. This is a common hoax/scam that has been spreading like wildfire. Recently a man named Rickstarr Ferragamo also claimed to win the Powerball and said he would give money away to people who shared his picture.

These types of hoaxes are usually done in order to gain attention. It is relevant to a like-farming scam where Facebook scammers share dubious information in order to generate Facebook likes for their pages and create potential customers. Satire web publications also do this in order to acquire web traffic and generate revenue from advertisements. Some malicious websites do this to phish personal information or spread malware.

In conclusion, Matthew Kimball did not win the Powerball. You will not get $15,000 for sharing his silly post. Do not be fooled!


Matthew Kimball





Rickstarr Ferragamo did not win the Powerball

Rickstarr Ferragamo did not win the Powerball

Rickstarr Ferragamo is the name of an amateur filmmaker and internet personality who claims to have won the Powerball. The Rickstarr Ferragamo Facebook page has various posts that claim the 23 year old won the Powerball. He claims that he will share $10,000 with 10 random people who share the image he posted. The image posted by Rickstarr Ferragamo is an edited image of the winning Powerball numbers. This fake information has also been published by a notorious satire publication who also have articles stating that Donald Trump bought every Powerball ticket number combination.

Rickstarr Ferragamo

Rickstarr Ferragamo did not win the Powerball. Rickstarr Ferragamo lives in New York according to his Facebook page and the ticket in the image clearly says “New York” above the Powerball logo. His posts also originate from New York. The winning Powerball tickets are from California, Tennessee, and Florida.

Do not be fooled by the Rickstarr Ferragamo Powerball scam. This has been fully researched as an internet hoax and Facebook like-farming scam. The Rickstarr Ferragamo is performing this misleading hoax in order to promote his Facebook page and acquire more likes. Satire web publications are also sharing this fake news in order to generate revenue via cost-per-click advertisements. The more visitors the website get, the more money they can generate.

How to remove SECURITY WARNING advertisements

How to remove SECURITY WARNING advertisements

The blue SECURITY WARNING webpage is a deceptive security warning that attempts to bait potential victims to call a tech-support phone number. The SECURITY WARNING advertisements will usually take up an entire webpage in a new tab or pop-up window. The SECURITY WARNING webpage contains a blue background and a warning message that says “your computer may be affected by a serious security threat. Your personal photos, credit card information and passwords may be compromised.”


The blue “SECURITY WARNING” message is fake and connected to tech-support scams. The SECURITY WARNING webpage is designed to bait unsuspecting computer users into calling a tech-support phone number. Once the SECURITY WARNING tech-support phone number is called the tech-support entity will attempt to gain remote connection to the target’s computer. They will usually ask callers to download a program such as AAMYY in order to give the entity a remote connection. When a remote connection is made the scammers will typically provide false information or download malware on to the victim’s computer. They will then ask for a payment in order to remove the threats they remotely placed on the computer system.

The SECURITY WARNING webpage is difficult to close. If you try to close the web browser window multiple browser notifications will appear that say something like “the page at says” with further misleading details. In order to close the SECURITY WARNING messages you will need to close multiple browser notifications or end the browser’s process in the Task Manager (Ctrl+Shift+ESC).

If you see SECURITY WARNING advertisements and are redirected to the blue webpage it does not mean that your computer is infected with malware or any threat. Sometimes these advertisements are embedded by website owners whom use a particular advertising platform. The types of webpages that usually take advantage of these aggressive and misleading advertisements include torrenting websites, video streaming websites, pornography website, gaming websites, gambling websites, file sharing websites, and more.

Advertisements that have been implemented by website owners can be blocked by use of free browser add-ons and extension such as AdBlock and uBlock Origin. These browser attachments are available for multiple internet browsers.

The misleading advertisements can also be generated by adware that has infected your computer. If your computer is infected with adware you may notice pop-up SECURITY WARNING advertisements on any website. If this is the case we suggest that you read the guide below to help you remove SECURITY WARNING adware and other threats from your computer.

Message Example

*** STOP: 0x0000007E (0xFFFFFFFFFC000000047, 0xFFFFFF800002EB5B48)
Your computer may be affected by a serious security threat. Your personal photos, credit card information and passwords may be compromised.

It is highly recommended you do NOT continue using your computer until you've contacted an official technician. Your IP may be under attack.

Please call this number as soon as possible.
CALL 888-880-0166 (PRESS 1)
An official technician will help you remove any adware/spyware on your computer.

How to remove adware from your computer

  1. Scan your computer with Malwarebytes
  2. Scan your computer with HitmanPro
  3. Uninstall unwanted programs
  4. Remove unwanted browser add-ons
  5. Cleanup and repair settings with CCleaner

Call Virus Removal Helpline: 1-866-521-2427

1. Scan your computer with Malwarebytes

The first step to remove adware is to download and install Malwarebytes Anti-Malware software in order to perform a full system scan for malicious files.

1. Download and Install Malwarebytes Anti-Malware software.

2. Open Malwarebytes and click the Scan Now button or go to the Scan tab and click the Start Scan button.

3. When the Malwarebytes scan is complete click the Remove Selected button.

4. To finish the Malwarebytes scan and remove detected threats click the Finish button and restart your computer if promoted to do so.

2. Scan your computer with HitmanPro

The second step to remove adware is to download and install a second opinion scanner called HitmanPro by Surfright in order to perform a full system scan for malicious files.

1. Download and Install HitmanPro by Surfright.

2. Open HitmanPro and click Next to start scanning your computer. *If you are using the free version you may chose to create a copy or perform a one-time scan.

3. When the HitmanPro scan is complete click the Next button.

4. To activate the free version of HitmanPro: enter your email address twice and click the Activate button.

5. Click the Reboot button.

3. Uninstall SECURITY WARNING and unwanted programs

The third step to remove adware is to uninstall unwanted programs in Windows Control Panel.

1. Open Windows Start Menu and go to the Control Panel.

2. In the Programs section click Uninstall a program. In earlier versions of Windows this is listed as “Add and remove programs.”

3. Search for the unwanted program you want to uninstall and double click it.

4. Remove SECURITY WARNING and unwanted browser add-ons

The fourth step to adware is to remove unwanted browser add-ons and extensions from Google Chrome, Mozilla Firefox, Microsoft Internet Explorer, and Apple Safari.

Google Chrome

1. Click the Customize and control Google Chrome icon and go to More tools > Extensions.

2. Search for the unwanted extension in the list and click the trashcan icon.

Mozilla Firefox

1. Open the Menu and click Add-ons.

2. Search for the unwanted add-on and click Remove.

Microsoft Internet Explorer

1. Go to Tools (Alt+X) and click Manage add-ons.

2. Search for the unwanted add-on in the list, select it with your mouse, and click Remove.

Apple Safari

1. Go to Safari > Preferences > Extensions.

2.  Search for the unwanted extension in the list and click the Uninstall button.

5. Cleanup and repair settings with CCleaner

The fifth step to remove adware is to download and install CCleaner by Piriform in order to delete leftover junk files, tracking cookies, registry entries, unwanted start-up tasks, and more.

1. Download and Install CCleaner by Piriform.

2. Open CCleaner and go to the main Cleaner screen. Click the Analyze button. When the process is complete, click the Run Cleaner button on the bottom right of the program interface.

3. Go to Tools > Startup and search for suspicious entries in each tab starting from Windows all the way to Content Menu. If you find anything suspicious click it and click the Delete button to remove it.

4. Go to the Registry window and click the Scan for Issues button. When the scan is complete click the Fix selected issues… button and click Fix All Selected Issues.

“Money Carlo” Match to Win Car Dealership Scam

“Money Carlo” Match to Win Car Dealership Scam

Don’t get too excited if you receive a “winning” Money Carlo Match to Win voucher in the mail that promotes your local car dealership. The Money Carlo Match to Win game is a marketing scheme utilized by various desperate car dealerships across the United States. The Money Carlo game will claim recipients won a certain amount of cash by peeling game piece tabs and matching objects like oranges, cherries, and 7’s. The Money Carlo game piece will usually arrive in the mail alongside advertisements, promotions, and coupons.

money carlo

The way the Money Carlo “scam” works is that a person will receive the Money Carlo game card and voucher in the mail from a local car dealership. The Money Carlo game card and attached invitation or voucher states that if you match a pair you will win $25,000, $5,000, $2,000, or $100 cash; However, this does not actually mean that you won anything. A simple way to determine if you are potentially being tricked is to know that most/all of the Money Carlo game cards will typically match the numbers 777 – 777. This can sometimes be an alleged $5,000 or $100 cash prize. The Money Carlo game will state that winners must call the car dealership and supply them with a confirmation number, as well as visit the location to compare the confirmation code to the car dealership’s prize board. The game voucher claims that the prize board at your local car dealership will determine if you have won – not the actual game piece that already says that you won.

The game also states that there is a 1:45,000 chance to win but we are unable to find any reports of real Money Carlo winners. We have noticed that car dealerships who utilize this tactic have many bad reviews by frustrated potentially customers who feel duped and lied to.

We spoke with several employees and ex-employees of certain car dealerships online who strongly suggest that this as a scam and deceptive marketing ploy. They described it as a deceptive marketing scheme used to acquire potential customers. The car dealerships that utilize this tactic want you to visit their location and sell you a car. In order to get you to do this you must visit the location with your game piece in hand.

I would not go as far as most people to classify the Money Carlo game as a “full-blown” scam, but I would say that it is a very unethical marketing technique and car dealerships who participate in this marketing scheme should be punished. Telling people that they won a large amount of cash when they did not is dishonest and unethical. It’s a terrible thing to do to people, and these bad car dealerships should be ashamed of themselves. If you receive these types of games in the mail in the future you may want to throw them away before you end up wasting your time visiting a dishonest and greedy car dealership. I also recommend to leave the car dealership a bad review online, on various websites like Yelp and Google, in order to put an end to this type of marketing scheme once and for all.

Image Sources Unknown

Beware of fake Domain Suspension Notice emails

Beware of fake Domain Suspension Notice emails

Beware of fake Domain Suspension Notice emails that claim to be sent from Google (Google Inc.). The emails usually target domain owners who have domain names registered by Google Domains.

fake Google Domain Suspension Notice emails

The fraudulent email message claims that Google has suspended your domain for a violation of the Google Inc. Abuse Policy. However, this is not true. The email is used to spread malware and is in no way associated with Google Inc. and Google Domains.

The email states that multiple warnings were sent by Google Inc. Spam and Abuse Department to give you an opportunity to address the complaints they received and that they did not receive a reply from you.

The message claims that they no choice but to suspend your domain name when you did not respond to their alleged attempts to contact you.

The email contains a link to download a “copy of complaints” they received. The downloadable file is actually dangerous and can spread malware across your computer – so don’t click the link in the email. The link will place several malicious application type files in different areas on your computer.

Known file

  • bg6504da.exe

Known paths

  • C: bg6504da
  • Start Menu > Programs > Startup
  • AppData > Roaming

Fake Domain Suspension Notice email

Domain Suspension Notice
Google Inc. <"registrar-abuse [at]">
to ee60950cce9044.
Why is this message in Spam? We've found that lots of messages from are spam.  Learn more
Dear Sir/Madam,
The following domain names have been suspended for violation of the Google Inc. Abuse Policy:
Domain Name:
Registrar: Google Inc.
Registrant Name: On behalf of OWNER
Multiple warnings were sent by Google Inc. Spam and Abuse Department to give you an opportunity to address the complaints we have received.
We did not receive a reply from you to these email warnings so we then attempted to contact you via telephone.
We had no choice but to suspend your domain name when you did not respond to our attempts to contact you.
Click here and download a copy of complaints we have received.
Please contact us for additional information regarding this notification.
Google Inc.
Spam and Abuse Department
Abuse Department Hotline: 480-203-2464

Scam claims that “Marlboro is Giving FREE Carton of Cigarettes to celebrate 100th Anniversary”

Scam claims that “Marlboro is Giving FREE Carton of Cigarettes to celebrate 100th Anniversary”

One of the latest internet scams circulating on Facebook claims that Marlboro is giving away a free carton of cigarettes to celebrate their 100th Anniversary. The scam claims that Facebook users who share an associated webpage will receive a free carton of cigarettes.

Also See: “Get-2-Free Marlboro Cigarette Carton to celebrate 110th Birthday” Survey Scam

The Marlboro is Giving FREE Carton of Cigarettes to celebrate 100th Anniversary is designed to do several things. First, the scammers want to phish personal information from users which can be used for a variety of purposes. The scam and associated webpage may also hijack Facebook user details such as passwords and email addresses. Once it has obtained personal Facebook details it may use the account to post content and send messages to people on the user’s behalf. The scam may also attempt to install rogue Facebook apps that can take control of the compromised Facebook account.

Marlboro is Giving FREE Carton of Cigarettes to celebrate 100th Anniversary

The “Marlboro is Giving FREE Carton of Cigarettes to celebrate 100th Anniversary” scam is entirely false. No one will receive a free carton of cigarettes by sharing a webpage, completing surveys, or doing anything else. This scam is in no way associated with Marlboro and Phillip Morris companies.

Marlboro carton facebook scam

If you notice a friend sharing the “Marlboro is Giving FREE Carton of Cigarettes to celebrate 100th Anniversary” webpage on Facebook make sure to let them know that they accounts may have become compromised and that their personal information may not be secure.

If you have fallen victim to this scam there are a few recommended steps that should be followed:

  • Change your Facebook password. To change your Facebook password go to Settings. In the general section the option to change your password will be the fourth selection. If promoted to log-out your account in other locations make sure to do so.
  • Remove rogue Facebook apps. In Settings, go to Apps, hover over the rogue app with your mouse, and click the X to remove it.
  • Scan your computer for malware. To scan your computer for malware we recommend to use a reputable malware removal tool such as Malwarebytes.

Scam Examples

Marlboro is Giving FREE Carton of Cigarettes to celebrate 100th Anniversary (160 Carton Remaining)
Claim your Cigarettes now offer ends today
Marlboro is Giving FREE Carton of Cigarettes to celebrate 100th Anniversary (160 Carton Remaining)
Follow these 2 simple steps below to Get your free Carton of Cigarettes.

Remaining Cartons: 334

Step 1: Share This Page

Step 2:Click On Send Button Below Then Select 5 Groups and hit SEND

Checking The Steps

Loader image not found
Click Here To Claim Your Cigarettes.

Razor Blades in Halloween Candy hoaxes linked to Behavior Disorders

Razor Blades in Halloween Candy hoaxes linked to Behavior Disorders

Some people are so desperate for attention on social media that they are willing to concoct the most ridiculous internet hoaxes. After Halloween many people have been sharing images of candy and food with razor blades in them. One unnamed Facebook user from Ventura, California published a post with a picture of a type candy item with a razor blade in side that says “WARNING – Found in Ventura tonight. Make sure you check all your kids candy.” However, the image shared is actually a pastry similar to McDonald’s apple pie.

razor blade candy ventura california

When other Facebook users see a post like the one that claims razor blades were found in candy in Ventura they might expect it to be real. They will like the post, share the post, and comment on the post, which essentially causes the post to go viral or gain attention. This is exactly what the prankster wants. The people who create these faux posts simply want attention. They want their hoax to go viral. They want to trick as many people as they can at the other person’s expense because they generally have little guilt or remorse about hurting others.

There are many reasons why people want this type of attention. Many of them have behavior disorders such as conduct disorder or something similar. Children with conduct disorder are irritable, have low self-esteem, and tend to throw frequent temper tantrums. Some may abuse drugs and alcohol. Children with conduct disorder often are unable to appreciate how their behavior can hurt others.

Several studies suggest that defects and injuries to certain areas of the brain can lead to these types of behavior disorders. Conduct disorder has been linked to particular brain regions involved in regulating behavior, impulse control, and emotion. Many children and teens with conduct disorder also have other mental illnesses, such as attention-deficit/hyperactivity disorder (ADHD), learning disorders, depression, substance abuse, or an anxiety disorder, which may contribute to the symptoms of conduct disorder.

Low socioeconomic status and not being accepted by their peers also factor into the development of behavior disorder. Behavior disorders are essentially the result of genetics, biology, environment, social status, and more.

Behavior disorders are linked to people who start internet hoaxes, especially hoaxes that attempt to cause FUD, or fear, anxiety, and shock. It’s a form of a prank where the culprit cannot regulate their impulses and don’t understand that their prank can harm others.

Other people perform these type of internet hoaxes in order to promote online content and cost-per-click advertisements. Some of the posts published on social media sites such as Facebook often contain links to third-party satire publications with embedded advertisements.

In conclusion, if you see a post on Facebook that claims razor blades were found in candy this season ignore it because chances are is that it is not true. We have been able to debunk most of the razor blade in candy hoaxes by performing a reverse image search on some of the images. Most of the images have been shared all over the web – and some are years old!

KFC did not serve a customer a deep fried rat (Hoax)

KFC did not serve a customer a deep fried rat (Hoax)

KFC did not serve a customer a deep fried rat but according to an old hoax that has circulating around the web lately a man in the United States says that KFC served him a deep-fried rat when he ordered from a restaurant in Wilmington, California. There are also other versions of this hoax that have been spreading around for years. For some reason, it has been noted by a reputable third-party that these hoaxes always use the same image of a piece of KFC “chicken” that appears to look like a rat.

KFC rat hoax

The image that circulates with the deep-fried KFC rat hoax is of a piece of chicken from the KFC menu. The recent false report claims that this incident occurred around June 12th. However, in the image you can see a jackolantern (Halloween decoration) in plain sight. You can also compare an image of the alleged deep-friend rat from KFC to an image of an actual deep fried rat and see the noticeable differences.

kfc deep fried rat

Deep-fried rat

KFC has responded to the recent hoax and patently false claims made by a Facebook user named Devorise Dixon who said he ordered chicken tenders from KFC in California but was instead given a deep-fried rat. KFC stated that they conducted an immediate investigation and no evidence was found to support the recent claim made by the Facebook user who also posted multiple images of his alleged order.

“KFC has made various attempts to contact this customer, but he is refusing to talk to us directly or through an attorney. Our chicken tenders often vary in size and shape, and we currently have no evidence to support this allegation. We have extended the opportunity to have an independent lab evaluate the product at our own expense, but the customer refuses to provide the product in question.”

It seems that Devorise Dixon created this hoax for attention as many news outlets have also covered this story and he seems to be having a good laugh about it on his Facebookpage. There is no other reasonable explanation for these false claims.

KFC rat hoax (Examples)

KFC: US Customer Says Fast Food Chain Served Him Deep-Fried Rat
Devorise Dixon posted a photo of his order from a Wilmington, Calif, KFC store. “Following an immediate investigation, no evidence was found to support this claim,” a KFC representative said.

KFC deep-fried rat hoax


kfc rat