Tsb Port Out Alert – 26/05/2018

There has been an increase in reports made in May by TSB customers relating to “port-out” fraud. Fraudsters are number porting a victim’s telephone number to a SIM card under their control and then using the number to access the victim’s bank accounts.

The increase in the number of reports corresponds with the timing of TSB’s computer system update, which resulted in 1.9 million users being locked out of their accounts. Opportunistic fraudsters are using TSB’s system issue to target individuals, which follows the increase in phishing and smishing communications also targeting TSB customers this month. Victims’ bank account and personal details including their phone number are collected by the fraudster, providing them with the information to execute the fraud.

Number porting is a genuine service provided by telecommunication companies. It allows customers to keep their existing phone number and transfer it to a new SIM card. The existing network provider sends the customer a Port Authorisation Code (PAC), that when presented to the new provider allows the number to be transferred across. This service can, however, be abused by fraudsters.

To gain control of the victim’s phone number, fraudsters convince the victim’s mobile phone network provider to swap their number on to a SIM card in the fraudster’s control. Once the fraudster has control of the number they are able to intercept the victims’ text messages, allowing them to use services linked to the victim’s phone number. This can include requesting an online banking password reset or access to any two factor authentication services.

Victims have reported large losses as a result of this fraud. One victim initially dismissed text messages received from their network provider containing a PAC number. Two days later£6,000 was removed from the victim’s TSB current account. The victim subsequently contacted their phone provider and was informed that someone contacted the provider purporting to be the victim and had cancelled their contract and transferred their number to a new SIM. This action allowed the banking fraud to take place.

Protect Yourself:

PAC Code notifications

If you receive an unsolicited notification about a PAC Code request, contact your network provider immediately to terminate the request. Also notify your bank about your phone number being compromised.

Clicking on links/files:

Don’t be tricked into giving a fraudster access to your personal or financial details. Never automatically click on a link in an unexpected email or text. Remember, criminals can spoof the phone numbers and email addresses of companies you know and trust, such as your bank.

Requests to move money:

A genuine bank or organisation will never contact you out of the blue to ask for your PIN, full password or to move money to another account.

Port-out Fraud versus SIM Swapping

Port-out fraud is often incorrectly referred to as SIM swap fraud. SIM swap fraud works in a similar fashion, however, instead of porting the victim’s number to a new network provider, the fraudster impersonates the victim and requests a new SIM card for their account. Once they have access to the new sim, they have access to the number.

TV Providers Discount Fraud

The National Fraud Intelligence Bureau (NFIB) have noticed an increase in Action Fraud reports where fraudsters are offering a discount on Television service provider subscriptions. Fraudsters are cold-calling victims, purporting to be from a Television (TV) provider offering a discount on their monthly subscription. Victims have been told the following: their subscription needs to be renewed; that part or all, of the TV equipment has expired and they are due an upgrade on the equipment/subscription. In order to falsely process the discount, the fraudster asks victims to confirm or provide their bank account details. The scammers may also request the victim’s identification documents, such as scanned copies of passports.

The fraudsters are using the following telephone numbers: “08447111444”, “02035190197” and “08001514141”. The fraudster’s voices are reported to sound feminine and have an Asian accent.

Later victims make enquiries and then discover that their TV service provider did not call them and that the fraudster has made transactions using the victim’s bank account details. 

This type of fraud is nationwide. Since the beginning of this year (2018), there have been 300 Action Fraud Reports relating to this fraud. From the reports received, victims aged over 66 seem to be the most targeted.

What you need to do

• Don’t assume a phone call or email is authentic: Just because someone knows your basic details (such as your name and address or even your mother’s maiden name), it doesn’t mean they are genuine. Criminals can exploit the names of well-known companies in order to make their scams appear genuine.

• Don’t be rushed or pressured into making a decision: a genuine company won’t force you to make a financial decisions on the spot. Always be wary if you’re pressured to purchase a product or service quickly, and don’t hesitate to question uninvited approaches in case it’s a scam.

• Stay in control: Have the confidence to refuse unusual requests for personal or financial information. Always contact the company yourself using a known email or phone number, such as the one written on a bank statement or bill.

Visit Take Five (takefive-stopfraud.org.uk/advice/) and Cyber Aware (cyberaware.gov.uk) for more information about how to protect yourself online.

FIFA 2018 World Cup Alert

The 2018 FIFA World Cup will take place from 14th June – 15th July 2018. The worldwide demand for match tickets, flight tickets, and somewhere to stay throughout the competition is expected to be significant. Those planning to travel should exercise caution when considering the purchase of tickets or accommodation because the event is highly likely to be targeted by fraudsters looking to take advantage of unsuspecting fans.

Fraudsters will likely be posing as;

– Official World Cup ticket vendors or private individuals attempting to sell on a match ticket via online marketplace.

– A fraudulent website or operator offering non-existent flights or other transport to host cities.

– An accommodation booking service, hotel or operator, offering seemingly convenient accommodation in one of the host cities for the duration of the game.

– Lottery or competition organisers claiming that you’ve won a prize or cash related to the tournament.

 Action Fraud received over six hundred reports and intelligence submissions in relation to the previous World Cup so it’s vital that football fans exercise caution when considering a purchase or making a transaction.

Protect yourself: 

  • Listen to your instincts: If something feels wrong then it is usually right to question it. Fraudsters will use the promise of steep discounts to lure you into handing over your money or revealing personal/financial details.
  • Clicking on links/files: Don’t be tricked into giving a fraudster access to your personal or financial details, and never automatically click on a link in an unexpected email or text.
  • Visit the Action Fraud website and take a look at their Ticket Fraud, Holiday Fraud and Lottery Fraud advice pages before making any decisions or bookings.
  • For useful advice and information on the World Cup please visit the Government Guidance Pages: https://www.gov.uk/guidance/be-on-the-ball-world-cup-2018

Fifa World Cup 2018 Ticket Alert

The 2018 FIFA World Cup will take place from 14th June – 15th July 2018.  The worldwide demand for match tickets is expected to be significant. Action Fraud have been alerted to several websites which are offering World Cup Tickets for sale, some at highly inflated prices. A FIFA spokesperson said:

“FIFA regards the illicit sale and distribution of tickets as a very serious issue and it has been reminding all football fans that FIFA.com/tickets is the only official and legitimate website on which to buy 2018 FIFA World Cup tickets.”

“FIFA has received various complaints and enquiries by customers of non-authorised ticket sales platforms, and has consistently confirmed that these companies cannot guarantee access to the stadiums as the respective tickets may be cancelled. Insofar customers are at risk of investing a high amount of money (also for travelling and accommodation) without having the certainty to actually be able to attend the matches.”

FIFA have also warned that “any tickets obtained from any other source, such as ticket brokers, internet auctions or unofficial ticket exchange platforms, will be automatically rendered void and invalid”.

Action Fraud received over six hundred reports and intelligence submissions in relation to the previous World Cup so it’s vital that football fans exercise caution when considering a purchase or making a transaction.

Protect yourself:
• Don’t take the risk. Tickets for the World Cup 2018 can only be purchased directly from FIFA. For more information, please visit www.FIFA.com/tickets

• A FAN ID is required for fans to be able to enter the 2018 FIFA World Cup stadiums. Exercise caution if using a third party to obtain your FAN ID for you. You may be charged inflated costs for the service and your personal details may be compromised. For more information, please visit www.fan-id.ru.

• Visit the Take Five website for the latest guidance on how to avoid becoming a victim of fraud.

• For useful advice and information on the World Cup please visit the Government Guidance Pages; https://www.gov.uk/guidance/be-on-the-ball-world-cup-2018

Action Fraud Alert – Fraudulent Cryptocurrency Investments And Fake Endorsements

Fraudulent websites alleging to offer cryptocurrency investments are dishonestly using the image of Martin Lewis, the founder and editor for moneysavingexpert.com, as an endorsement for their companies.

The adverts using Martin Lewis to promote illicit schemes can be found on social media and other websites. Clicking on the advert takes you to the full article where Martin Lewis image is presented along with fake quotes recommending investments in bitcoin and other digital currencies with the fraudulent “company”. Alternatively clicking on the advert will take you to a page where you are required to input your contact details, the suspect company then phones you and encourages you to invest.

Martin Lewis has published a warning to the public saying “I don’t do adverts. If you ever see one with my face or name on it, it is without my permission, and usually a scam”. The full article can be found here; https://blog.moneysavingexpert.com/2018/03/13/martin-lewis-spread-word-dont-believe-scam-bitcoin-code-bitcoin-trading-ads/?_.

Similarly these fraudulent websites are also misusing images and fabricating recommendations from the investors on Dragons Den. These adverts also claim the investors on the panel trade in cryptocurrencies using their services to try and legitimise their company.

What you need to do

  • Don’t assume it’s authentic: Professional-looking websites, adverts or social media posts don’t indicate that an investment opportunity is genuine. Criminals can exploit the names of well-known brands or individuals to make their scams appear legitimate.
  • Don’t be rushed or pressured into making a decision: A genuine bank or financial organisation won’t force you to make a financial transaction on the spot. Always be wary if you’re pressured to invest quickly or promised returns that sound too good to be true.
  • Stay in control: Avoid unsolicited investment offers, especially those over cold calls. If you’re thinking about making an investment, get impartial advice from an independent financial adviser – never use an adviser from the company that contacted you, as this may be part of the scam.
  • Visit Take Five (takefive-stopfraud.org.uk/advice/) and Cyber Aware (cyberaware.gov.uk) for more information about how to protect yourself online.

Action Fraud Alert – Magazine Advertise Debt Alert

Victims receive a telephone call from someone purporting to be a bailiff enforcing a court judgement, attempting to recover funds for a non-existent debt. The fraudsters state the debt originates from the victim not paying a magazine advertisement subscription.

A variety of magazine names and publishers are being used by the fraudsters, who also commonly use the names of certified Bailiff Enforcement Agents such “Scott Davis”, “Stephen King” and “Mark Taylor”. These are names of certified Bailiff Enforcement Agents employed by debt enforcement companies.

The fraudsters request that the debt be repaid by bank transfer. If the victim refuses, they threaten to visit the victim’s home or place of work to recover the debt that is owed.

Once the money has been transferred, victims are not provided with receipt details of the payment or contact details. Later when victims make enquiries, they’ll discover that the debt did not exist, and often that no advertisement was placed.

This type of fraud is nationwide. Since 2017, there have been 52 Action Fraud Reports relating to this fraud. From the reports received, there are a range of different businesses and individuals being targeted.

Protection Advice:

1. Listen to your instinct: just because someone knows your basic details, such as your name and address, it doesn’t mean they are genuine.

2. Stay in control: always question cold callers: always contact the companies directly using a known email or phone number.

3. Don’t be rushed or pressured into making a decision: a legitimate company will be prepared to wait whilst you verify information.

If you have been affected by this, or any other type of fraud, report it to Action Fraud by visiting www.actionfraud.police.uk or by calling 0300 123 2040.

Visit Take Five (takefive-stopfraud.org.uk/advice/) and Cyber Aware (cyberaware.gov.uk) for more information about how to protect yourself online.

Action Fraud Alert – Online Marketplace Fraud Advice For Sellers

Action Fraud has received several reports indicating that sellers of items on online marketplace websites are falling victim to fraud by bogus buyers. Typically, the bogus buyers contact the seller wanting to purchase the item for sale and advise they will be sending the requested amount via PayPal or other electronic payment method. The seller then receives a fake, but official looking email stating they have been paid more than the asking price and to send the difference back to the buyer’s bank account. In reality, no money has ever been sent to the seller; the bogus buyer has spoofed an email and purported to be an online payment company. All contact is then severed with the seller.

It is important to remember that selling anything could make you a target to these fraudsters however the NFIB has identified that those offering sofas, large furniture and homeware are particularly vulnerable.

Protection Advice

• Don’t assume an email or phone call is authentic. Remember criminals can imitate any email address. Stay in control. Always use a trusted payment method online, such as Paypal, and have the confidence to refuse unusual requests for payment like bank transfers.

• Don’t be rushed or pressured into making a decision. Always verify that you have received payment from the buyer before completing a sale.

• Listen to your instincts. Criminals will try and make unusual behaviour, like overpaying, seem like a genuine mistake.

Visit Take Five (takefive-stopfraud.org.uk/advice/) and Cyber Aware (cyberaware.gov.uk) for more information about how to protect yourself online.

If you have been affected by this, or any other type of fraud, report it to Action Fraud by visiting www.actionfraud.police.uk or by calling 0300 123 2040.

NFIB Alert – False Telephone Preference Service Calls

False claims of Telephone Preference Service:

Fraudsters are cold-calling victims, falsely stating that they are calling from one of the well-known UK telecommunication service providers. They call victims claiming to provide a ‘Telephone Preference Service’ – an enhanced call-barring service, which includes barring international call centres.

The fraudsters ask victims to confirm/provide their bank account details, informing them that there is a one-off charge for the service. Victims instead see monthly debits deducted from their accounts, which they have not authorised. The fraudsters often target elderly victims.

In all instances, direct debits are set up without following proper procedure. The victim is not sent written confirmation of the direct debit instruction, which is supposed to be sent within three days.

On occasions when victims attempted to call back, the telephone number provided by the fraudster was either unable to be reached or the victim’s direct debit cancellation request was refused.

During 2017, there were 493 Action Fraud Reports relating to this fraud.

Protect yourself:

There is only one Telephone Preference Service (TPS). The TPS is the only official UK ‘do-not-call’ register for opting out of live telesales calls. It is FREE to sign-up to the register. TPS never charge for registration. You can register for this service at http://www.tpsonline.org.uk.
You will receive postal confirmation of genuine direct debits. If you notice unauthorised payments leaving your account, you should contact your bank promptly.
Always be wary of providing personal information, or confirming that personal information the caller already claims to hold is correct. Always be certain that you know who you talking to. If in doubt hang up immediately.
If you have been affected by this, or any other type of fraud, report it to Action Fraud by visiting www.actionfraud.police.uk or by calling 0300 123 2040.

How To Protect Your Email Against Criminals