Britons are urged to be vigilant as a new “sophisticated” energy bill support scam circulates. Criminals are promising to help reduce bills but instead use victims’ card details to set up digital wallets.
The Cyber Defence Alliance, UK Finance, and Cifas have joined forces to warn the public about this new mobile phone scam, which is reportedly linked to international crime groups.
Scammers are luring people with fake offers on social media and deceptive text messages containing malicious links.
These messages often appear to offer help, such as reducing winter heating bills by applying for a living allowance or notifying you about an undelivered parcel.
However, the true goal of the fraudsters is to trick victims into revealing their bank’s one-time passcode (OTP), which allows the criminals to link the victim’s card details to a digital wallet they control.
Once victims click on the fraudulent link, they are directed to a fake website where they are prompted to enter their card information.
After submitting their details, the victims are asked to enter an OTP, which they are told has been sent to them.
In reality, the OTP comes from the victim’s bank, as the fraudster has already registered to open a digital wallet using the stolen card information.
Victims often enter the OTP believing they are completing a legitimate transaction, such as paying for services, goods, or fines. However, by doing so, they unknowingly authenticate the fraudster’s digital wallet creation.
People who believe they are receiving financial assistance for their fuel bills end up handing over sensitive personal details, mistakenly thinking they will receive payments or allowances. As a result, the criminals can make online and in-store purchases using the victim’s card information.
Dianne Doodnath, principal of economic crime at banking and finance industry body UK Finance, said: “Criminals are sophisticated and will make every attempt to steal personal and financial information.
“We encourage customers to be alert to potential threats of fraud, be cautious of sharing personal and financial information and avoid sharing OTPs with requests out of the blue. If consumers think they’ve been scammed, it’s important to contact their bank immediately and report it to Action Fraud.”
Garry Lilburn, operations director at Cyber Defence Alliance, said: “Our investigations have shown that international organised crime groups are orchestrating these scams and selling on compromised card details so other criminals can easily buy goods and services. It is vital consumers remain sceptical of offers that are too good to be true and that ask for card details.”
Mike Haley, chief executive of Cifas, added: “Scammers are using new technology to change their tactics at speed and find new ways to abuse consumers’ trust and steal from their bank accounts. “We urge people to stop and think twice about any communications received unexpectedly and never act on urgency.”
People can report suspect text messages by forwarding them to 7726.
The Take Five to Stop Fraud campaign urges people to protect themselves by pausing and asking themselves whether a request could be fake.
People can also get a second opinion from someone they know and trust, such as a family member, close friend, bank, or building society.
Many banks have signed up to the 159 service which helps people contact their bank by using an easy-to-remember number.
A spokesman for gas and electricity regulator Ofgem said: “Protecting consumers is our top priority, and it is alarming that customers are being preyed upon when people are already struggling so much with energy bills.
“We take attempts to exploit consumers very seriously and work with the National Cyber Security Centre to prevent these malicious attacks, identifying and rapidly responding to over 100 of these phishing campaigns last year alone.
“As energy regulator, on top of issuing our own warnings and advice, we have asked all energy suppliers to ensure clear and up-to-date information on scams is easily accessible on their websites.”
