Fraud Focus – Household Support Fund scams, Fake USBs, Fake Emirates giveaways and Fake energy rebates and refunds

Cifas, the UK’s leading fraud prevention service, is highlighting the latest fraud threats, and warning the public to stay vigilant of the ever-changing tactics that scammers are using to extract money and information.

Household Support Fund scam

Cifas has been made aware that residents in Kent and Stevenage are being phoned by fraudsters advising them they are eligible for the boroughs’ Household Support Fund schemes, before requesting they provide bank details to process their application.

Household Support Funds administered by local authorities do not require banking details and councils will never request this information over the telephone.

People are advised to remain vigilant to unsolicited telephone calls purporting to offer access to a scheme or a service run by their local authority. Information about specific council support schemes is publicly available on the council's website, including information about the application process. If you believe you’ve fallen for this scam, then contact your bank immediately and report it to Action Fraud on 0300 123 2040 or Police Scotland by dialling 101.

Fake USBs being sent out with malware to infect devices

Cifas understands that scammers are sending out fake Microsoft Office USB sticks infected with malware. USBs are sent to randomly selected addresses in the hopes of convincing targets that they have inadvertently received a £439 Office Professional Plus package. When the recipient puts the USB in their computer, it directs the user toward calling a fake customer support line. Criminals then attempt to install a remote access program to breach and control the target’s PC, compromising passwords, and stored personal information.

Electronic devices contain a wealth of information about individuals which can then be stolen by criminals and used to commit subsequent crimes, such as identity fraud, or to seize control of accounts and make unauthorised transactions. If you believe you’ve been a victim of this scam, report it to Action Fraud on 0300 123 2040 or Police Scotland by dialling 101.

Fake Emirates holiday Whatsapp giveaway

According to Which? WhatsApp users have been targeted with a new scam impersonating the airline Emirates, with searches on Google for 'Emirates ticket giveaway' having risen by 4,050% in the last few weeks. Appealing to those wanting to get away this summer, the WhatsApp message invites you to click a link where you can ‘win’ a free holiday with Emirates. This scam has also appeared on Facebook.

WhatsApp users are being urged not to click on links to websites offering the chance to win a free holiday or hand over personal information to such websites. You can report a suspicious website to the National Cyber Security Centre. If unsure whether a website is genuine, use our Check a website tool in the first instance.

Fake Energy Rebates and refunds

Cifas has received reports of phishing emails purporting to be from your energy supplier. The email states that the recipient is eligible for a payment refund as they paid more than they should have in 2020-21 for their energy. The email contains a link which then directs the customer to fill out a form with their personal and financial information. The email has also bypassed spam filters, with the energy company logo being used but the email domain not being from the energy supplier.

Which? is continuing to warn members of the public of phishing emails purporting to be from Ofgem stating that the recipient is entitled to a refund and provided with a link to a fake portal to share their personal and financial details to claim the refund. Key email domains that have been identified include:

• info@rebate-ogem.com
• info@totalsolutions24-7.co.uk
• reservations@expedicar.ro, and
• info@globalskyward.com.

Consumers should always check the authenticity of emails before considering parting with personal or financial information. You can check if the offer is legitimate by contacting the organisation or service provider using details provided on other correspondence you have from them. You can report a suspicious website to the National Cyber Security Centre. If unsure whether a website is genuine, use our Check a website tool in the first instance.

Amber Burridge, Head of Intelligence for Cifas, said:

‘As the cost of living crisis continues, criminals are using a variety of ways to target unsuspecting victims in order to steal money and personal information that can be used to commit fraud.

‘Remember that no matter how an offer comes to your attention, there are very few occasions where there is a legitimate need to hand over your bank details. Fraud can be executed in stages, and criminals will try a combination of different techniques, from sending ‘free products’ to unsolicited calls purporting to be from a trusted organisation.

‘Think carefully before responding to unsolicited calls, texts or emails, and always challenge requests for personal or financial information. Just like you should never give out a one-time passcode, do not give anyone permission to remotely access your computer. It is crucial that we continue to remain vigilant of fraud and work together to stop criminals from exploiting the public.’

Anyone that believes they have been the victim of a scam should contact their bank or financial service provider immediately and report the fraud to Action Fraud on 0300 123 2040 or www.actionfraud.police.uk.

Contact us at press@cifas.org.uk