Scamwatch |
Welcome to our service that we call SCAMwatch where we will place all the common and new scams and attacks that we have reported to us. This is NOT a definitive list and you should always be careful to ensure that you don't inadvertantly give away any usernames,passwords or PIN numbers.
First - Some general rules:
1. Your Bank or Building Society will NEVER ask you for your password or PIN Number
2. Paypal , Ebay or Worldpay will NEVER ask you for your password or PIN Number
3. Amazon will NEVER ask for your password or username
4. If you are asked to "Login and Confirm your details" you should automatically assume that this is a SCAM or PHISHING attack where someone is trying to get your details.
Also see our advice on basic Computer Services ... Click Here
Latest Reports we have:
March 2012
LINKED IN - Info Scam
First we saw FaceBook scams, now we are seeing these Phishing messages where the sender is trying to get your username and password for your LinkedIn Account.
What you get: An email indicating that you have got a number of invitations that you need to see or have missed, They give a direct link which of course takes you into a login page that looks very familiar, so you type in your username and password which of course are recorded by the sender. They can now login to your account and send spam messages to all your contacts.
What you should do: Like all online services, they will NEVER ask you for your passwords, if you get a message like this, then have a look at who it has been sent to, if there is a list of 50 email addresses then it certainly is a scam. Make sure that the login page is http://www.linkedin.com and of course if in doubt don't ! .. if you think you may have been caught, then immediately go and change your password.
February 2012
Better Business Bureau (BBB)
This is a new twist on an old scam for businesses.
What you get : This is an email that you receive asking you to update your details for a European Directory that you have signed up for to receive leads. They then want you to sign up for the enhanced service, but of course they just want your credit card or bank details.
Here is a copy of the email:
Thank you for supporting your Better Business Bureau (BBB).As a service to BBB Accredited Businesses, we try to ensure that the information we provide to potential customers is as accurate as possible. In order for us to provide the correct information to the public, we ask that you review the information that we have on file for your company. We encourage you to use our ONLINE FORM to provide us with this updated information. The URL below will take you directly to this form on our website:http://app.alaskaoregonwesternwashington.bbb.org/sbq
(scamwatch note: we have removed the link which directs you to a website in Greece! )
(UserID: 916334773 Password: vn#E$mv3jVFkv)You may also complete the form on the reverse side of this letter and mail to PO Box 1000; DuPont, WA; 98327; or fax to (206)436-5496.Please look carefully at your telephone and fax numbers on this sheet, and let us know any and all numbers used for your business (including 800, 900, rollover, and remote call forwarding). Our automated system is driven by telephone/fax numbers, so having accurate information is critical for consumers to find information about your business easily. Thank you again for your support, and we look forward to receiving this updated information.Sincerely,Accreditation Services
What you should do : Just delete the email !
December 2011
Facebook - Telephone Hoax !
New hoax has come to our attention this week.
What you get: You receive an email entitled "Action Required" that looks like the one below:
This asks you to call a number to reactivate your account, again this is will either get you to give them your username and password or alternatively they will try and remotely access your computer ! Again a fundamental mistake in the spelling "the number is tool free" indicates that you should be wary.
What you should do: Simply delete the email. If you are concerned about the security of your facebook account then go to your facebook login by typing in http://www.facebook.com directly into your web browser and check that you can login with your usual address ... DO NOT CLICK A LINK FROM ANY OR WEBSITE EMAIL TO DO THIS !
FaceBook Hoax
Can i suggest that you read this complete article on the facebook invitation hoax email that is scaremongering as the "most dangerous virus ever seen" .. click here to read the full article
October 2011
Co-operative Bank - Your interest Rate has changed
What you get: You receive and email saying that a message has been sent you regarding a change in your interest rate and asking you to login for details.
What you should do: This is a phishing message where they are trying to get your bank details, just delete the message and do not respond.
September 2011
Beware the 0709 number !
What you get: You get a missed call on your mobile, you don't recognise the number so you hit the "call back" button. The call is answered ...
What you should do: This is a PREMIUM Rate number that you have just called. Based outside the UK the UK Authorities are powerless to stop this scam which are calls costing up to £50 per minute. - If you get an 0709 missed call then DO NOT CALL BACK !
August 2011
Paypal - You have Changed your Paypal Email Address
What you Get: You receive an email similar to this :
Dear Paypal Customer,
You have added <name>@hotmail.com as a new email address for your Paypal account.
If you did not authorize this change, check with family members and others who may have
access to your account first. If you still feel that an unauthorized person has changed
your email, submit the form attached to your email in order to keep your original email
and restore your Paypal account.
If you are using Internet Explorer please allow ActiveX for scripts to perform all data transfers
securely.
Thank you for using Paypal !
Please do not reply to this email.
This mailbox is not monitored and you will not receive a response.
----------------------------------------------------------------------------------------
Copyright 1999-2011 PayPal. All rights reserved.
There is an attachment with the email that at first glance appears to be a PDF file, however this is a link to a website that will attempt to download and run a script to allow access to your Computer.
What you should do: This is a"phishing" message, under no circumstances should you open the attachment ! - Just Delete the Email
April 2011
Lloyds Bank Phishing Attack - Unsubscribe Email
What you get: You receive an email with an UnSubscribe message informing you that Lloyds Bank, following complaints from Customers, are asking for comfirmation that you wish to receive email from them, there is a simple "yes" "no" options available but this then takes you to a page where it asks you to login to your account.
What you should do: This is a"phishing" message, the login page is there only to get your username and password so that the recipient can then get access to your online banking. Just Delete the Email
Order Confirmation Trojan - New slant on an old problem
What you get: You receive an email with the following text (or similar)
Thank you for ordering from Bobijou Inc.
This message is to inform you that your order has been
received and is currently being processed.
Your order reference is 290465.
You will need this in all correspondence.
This receipt is NOT proof of purchase.
We will send a printed invoice by mail to your billing address.
You have chosen to pay by credit card.
Your card will be charged for the amount of 230.00 USD and “Bobijou Inc.” will appear next to the charge on your statement.
You will receive a separate email confirming your order has been despatched.
Your purchase and delivery information appears below in attached file.
Thanks again for shopping at Bobijou Inc.
What you should do : The attachment with this email is a Trojan / Virus and will install the infected program on your machine allowing access to your system by others. You should delete the email immediately without opening the attachment.
Facebook Service Trojan - We have seen 16 of these this week
What you get: You receive an email with the following text:
Good afternoonA Spam is sent from your FaceBook account.
Your password has been changed for safety.
Information regarding your account and a new password is attached to the letter.
Read this information thoroughly and change the password to complicated one.
Please do not reply to this email, it's automatic mail notification!
Thank you for your attention.
Your Facebook!
What you should do : The attachment with this email is a Trojan / Virus and will install the infected program on your machine allowing access to your system by others. You should delete the email immediately without opening the attachment.
EMAIL Trojan.Virus - Express Delivery: - These Delivery notifications are currently the most common attempt to access your system by sending a bogus file which will install a trojan in your system! We are seeing several hundred of these every day, they are from "Express Delivery" "DHL Global" "United Parcel Service"
What you get: You receive an email with the following text (or similar) :
Dear customer
The parcel was sent your home adress
And it will arrive within 10 business days
More information and the tracking number
are attached in document below.
Thank You
© 1994-2011 Express Services, Inc.
What you should do: Delete the email WITHOUT OPENING THE ATTACHMENT. Ensure that you keep your antivirus software up to date as all the major programs will stop this attack, but only if they are fully up to date.
March 2011
"We can stop Cold Calling for you":
What you get: A phone call from a Company promising that they can stop Cold Calls and Sales Calls to your telephone line. Obviously we all get annoyed with these and the caller will offer to stop all calls to your number. It sounds great, but at the end of the call, they ask for your bank details to take the small monthly payment.
What you should do: NEVER give your bank details over the telephone, hang up the telephone as soon as you receive the call. If you have problems with sales calls, then register online with the Telephone Preference Service click here: http://www.mpsonline.org.uk/tps/ this is a free service that will stop the majority of cold calling to your number. If you are receiving sales calls, ask the caller for their details so you can report them to the TPS who regulate sales calling in the UK. (If you are a business and are getting junk faxes, register with the Fax Preference Service: Click here: http://www.mpsonline.org.uk/fps/ who provide the same service for faxes).
EMAIL Trojan.Virus - DHL System: - We are seeing a lot of these in the past few days !
What you get: You receive an email with the following text (or similar) :
And it will arrice within 7 bussness day.
More information and the tracking number
are attached in document below.
Thank you.
2011 DHL International GmbH. All rights reserverd.
Note the spelling mistakes, this is typical of a Trojan email as any major Company would not make this sort of mistake.
When you click on the attachment to open and print it, the virus/trojan is activated and will download and install other programs on your computer without your permission eg. Fake Antivirus programs, keyloggers, Advertising popups and backdoors.
What you should do: Delete the email WITHOUT OPENING THE ATTACHMENT. Ensure that you keep your antivirus software up to date as all the major programs will stop this attack, but only if they are fully up to date.
SYSTEM TOOLS VIRUS HOAX:
What you get: You see a large warning on your desktop background and a program that "scans" your system and tells you you are infected with spyware. The background screen text is in dubious English. They ask you to pay to "remove" the problems that it is supposed to have found, but this is to all intents a hoax as in most cases the problems it is reporting are not real.
We are seeing a lot of this particular hoax virus which also disables your current virus protection so needs to be removed from your machine as soon as possible.
What you should do: Unfortunately this hoax requires some technical expertise to get rid of and therefore we suggest that you call us on 01948 820787 and we can arrange to book your system in to remove the problem for you.
February 2011
EMAIL Trojan.Virus - Post Express Service: (Can also be from "UPS" or "ParcelForce").
What you get: You recieve an email saying that a package that you have sent or is due to be received by you has been returned to the Post Express (or UPS/Parcelforce etc) office as there is an error on the delivery address. They have attached a "mailing label" which you need to print and bring with you to collect the package.
When you click on the attachment to open and print it, the virus/trojan is activated and will download and install other programs on your computer without your permission eg. Fake Antivirus programs, keyloggers, Advertising popups and backdoors.
What you should do: Delete the email WITHOUT OPENING THE ATTACHMENT. Ensure that you keep your antivirus software up to date as all the major programs will stop this attack, but only if they are fully up to date.
Computer "Talk Talk" Telephone Scam (3+ instances in this area in the past week so there is an element of targeting here !)
What you see/hear: You receive a telephone call from a person from Talk Talk who tells you that it appears that your Computer has a problem or virus, they will ask if they can connect to your computer to fix the problem and will tell you that there is a charge of about £100 and you need to go and purchase a UKCASH voucher from your local shop to get the fix.
What you should do: Simply hang up the telephone, they are trying to gain access to your system so that they can either install some malicious software or to get you to pay for a service you do not require. You should NEVER allow anyone you do not know and trust to access your computer via the internet.
January 2011
Facebook Scam:
What you see/hear: We have had several reports where peoples Facebook accounts have been hijacked and used to send messages to other "friends" and then locks you out of your own account so that they can continue to do so. They do this by sending you a message from one of your existing "friends" asking you to make them a friend again, because you assume thay have removed you by accident and the information, picture etc is correct, you click to confirm. This gives them access to your account as actually it installs a small piece of code that allows them to hijack your account.
What you should do: Be VERY careful when getting friend requests, check to see if they are already a friend BEFORE accepting them. If they are a friend then IGNORE the request. It is far better to be suspicious than to lose your Facebook account and have all your friends attacked in the same way.
Telephone Scam (Back Again!) (There are several versions of this scam, but they generally have the same basis)
What you see/hear: You receive a telephone call from a person from Microsoft who asks if your computer has been running slowly, they then proceed to say that they are replying to error reports that you have sent to them. They will ask if they can connect to your computer to fix the problem.
What you should do: Simply hang up the telephone, they are trying to gain access to your system so that they can install some malicious software. you should NEVER allow anyone you do not know and trust to access your computer via the internet.
December 2010
Email: NatWest Banking Form
What you get: You receive an email with a subject such as "Case ID Number: NW-508-410-563" this indicates that there has been high number of failed login attempts on your Bank Account and you now have to fill in a form to restore your account.
What you should do: Basically this is yet another attempt to get your bank details, simply ignore and delete the email, do not be tempted to fill out the form
November 2010
Telephone: Credit Card Verification Scam
What you get: Your credit card company Fraud Department rings up saying that they're calling to verify an unusual purchase pattern asking if you made a purchase for a named item for £xxx.xx. When you say no, they tell you they will be issuing a credit to your account, but need you to confirm the 3 digit security number on the back of your card. This should ring alarm bells as your credit card company will already know your card details and will never ask for them on the phone. If you give the fraudsters the number you'll find your account debited for the quoted amount shortly afterwards!
What should you do: Under NO circumstances should you give out ANY details, simply hang up the telephone.
Email: Cahoot account need Verification
What you get: You receive an email similar to the following:
Dear Abbey Customers Upgrade, Due to concerns for the safety and integrity of the cahoot account ....
What you should do: This is another attempt to get your bank details, it is obvious that this is not real as Cahoot and Abbey are different systems. Ignore and delete the email
Email: HM 431.10 GBP.refund
What you get: You receive an email similar to the following:
After the last annual calculation of your fiscal activity we have determined that you are eligible to receive a tax refund of 431.10 GBP.refund
Complete the individual tax return form with TFN (tax file number): 629481290, attached to this message. After completing the form print the form by clicking the PRINT button on form and allow us 5-9 business days in order to process it.
Our head office address can be found on our web site at http://www.hmrc.co.uk/
What you should do: This is a link to a website where they will ask for your details to "confirm" your eligability for the refund. This information gives them all they need to imitate you and process what is now commonly called identity theft. Ignore and delete the email
Email: EU Business Register
What you get: You receive an email informing you that to "have your company inserted in the EU Business Register for 2011, please print, complte and submit the enclosed form to the following address: EU Business Register, BOX 252-28020, Madrid, Spain" at the end of the email are the word "Updating is free of charge!".
There is an attached file containing the form to fill in.
What you should do: The tendancy is to assume at this point that the directory is free of charge and you think "why not?" and you don't read the small print that says that you are agreeing to pay 995 Euros per Year for 3 years for your entry ! These directories are a scam and therefore you should ignore them and delete the email.
Email Scam: Compensation Notification
What you get: You receive an Email similar to the following:
Attn: Friend.
How are you today? Hope all is well with you and your family? I hope this Compensation Notification mail meets you in a perfect condition. I am using this opportunity to thank you for your great effort to our unfinished transfer of funds your account due to one Reason or the other best known to you. But I want to inform you that I have successfully transferred the Cheque out of the company to someone else who was Capable of assisting me in this great venture. ..... cont.
What you should do: As with all Email scams, just delete the email
Telephone Scam(There are several versions of this scam, but they generally have the same basis)
What you see/hear: You receive a telephone call from a person from Microsoft who asks if your computer has been running slowly, they then proceed to say that they are replying to error reports that you have sent to them. They will ask if they can connect to your computer to fix the problem.
What you should do: Simply hang up the telephone, they are trying to gain access to your system so that they can install some malicious software. you should NEVER allow anyone you do not know and trust to access your computer via the internet.
Email Scam: Warning from British Ministry of Health over Danger from Energy Saving Bulbs
What you see/hear/receive: Email Message claiming to be a warning from the British Ministry of Health outlines mercury contamination dangers associated with the clean up and disposal of broken compact fluorescent lightbulbs (CFL's)
What you should do: Compact fluorescent lightbulbs do contain mercury and caution is required when dealing with a broken bulb. However, this warning is overblown and tends to exaggerate the potential risk posed by broken CFL's. Moreover, the message is not an official warning from the 'British Ministry of Health', which no longer exists. You can delete the email do not forward it to all your friends.
Email Scam: I WISH TO INVEST WITH YOU
What you see/receive: This is an email message from a Nigerian who says that they have a large sum of money that they need to transfer out of the country and they want to use you because the need someone they can trust. The email promises that the recipient will get several million dollars if they help the person invest in this country.
What you should do: Basically this email is trying to get you to pass over your bank details so that they can transfer the money, what they actually do is take money from your account. You should never respond in any way to emails of this type.
Email Scam: Unknown EBay Purchase
What you see/receive: This is an email message that looks like it is from Ebay confirming a purchase that you have made. The email looks genuine but you haven't purchased anything so the temptation is to click on the "logon" button to see what is going on. The scammer has setup the login screen to look exactly like ebay, but it is on their computer. By entering your username and password, they have access to your account and can shop freely!
What you should do: If you have not bought the item, then the first thing that you should do is to close the email, open your internet browser (internet explorer, firefox etc) and carefully go to ebay (www.ebay.co.uk) , and login to your account there. DO NOT USE THE LINK IN THE EMAIL !
If you find any irregularities in your account, report these to ebay as soon as possible, preferably by telephone.
If you are unsure, worried, or see a scam that you think should be reported then please call us,
send us details by email, or drop it at our offices and we will include it here.
01948 820787
