Common fraud threats and how to avoid them

Scam messages can be very convincing and are popular with fraudsters. Fraudsters will deliberately mimic the contact details of the Bank, Police or other trusted companies to hide their true identity.

Scam messages will often imply a sense of urgency encouraging you to act fast, e.g. to call a phone number included in a text message to stop a fraud payment or include a request for personal information, or banking details such as password or security credentials.

Scam messages can lead to you speaking to fraudsters. They may try to trick you into providing account security such as; verification codes or token codes to move money out of your account without you realising. Remember we will never ask you to provide verification codes or token codes over the phone.

Some scam messages will contain links or attachments which, if accessed, will take you to a fake website that prompts you for your online banking details. The fraudsters then use your details to access your account(s) and steal your money.

Accessing fake websites or opening attachments in scam messages may install malware, a type of malicious software. This steals information and can be so sophisticated that it can work in the background to move your money, or trick you into believing that you've been unsuccessful in logging onto your online banking page and prompts you to re-enter your security details, which the fraudster captures.

How to protect yourself from scam emails, texts and social media messages

1. If you are in any doubt that a message may not be genuine stop and do not respond. Instead, call us using a trusted number from the back of your card, your bank statement or our contact us page.
2. Be vigilant to any out of the blue message requests from family members, friends or work colleagues, which involve you transferring money to them. It's always best to check the message first by speaking to the person direct before deciding to part with any money.
3. Never respond to an unexpected message from an unknown source. Always avoid clicking on links or opening attachments contained in messages. Never log into online banking through a link in a message.
4. Ensure you use strong passwords and lock your devices when not in use. Keep your anti-virus software up to date and always complete security and software updates when promoted. This can protect you from viruses contained in links and messages.
5. Download free online banking security software from Trusteer Rapport. A key feature of this security software is to alert you if you try to log into online banking on an unknown website. Learn more and download Trusteer Rapport.
6. Be vigilant and alert to requests to re-enter your security credentials or any unusual screens, when banking online. These could be an indication of malware.
7. When making a purchase online or inputting personal details on a website, always make sure it's secure. Look for a padlock symbol in your browser, usually next to the web address and check that the web address starts with 'https' rather than just 'http'. This tells you that it's a secure site.
8. If you want to check that an email, text or social media message received is genuine, use contact details obtained from a reliable source.
9. To help stop SPAM texts forward the text to 7766. For further advice on nuisance calls and messages visit the OFTEL website.
10. If you are using a Third Party Provider (TPP), please read our advice on how to use Third Party Provider (TPP) services safely.

Fraudsters may even try to trick you into allowing them access to your computer to steal your money.

• Regardless of how professional or convincing a caller sounds, remember the bank, police or other trusted organisations will never contact you by any means to:

• Ask for your financial information or your full security details.
• Ask you to provide your PIN code or requests to collect your bank card from your home address.
• Ask you to provide a verification code or token code.
• Ask you to move your money to a new or ‘safe’ account.

How to protect yourself from telephone scams

1. Always be wary of unexpected cold calls. Say no to requests for information and don’t be afraid to terminate the call.
2. Never respond to callers who ask you to confirm your PIN, verification codes or token codes, or to request to collect your bank card from your home address. We will never ask you to do this.
3. Never respond to a request to transfer your funds to another bank, even if the caller advises you that you need to urgently move your money to a ‘safe’ bank account. We will never ask you to do this.
4. Never respond to a caller who asks you to log on to online banking or a request that allows them remote access to your computer.
5. Don’t assume a call is genuine because they know personal details about you or by the caller ID information. Fraudsters can copy the telephone number of an organisation and make it appear on the caller ID display.
6. If you want to validate a phone call use contact details obtained from a reliable source.
7. If you are using a Third Party Provider (TPP), please read our advice on how to use Third Party Provider (TPP) services safely.

• Always stop and think – is this a genuine call? Take Five to stop fraud.

Common investment opportunities offered by fraudsters include:

• Binary options (betting on if the price of a share, stock market or asset will be above or below a set price in the future).
• Wine.
• Gold, silver, diamonds and other precious metals.
• Land for development.
• Overseas property or land.
• Storage units and parking spaces.
• Biofuels, Graphene and carbon credits.
• Investments involving the use of cryptocurrencies (virtual money) such as Bitcoin or Ethereum.

Warning signs to be alert to:

Out of the blue contact - Whether it's a phone call, email, text, social media message or on your doorstep, if the offer is unexpected it's likely to be a scam.

Tempting returns - If you're becoming enticed by a fantastic deal, 'guaranteed' to soar in value or make you money quickly, remember - if it sounds too good to be true, it probably is.

Risks played down - If there is no or little mention of the risks involved in the investment or they are quickly brushed over, be extremely cautious.

Repeated calls and pressurised to act fast - If you find yourself being continually contacted, pushed into making a rushed decision to part with your money or you're finding it difficult to end the conversation, then always STOP and THINK. Don't be afraid to put the phone down.

Recovery scams - If you've previously fallen victim to a scam, your details may be passed on or sold to other fraudsters. If you're contacted and offered help to recover your lost money and it involves you paying an upfront fee or investing more money then STOP - It's highly likely to be another scam.

If you are considering an investment, do as much research as possible before parting with any money.

• Seek impartial advice from a financial advisor that is regulated by the Financial Conduct Authority (FCA)
• Ask the individual or company for their Firm Reference Number and contact details
• Check that the individual or company are authorised by the FCA. The FCA also holds a warning list of individuals or companies who are not regulated and operating without their authorisation. To check FCA's register and warning list visit fca.org.uk/scamsmart or call the FCA consumer helpline on: 0800 111 6768 (Call Charges)

If you think you may have fallen for a fraud scam or suspect that you are being offered a fraudulent investment please contact us immediately.

Be alert to the warning signs:

Out of the blue contact - No legitimate pension or investment firm will ever cold call you. If you receive an unsolicited approach, whether it's by phone, email, text or at your door step - it's likely to be a scam.

Phrases such as 'free pension review', 'retirement planning', 'government endorsed', 'cash bonus' or 'one off investment opportunity' - If you're suddenly contacted and these terms are used, hang up.

Access to your pension before the age of 55 - this may not only lead to you losing money because of a bogus investment but huge tax implications too.

Pushed to act fast - If you find you're being hurried into transferring your pension funds, making a quick decision or persistently being contacted, no matter how professional or convincing the individual or company seem always stop and think.

Tempting returns - If you're becoming enticed by a fantastic deal remember - if it sounds too good to be true, it probably is.

If you're considering releasing your pension savings or moving it to an investment, do not go ahead until you are 100% certain that your money will be safe. Protect yourself by:

• Seeking impartial advice from a financial advisor that is regulated by the Financial Conduct Authority (FCA).
• Checking that the pension advisor, broker or organisation is registered by the FCA by visiting fca.org.uk/scamsmart or by calling the FCA helpline on: 0800 111 6768 (Call Charges).
• Speaking to the Pensions Advisory Service on 0300 123 1047 (Call Charges) for pension information and guidance.
• Reporting pension scams to Action Fraud - the UK's national fraud reporting centre at actionfraud.police.uk

If you bank with us and think you may have fallen for a fraud scam please contact us.

Romance scams happen when fraudsters use fake online profiles through dating sites, chatrooms or social media to form a relationship. Once the fraudster wins your affection, confidence and trust, they'll pull on the emotional bond that you've developed and ask you for money.

Spot the warning signs - Be extremely cautious if your online love interest:

• Is very attentive - contacting you regularly, often daily and pushes to speak with you away from the dating site or chat room.
• Declares their feelings for you very quickly and asks lots of personal questions but never really tells you much about themselves or they are vague about basic details such as where they live or work.
• Has the perfect profile picture and seems too good to be true.
• Begins to ask you for money - typically for some sort of crisis e.g. an ill friend or relative who requires urgent hospital treatment or to pay for a flight, food or rent etc.

How to protect yourself from romance scams

• Don't put yourself and your identity in jeopardy by trusting people too quickly. Be cautious when getting to know people online.
• Think twice before displaying or posting personal or financial information online or openly sharing personal details which could be used to steal your identity.
• Guard your privacy and trust your instincts. If something doesn't feel right it probably isn't.
• Use reverse image search to check that the profile picture of your new love interest isn't taken from somewhere else.
• Never send money or give credit card or online account details to anyone you don't really know or have never met in person.
• Never let your bank account be used to receive money or to move money on for someone else.
• Only use reputable dating websites and avoid switching to direct messaging, text or phone calls too quickly. Fraudsters try to get you away from the website so that there is no evidence of them asking you for money.

All businesses, regardless of size, can become a victim of fraud. To protect your business from this threat always verify a request to change bank payment details. Contact your supplier directly using established contact details, before implementing the change or completing the payment.

If you hold a business account with us and think you may have fallen victim to an invoice redirection scam contact us immediately.

How do invoice scams happen?

What are the warning signs to look out for?

What steps can I take to protect my business?

I have lost money to an invoice scam. What should I do?

Where can I find out more about safeguarding my business against fraud?

How do invoice scams happen?

Fraudsters will do their research. They will often be aware of the detailed relationships between businesses and their suppliers and know when regular payments are due.

Fraudsters may attempt to intercept genuine invoices and change the bank payment details.

Alternatively, they may contact the business by telephone, email, letter or fax, posing as a trusted supplier to make a formal request to change the bank account payment details held.

If the business does not validate the change and settles the invoice, the funds go to an account that the fraudster has access to.

The fraudulent payment is then quickly transferred, often to outside of the UK, making the recovery of funds extremely difficult.

Often the business does not realise they have been scammed until the genuine supplier chases for non-payment, in some cases this can be weeks or even months later. At this point, it is virtually impossible for the business to get the stolen funds back.

Alternative reports of this scam have included fraudsters falsely claiming to be a senior member of a business, providing account details and instructing an urgent payment to be processed. If the business completes the request, the funds go to an account the fraudster has access to.

What are the warning signs to look out for?

Any unexpected requests to change or update payment details for a regular supplier.

Whether made by telephone, email, letter, or fax, if your business is contacted ‘out of the blue’ to amend bank payee details always treat this as a potential warning sign.

Any unexpected, urgent payment requests made via email, text or fax, which supposedly appear to have been made by an internal senior member and provides account details.

What steps can I take to protect my business from this scam?

Protect your business by:

1. Treating any notification to change a supplier’s bank account details or complete an ‘urgent’ payment, as a high risk activity.
2. Always verifying a request BEFORE implementing the change or completing the payment. Be mindful not to use the contact details provided on the instruction, instead use established contact details to validate the change.
3. Educating staff with responsibility for processing invoices to be alert to scams and unexpected payment requests. To always check for irregularities and to raise concerns immediately.
4. Ensuring that senior staff members of your business know about this fraud risk and understand exactly what they are authorising.
5. Setting up designated single points of contact with regular suppliers.
6. Reconciling accounts daily to help quickly identify potential fraud payments.
7. Being mindful of information displayed on your company website and if this could be used to facilitate fraud.
8. To not presume an email, text or fax request to make an urgent payment is genuine, even if it appears to have been sent by a senior member of the business.

I have lost money to an invoice scam. What should I do?

If you hold a business account with us and have fallen for an invoice re-direction scam recently or may have received a fraudulent request, contact us immediately.

If you don’t bank with us and have lost money to an invoice re-direction scam report it to Action Fraud, the UK’s national fraud reporting centre at www.actionfraud.police.uk or by calling 0300 123 20 40 (Call Charges).

Where can I find out more about safeguarding my business against fraud?

More information about protecting your business from fraud is available in the scams booklets below.

Little book of big scams (business edition)

Financial Fraud Action UK Leaflet

Information is also available by visiting the Financial Fraud Action website.

Fraudsters will contact you under the guise of working for authorised claim companies in an attempt to make their approach seem credible and genuine. They may also claim to be from the Financial Conduct Authority, the Claims Management Regulator or Ministry of Justice.

They will inform you that you are owed a refund from the mis-selling of PPI. Fraudsters will then ask you to make a payment to them so that you can access the money. The payment tends to be about 10% of the amount they claim you are owed.

Scammers will request that payments are made using unusual means; this could include a Ukash voucher, iTunes gift cards or a Paysafecard. These means are used so that the money transfer cannot be traced.

If you make a payment, fraudsters will often contact you again to request more funds to be transferred to release the owed payment.

Protect Yourself

1. Be wary of unexpected calls, especially if you're asked to make payments or transfer funds up-front, or to divulge account information. There's no harm in hanging up.
2. Avoid making any payments to people claiming to be from companies or authorities who contact you without prior notification. Be extra vigilant when they ask you to use unconventional payment methods.
3. You can use the Authorised Business Register to check if a claims company is authorised and legitimate. Be aware that fraudsters will often pretend to be from genuine companies.
4. Check that any phone calls, text messages or emails are from numbers or addresses registered in the UK. Avoid contact from overseas numbers.
5. Regulatory bodies such as the FCA, the Claims Management Regulator or the Ministry of Justice will never contact members of the public asking for personal banking details or money.

Criminals often pose as employers, contacting you online or in person with offers to "earn from the comfort of your own home" or "make easy cash, with no experience necessary".

The scam works by a participant being asked to receive money into their bank account and then to transfer it to another account, keeping some of the cash for themselves.

Students, people who are unemployed, new residents to the country or anyone in financial hardship are often the most at risk to this type of scam.

The consequences

If you transfer money through your account that is from the proceeds of crime, you're a money mule. Even if you are not directly involved in the crimes that generate the money paid into your account.

If you fall for this type of scam and move money on, you are acting illegally and could be prosecuted and imprisoned for up to 14 years.

Your bank account will be closed and you will have problems applying for credit, loans or mobile phone contracts in the future.

How to protect yourself

1. If you have already responded to a money mule scam, stop transferring money immediately and contact us at your earliest convenience.
2. Be wary of any jobs promoted on recruitment sites, social media or in chat rooms for positions such as 'Account Manager', 'Transfer Manager' or 'UK Representative'.
3. Don't give your bank account details to anyone unless you know and trust them. A legitimate company will never ask you to use your own bank account to transfer money.
4. Be cautious of unsolicited offers of easy money. If it sounds too good to be true, it probably is.
5. Research any company that makes you a job offer and make sure that their contact details are genuine.
6. Be wary of job offers where all interactions and transactions are completed online.
7. Be wary of job adverts with poor English, spelling and grammatical mistakes.