Possible New Internet Scam to be Aware of.

[SamsarandaParticipant @samsaranda]

Today I received a very convincing email from TVLicensing stating that they are unable to renew my TV Licence automatically because my direct debit had failed and that I needed to make an online payment to them as failure to do so could incur cancellation of my TV licence and passing my details to a debt collection agency. Fortunately I have access to my banking online and was able to check that no direct debits had failed and the amount that they quoted as the payment needed wasnt even the correct amount of my direct debit. I would warn anyone who receives such an email check it out and take care if you log on to any of the log ins provided in the email, it could cost you a lot of money.

Dave W

[SamsarandaParticipant @samsaranda]

[RMAParticipant @rma]

Yep, get these all the time! Strangely though they seem to arrive just after the date I pay……everyone seems to be watching everyone. I'm going the VPN route.

Always hover the curser over the name and you'll see the senders email address. It's usually random letters or numbers after the @. Mark as phishing and then double delete.

[roy entwistleParticipant @royentwistle24699]

I've had this e-mail several times. Seeing that I've had a free TV license for the past ten years and the fact that i haven't had a TV for at least fifty years , I simply ignored it

Roy

[R Johns 1Participant @rjohns1]

One 'trick' that I found out by accident is to send the email to a made up (incorrect) email address.

The return I had stating email could not be sent actually showed the senders correct email address. Barclaycard were most pleased that I typed their email address incorrectly when I was sending them the fraud email. I believe that this fraudster was subsequently traced.

[Brian HParticipant @brianh50089]

Posted by R Johns on 21/06/2019 12:49:31:

One 'trick' that I found out by accident is to send the email to a made up (incorrect) email address.

The return I had stating email could not be sent actually showed the senders correct email address. Barclaycard were most pleased that I typed their email address incorrectly when I was sending them the fraud email. I believe that this fraudster was subsequently traced.

What an excellent idea, many thanks.

Brian

[Mike BondarczukParticipant @mikebondarczuk27171]

There is also a new scam going round where you are advised that you qualify for a refund of some £279 on your TV licence but that the BBC require your bank details in order to make the payment.

Mike

[SillyOldDufferModerator @sillyoldduffer]

Fake emails are sent to random addresses in large numbers in hope of catching someone off-guard.

Most scams fail at the first hurdle because the emails don't match your circumstances at the time. The jump out as dodgy. Even so large sums of money are going west: BT's Website suggests about £11bn in the UK in 2016.

People get caught when by chance a fraudulent email just happens to line up with reality. If already expecting a legitimate call from the Inland Revenue, BT, your Pharmacy, Gas Company, the police or whatever, there's a good chance even a wide-awake security expect might fall for a fake.

A more dangerous possibility is leaked personal information being added to emails containing realistic stuff in the public domain like your Bank's address and telephone number. I've had one or two that were uncomfortably close to the real thing at first glance.

Don't believe any emails asking for bank account details or access to your computer. Double check everything, especially when it's expected!

Dave

[Michael GilliganParticipant @michaelgilligan61133]

Posted by SillyOldDuffer on 21/06/2019 16:21:23:

.

… Even so large sums of money are going west: BT's Website suggests about £11bn in the UK in 2016.

.

[BT being my service provider] The most irritating aspect of that is: Most of the fraudulent eMails I receive purport to come from BT and actually come from genuine @btinternet.com addresses belonging to innocent BT customers.

It would have been nice to think they could trap a few more of these, rather than just deliver them to my Inbox.

MichaelG.

[Howard LewisParticipant @howardlewis46836]

Some of these "clever" fraudsters slip up on silly details, thankfully.

This week a message arrived, supposedly from a friend, except that his name was misspelled, and the sender's E mail address was visible!

Total amateur., who has hacked into someone's address book, but too deficient in English to realise the need to spell a Scottish, or Irish surname correctly, or that the supposed originator is not a resident of Germany, like them!

Obviously trawling for the unobservant gullible

Howard

[Grindstone CowboyParticipant @grindstonecowboy]

I use a program called Mailwasher which allows you to preview all your emails on the server and eaily delete the unwanted ones – it also learns and automatically marks spam emails. Been using the free version for many years now, works fine for me, although the latest free versions only allow you to use one email address.

Edited By Rob Rimmer on 21/06/2019 23:26:59

[Nigel Graham 2Participant @nigelgraham2]

The BT Internet service seems to go some way to what Mailwasher does.

I have received a couple of those "stuck in Paris" messages allegedly from genuine people such as fellow club-members, but whilst the criminals might be able to copy the compromised sender's visible address, they can't avoid using their own background source address.

I don't know if other services offer it but BT's e-post page' 'Actions' menu allows you to 'View Source', and whilst most is just unreadable code, the source and any devious routes are visible; as also sometimes are the originating country codes.

I have used this to verify a very convincing message from a friend was false – I compared it with his real address.

An oddity with my computer is that it won't allow e-messages via addresses embedded in web-sites. I have to copy them to the normal e-post function. I don't know if it's an effect of my security software, or if it enhances security.

[HopperParticipant @hopper]

Posted by Howard Lewis on 21/06/2019 20:56:28:

Some of these "clever" fraudsters slip up on silly details, thankfully.

This week a message arrived, supposedly from a friend, except that his name was misspelled, and the sender's E mail address was visible!

Total amateur., who has hacked into someone's address book, but too deficient in English to realise the need to spell a Scottish, or Irish surname correctly, or that the supposed originator is not a resident of Germany, like them!

Obviously trawling for the unobservant gullible

Howard

Saw a doco on TV where almost illiterate street kids in Lagos, Nigeria, buy time at shanty town internet "cafes" and send out such scam emails. Poor buggers are desperate for a feed yet only one mouse click away from people who live a fabulous life of luxury by comparison. IE, us. You have to feel sorry for them when you see their circumstances. Most of us, if we met them in person, would not begrudge them a few bucks to feed them for a week or two. Truly sad.

[Michael GilliganParticipant @michaelgilligan61133]

In today's related news: **LINK**

https://www.bbc.co.uk/news/uk-48719098

MichaelG.

[I.M. OUTAHEREParticipant @i-m-outahere]

I cop this every time i buy something off Ebay and the best one was some one supposedly from England that had won lotto and was giving away money- just supply your bank details and we will deposit the money today !

I also get the old your account has been locked for my apple account a few days after i download an app and of course there is a link to unlock it – do these dickheads think i am that stupid !

[Tony Pratt 1Participant @tonypratt1]

Saw a doco on TV where almost illiterate street kids in Lagos, Nigeria, buy time at shanty town internet "cafes" and send out such scam emails. Poor buggers are desperate for a feed yet only one mouse click away from people who live a fabulous life of luxury by comparison. IE, us. You have to feel sorry for them when you see their circumstances. Most of us, if we met them in person, would not begrudge them a few bucks to feed them for a week or two. Truly sad.

I often wonder where our £7 billion per year foreign aid goes to, obviously does bugger all for the really desperate? Sorry to get political but it makes me so mad!

Tony

[Clive FosterParticipant @clivefoster55965]

Captain Obvious on the line here. As all these E-Mail scams depend on contents that don't match the actual reply address how hard could it be to filter them out automatically at the server. In a world where search engines seem to know pretty much everything short of, maybe, what I had for breakfast yesterday, I'd say pretty darn easy. Don't even need to scan the contents. A real source / reply address concealed by an apparently correct one should be sufficient red flag. Thats just one of the many things in the huge lump of invisible data that comes with every E-Mail. Most of the time the rubbish you don't see is far bigger than the content you do see.

Captain Cynical says its down to the folk running the various companies and their so called security experts being unwilling to actually do their job.

Electronic bank payment interception and outright scams are another thing that could be stopped in nothing flat by competent systems.

Don't get me started on the ransomeware thing. Unscrambling data on a disk whose contents are mostly known is almost trivial.

Clive

[Clive SteerParticipant @clivesteer55943]

I must be missing some vital security knowledge regarding banking transactions. Even if a scammer obtains someones bank account details how do they persuade the bank to send them money from that account. I can understand an account owner transferring money because he has been persuaded to do so but not how a bank might transfer money to a "new" recipient without the account owners permission. Not everyone who has a bank account necessarily has on-line banking enabled so maybe this isn't their way in.

Clive

[Michael GilliganParticipant @michaelgilligan61133]

Posted by Clive Foster on 22/06/2019 12:49:55:

Captain Obvious on the line here. As all these E-Mail scams depend on contents that don't match the actual reply address how hard could it be to filter them out automatically at the server. …

.

Exactly my point regarding btinternet

MichaelG.

[Howard LewisParticipant @howardlewis46836]

Guess who WILL NOT use On Line banking, and why?

Sadly, if you live anywhere in UK that is not a big town or city, you now have a thirty mile round trip to get to an actual Bank branch containing real human beings, (unless you get the occasional mobile bank that a few provide )

It is difficult to hack into pen and ink, unless you are a good forger!

Howard

[SillyOldDufferModerator @sillyoldduffer]

Posted by Clive Steer on 22/06/2019 12:52:23:

I must be missing some vital security knowledge regarding banking transactions. Even if a scammer obtains someones bank account details how do they persuade the bank to send them money from that account. I can understand an account owner transferring money because he has been persuaded to do so but not how a bank might transfer money to a "new" recipient without the account owners permission. Not everyone who has a bank account necessarily has on-line banking enabled so maybe this isn't their way in.

Clive

Good question! Perhaps for obvious reasons they don't want us to know. It's certainly possible. Read about Jeremy Clarkson when he printed his Sort Code and Account number in the Sun to prove it wasn't enough information for anyone to get money from his account. What could possibly go wrong?

There are bad guys who understand computer security and financial systems far better than we do. You have to trust that the bank's experts are one step in front of the criminals, or – when it goes wrong – that the bank pays, not the customer.

All banking is electronic, whether individual customers choose to be online or not. Going online increases the risk, but it's not the only way in.

Dave

[SillyOldDufferModerator @sillyoldduffer]

Posted by Howard Lewis on 22/06/2019 17:25:19:.

…

It is difficult to hack into pen and ink, unless you are a good forger!

Howard

That's not the bank's experience! Cheque fraud is much easier than electronic. Almost anyone can write a cheque…

Dave

[Frances IoMParticipant @francesiom58905]

I looked after a friends affairs after he had a stoke – one of the carers stole two cheques from two books (one personal + 1 a care account) carefully in middle of each book (obviously a pro at this) – he merely forged the name which should have been obvious to the bank as my friend had lost use of right hand and were had registered 2 supplied handstamps to act as signatures – banks did refund money – thief got 6 months suspended for this and at least one other similar theft whilst employed as a carer it was only that one cheque would overdraw the care account that triggered a check – trying to get police involved was very difficult and this was just at the beginning of the cuts.

Edited By Frances IoM on 22/06/2019 19:49:35

Edited By Frances IoM on 22/06/2019 19:50:33

[RMAParticipant @rma]

Bank security from my experience is pretty good. The Bank will pay should any hackers take money from my accounts, so I do everything online….have done for year's here and abroad.

I did encounter a problem at the beginning of the month when filling up with Diesel in France on my way to Spain. I went to a well known superstore's filling station and, as is now common in France, paid at the pump (no choice) with my credit card. Got back into the car and headed off when my phone went telling me I had a text which I was expecting because my Bank always lets me know when my card has been used. However, two more text messages came through, and when I stopped for a break some time later I checked them. To my alarm I had a message about the correct amount plus two more for 130€ each taken within minutes of each other!

I had to wait until I got to Spain to check my balance online and only the correct payment showed. I contacted the Bank and they said their automatic fraud software had detected the fraud and stopped payment straight away.

I am reassured that they work in my best interest………..I hope I haven't tempted fate now!!

[SamsarandaParticipant @samsaranda]

Not wishing to destroy illusions of how safe it is to use cheques, most banks do not check the signatures on cheques if the amount drawn is less than £1,000. It is not until it appears on your statement that you are aware of a possible fraud, full marks to the banks though they are usually very quick in restoring the missing funds to your account, I stress most banks, performance varies from bank to bank.

Dave W

[Author]

Posts