According to Financial Fraud Action UK (FFA UK) criminals are using spoof text messages which appear to be sent from their victim’s bank in a bid to steal personal or financial information.
The scam text messages claim that there has been fraud on the recipient's account or that the account details need to be updated.
The texts encourage people to call a number or visit a website, often claiming the matter is urgent. However the telephone number or website is actually controlled by the fraudster, enabling them to steal security details which can be used to access the victim’s bank account and steal money.
To make the texts seem authentic, fraudsters use specialist software which alters the sender ID on a message so that it appears with the name of a bank as the sender. This can mean that the text becomes included within an existing text message thread on the recipient’s phone.
Through a second route the fraudsters take, the texts warn that the recipient will soon receive a call from their bank’s fraud department. However it is actually the fraudster that then calls the victim and attempts to trick them into revealing their full security details.
Intelligence also suggests that fraudsters are sending scam texts which appear to be from a landline number, asking the recipient simply to call their bank. This is in the hope that the victim will phone the number from which the text was sent, which is controlled by the fraudster, rather than the bank’s regular customer service telephone number.
Financial Fraud Action UK’s advice on how to avoid becoming a victim of this scam:
- Be suspicious of any text message that asks you to provide sensitive personal information, passwords or to make transactions.
- If you’re asked to call the number given in the text message and the number is unknown to you or suspicious, call your bank on a number that you trust – such as the one on the back of your card – to check the number and message is authentic.
- Do not call the phone number a text message has been sent from; instead call your bank on a number that you trust.
Remember your bank will never:
- Phone you to ask for your 4-digit card PIN or your online banking password, even by tapping them into the telephone keypad.
- Ask you to update your personal details by following a link in a text message.
- Tell you over the phone how to respond to a text message confirming a transaction.
- Ask you to transfer money to a new account for fraud reasons, even if they say it is in your name.
Katy Worobec, Director of Financial Fraud Action UK, said: “These text messages can look very authentic, so it’s important to be alert. Always be wary if you receive a message out of the blue asking you for any personal or financial details. If you’re ever at all suspicious, call your bank on a number that you know. Remember, fraudsters are after your security details – don’t reveal anything unless you are absolutely sure who you are dealing with.”
Read more on the Financial Fraud Action UK website.
Please note: Action Fraud is not responsible for the content on external websites.
To report a fraud and receive a police crime reference number, call Action Fraud on 0300 123 2040 or use our online fraud reporting tool.