- Jul 31

The Latest Frauds Alert System From Kent Police

The ECRC works closely with local policing to ensure that our members benefit from the free tools and services that local policing offers.

Fraud Alert System From Kent Police Graphic

One such valuable free tool is the Kent fraud Email Alert System (K'FAs), created by Stephen Kelly, the Fraud Prevent and Protect officer for Kent Police. This system provides weekly alerts to inform the public and businesses about current scams and how to best protect themselves.

The K'FAs reaches hundreds of thousands not just in Kent but in other areas up and down the county as we are all affected by similar offences. Starting this week, the ECRC will begin publishing Stephen Kelly's weekly K'FAs for its members. Stay informed and learn about the latest threats targeting the public and bushiness by reading on.

For further information about Fraud, visit Advice about fraud | Kent Police

More AI (Artificial Intelligence) Scams to be aware of - Deepfake videos

A deepfake video is where the person in it has been digitally altered to appear as a different person. Criminals use this technique to make it appear as if someone, usually a popular celebrity or trusted person, is saying something they are not. For example, they can make it seem like a celebrity is promoting a fraudulent investment scheme with words from their own mouth. However, the video is fake.

Deepfake videos can also be used to steal people's identities or to pass verification checks and access victims' accounts as well as to create images of completely non-existent people.

How to spot these scams:

Some deepfake videos use lip-syncing, so watch the video carefully for lip-syncing that is slightly off.
Pay attention to details in the quality – does the hair, lighting and skin tone of the person look believable? Is there any blurring in the video?
Listen out for strange background noises or robotic voices.
Look for unnatural expressions – it is hard to mimic natural blinking and AI often lacks facial emotion and AI body movements can seem off.
Where does the video come from? If it is not an official account or if it is an account you have never heard of and you have not seen the video anywhere else, be wary.

If you think that you may have been a victim of this or any other type of scam, then contact your Bank immediately, which you can do by calling 159 and report it to Action Fraud at www.actionfraud.police.uk or call 0300 123 2040.

Investment Scams

We are still seeing a number of reports of victims for this type of criminality. Often the victim will only become aware that they have been scammed when they either to try to encash or withdraw part of their investment.

How to protect yourself from Financial Investment fraud:

Investment opportunities: Do not be rushed into making an investment. Remember, legitimate organisations will never pressure you into investing on the spot.
Seek advice first: Before making significant financial decisions, speak with trusted friends or family members, or seek professional independent advice.
FCA register: Use the Financial Conduct Authority’s (FCA) register to check if the company is regulated by the FCA. If you deal with a firm (or individual) that is not regulated, you may not be covered by the Financial Ombudsman Service (FOS) if things go wrong and you lose your money.

For more information about how to invest safely, please visit: https://www.fca.org.uk/scamsmart

Remote Access Scams

Another Fraud reported all too often is remote access scams.

Remote Access scams will often begin with a browser pop-up saying that your computer is infected with a virus or a call from someone claiming to be from your bank saying that they need to connect to your computer in order to cancel a fraudulent transaction on your account. Regardless of the narrative that the fraudster’s use, their goal is to steal your money or access your financial information by tricking you into allowing them to remotely connect to your computer.

Remember -

A tech company, telecommunications provider, bank or service provider will never contact you out of the blue requesting remote access to your device.
Only install software or grant remote access to your computer if you are asked by someone you know and trust, such as a friend or family member, and never as a result of an unsolicited call, browser pop up, or text message.
Your bank will not ask you to reply to an e-mail with personal information, or details about your account. If you contact them, use a phone number/email address that you know to be true, rather than one sent to you in an email – it may be false.
It is okay to reject, refuse or ignore requested. Only criminals will try to rush or panic you.

Advance Fee Fraud

A Kent resident has reported receiving a call from a person stating that they worked for an advisory group on behalf of the Government and that they had overpaid their mortgage and were owed more than £4,000 and that they had a cheque ready to post to them. They then stated that they need to pay some admin fee’s first and needed to send £300 to an address via royal mail. It was a scam and the intended victim disconnected the call.

This is a variation of various types of telephone scams that we receive reports of each day and is known as an Advance Fee Fraud. This is when fraudsters target victims to make advance or upfront payments for goods, services and/or financial gains that do not materialise.

Remember the ABC of fraud awareness –

A – Never Assume that a caller is genuine.

B – Never believe that a caller is genuine.

C – Always confirm by disconnecting the call and calling back via a trusted number, no one supplied by the caller.

If they call out of the blue with offers of money in return for a fee, then STOP, it is a SCAM.

Fake McAfee Emails

If you get an email like the below, it is a scam and please do not click on the link, as it will take you to a realistic looking website designed to steal your personal and financial data.

Having just checked my personal emails, I have found that I have received these every day this month. If you look at the email below you can see straight away that the email has an incorrect spelling of McAfee and the email address that this has been sent from, has no links to McAfee.

Always be wary of clicking on links in emails and text messages, as they are likely to be a scam. Report suspicious emails by forwarding them to: Report@phishing.gov.uk

How can the ECRC support?

By joining the ECRC as a free member, your organisation will be supported in making the small changes that make the biggest difference when it comes to cyber resilience. Becoming a free member means you will receive the latest cyber resilience guidance via email, which will drip feed you ways in which you can improve your cyber resilience without costing any money.

The ECRC website also contains several links to helpful National Cyber Security Centre (NCSC) resources, which are all free, up-to-date, and easy to use. Tools such as Exercise in a Box and the NCSC Cyber Action Plan are particularly useful in terms of identifying areas where you could improve your cybersecurity. They also have many informative guides that are sector specific, which will give you useful and detailed information.

If you would like more information about how the ECRC can help your organisation specifically, please book a chat with us today!

Reporting a live cyber-attack 24/7:

If you are a business, charity or other organisation which is currently suffering a live cyber-attack (in progress) please call Action Fraud on 0300 123 2040 immediately. This service is available 24 hours a day 7 days a week.

Reporting a cyber-attack which is not ongoing:

Please report online to Action Fraud, the UK’s national reporting centre for fraud and cybercrime. You can report cybercrime online at any time using the online reporting tool, which will guide you through simple questions to identify what has happened. Action Fraud advisors can also provide the help, support, and advice you need.

Alternatively, you can call Action Fraud on 0300 123 2040 (textphone 0300 123 2050)