Love articles about Get the best deal?

Let them come to you! Register with lovemoney.com and we'll send the articles you like straight to your personal homepage.

Join the lovemoney.com experience

Confused?

Don’t get caught out by this new fraud

Fraudsters are always on the hunt for new ways to steal your identity. And their new technique involves your mobile phone.

Have you ever had a bill drop through the mail which is a lot higher than you expected?

I know I have, and while in most cases there is a completely reasonable explanation, for thousands of Brits across the country these higher-than-usual bills are the confirmation that they have fallen victim to fraud.

The latest form to fall under the national spotlight is mobile phone identity fraud.

A report last week from fraud experts CIFAS revealed it had seen a massive 74% rise in mobile phone fraud in the first half of this year, compared to the first half of 2008, highlighting it as a growing area of identity theft.

As such, it's one form of fraud that you need to be on your toes about, and clear on what you need to do to protect yourself.

How it works

The first thing the fraudster needs to do is obtain your personal details.

This can be done in a variety of different ways, from nicking a bank statement from your trash, to posing as a bank or firm that you have dealings with and getting you to answer the usual security questions (place of birth, mother's maiden name, etc).

Once they have that information, they speak to your mobile phone operator - posing as you - and add additional handsets to your account, running up massive bills. Because mobile phone firms are happy to send out handsets to any address, and not just a billing address, the fraudsters have an easy way of getting hold of these dodgy goods, without you knowing about it.

And chances are, the first you will know of it is when you start getting suspiciously high bills from your operator.

Tip of the iceberg

CIFAS is pretty concerned about the figures, because it doesn't believe they yet present the full picture, as members of CIFAS only file cases of confirmed fraud, rather than all suspected cases.

It's also a concern because while the fraud may start with your mobile phone, once the fraudsters have your details, there are all sorts of things they can do with them, leaving a trail of devastation all over your precious credit record.

And that can take an awful long time to clean up.

How to protect yourself

The simple way to protect yourself against all forms of identity fraud is to be extremely vigilant in ensuring you don't give out your personal details willy nilly.

The first step here is ensuring that all documents with any of these details are properly shredded before they go into the trash (or recycling bin if your council is as hot on green issues as mine is).

Make sure there is no earthly way a would-be fraudster can make out who you are from your mangled post.

You also have to be on your guard whenever you get an email through from a financial firm, or firm you might have dealings with, asking you to confirm certain user details.

Most of the time these emails are just a very sneaky trick on the part of the criminals called phishing (while there is even a text message version now as well).

Invariably they will send you a link to a website where you can enter your details - a good rule of thumb is that if the website does not display a padlock in the address bar at the top of the page, it is not safe, so do not, for any reason, enter your details!

Check those bills!

If you're anything like me, you can be a bit lazy when the bill comes through, particularly if you pay by direct debit. I know there have been months when my phone bill has looked a bit large, but I've thought nothing of it. Must have sent a lot of texts that month, or spent too long on the internet.

This is a stupid thing to do!

Whenever you get a bill, you should always, always, always go through it carefully, checking that there are no suspicious or unexplained items. And if there is anything at all vaguely suspicious, make sure you immediately contact the firm to find out what the payment relates to.

Yes, it's a hassle and a chore, but it's this sort of vigilance that will minimise any damage that a fraudster can do.

Report anything suspicious!

You would think this is just common sense, but too many of us don't do anything about our suspicions. If you get a questionable email you should always contact the firm in question, while if you think you may be a victim of mobile phone fraud, you should not waste any time in contacting your provider.

I'd also recommend getting in contact with Identitytheft.org.uk and Stop-IDFraud, two organisations doing a huge amount to raise awareness of this issue.

Keeping vigilant in checking that your hard-earned cash is going where it should be is essential. You cannot afford not to do so.

More: The best mobile phone deals ever! | Oops, I Committed Mortgage Fraud!

Check out your credit rating free with Experian

Enjoyed this? Show it some love

19 comment

Share this lovemoney.com content on any of the social networks and utilities below by simply clicking the site of your choice.

  • You can subscribe to all lovemoney.com articles via our RSS feed.

Comments

Avatar

CeeBass said

  • 0 recommendations

Whenever I receive a phonecall from my bank/credit card company/sky etc (i.e. anyone I hold an account with), if they ask me for my personal details, either I insist that they answer a question I pose them about my personal details, or I ask them which department they're calling from and their name, and I call them back.

Helps avoid accidentally giving out your personal identifying information to a fraudster...

Avatar

Digger47 said

  • 0 recommendations

Never click on a link in an email in order to go to a website that purports to be your bank.

Instead, go to the bank's website using the bookmark that you (presumably) have previously stored on your browser.  And if in any doubt, send them a copy of the email for them to check over and reply to you.

Avatar

tbtest said

  • 0 recommendations

Use a pay as you go mobile. No chance of an unexpected bill with that!

Avatar

ajfish said

  • 0 recommendations

What is "Trash"? Is that what the Americans call rubbish. Come on get a grip. Nect yhou will be saying SideWalk and pronouncing debris day-bree!

Avatar

ajfish said

  • 0 recommendations

Nect and yhou are English typeos of "next" and "you", just to clarify.

Avatar

time2go said

  • 0 recommendations

Ceebass, very good advice.

Digger47 - I know someone who fell for that. Very cautious normally. The email they sent looked very authentic and they did clear out thousands.

My OH had a letter from a debt collection company. Debt had nothing to do with her, when I rang them, they wanted more personal details before they would give me details. I told the company I did not know if they were genuine, and was told they were a 'recognised company' and registered with some central 'body' but did not have a number to contact this so called central body!!

Refused to give any details  and asked that they keep all correspondence in writing (I only ever faxed them). When they eventually gave details of this 'debt' it had nothing to do with my OH... so as a rule never give details.

Avatar
  • 0 recommendations

I have noticed recently that many of the standard letters I get from companies who have legitimate business with me have reference numbers in very small print, usually top left near the name and address block. these numbers are not my account number, sutomer ID or whatever that business uses to identify me for operational purposes.

There seem to be far fewer unique reference numbers of this kind than there are businesses who use them, suggesting that many use the same reference number in common for me - a fact which I take not to be a coincidence.

Does anyone know what these numbers mean and where they come from?

I suspect that letting these numbers escape into the rubbish may provide potential fraudsters with ways to cross-reference into lots of other data about me that might be "out there".

Avatar
  • 0 recommendations

@ time2go - I concur completely. I have had correspondence from debt collection companies (in respect of previous residents, I hasten to add) and when I challenged them, they refused to provide any way I could verify that they were legitimately acting on behalf of the supposed creditor. They merely reiterated, with emphasis, that they were acting "on instructions".

I suspect that if not careful one could not only be scammed by good ole identity theft, but one could also suffer by having a real debt (if there were one) "collected" by some opportunist who was not entitled to collect it.

Avatar
  • 0 recommendations

Another scam operated by an outfit called TBS or Telecom Billing Services involves sending you a separate bill through the post for calling one of their "Adult Chat lines" claiming that you agreed to pay them even though no such call was ever made. TBS were featured on Watchdog a while ago for this scam.  TBS were fined £50k for this scam a by OFCOM - but I'll bet they are still trying to pull similar tricks.

Avatar

SOCRATES said

  • 0 recommendations

"a massive 74% rise in phone fraud"

Isn't this statistic meaningless?  If the level of nationwide "phone fraud" was 100 last year and is now 174 - would that worry anyone??

Let's have the numbers please.

Avatar
  • 0 recommendations

I shred everything with personal details of course but then I incinerate them.

 If you dont have the facility then ask a friend or relation. If they have a garden then they may well have an incinerator.

Avatar
  • 0 recommendations

I'm not very computer literate so why cant anyone put a picture of a padlock on a bogus site ?

BW

Avatar
  • 0 recommendations

brian_westbury, the Padlock picture comes from your browser when it detects that security is being used - it isn't generated by the site itself, and does not appear on the site, but in the border of the browser window.

If a site asks for a password, or for personal info, and you lie to it, it will know you are lying if the site is legitimate, but will not know you are lying if it doesn't already know your details.  So if you fill it in as "Fred Bloggs", password "qwerty1234" and it accepts it, the site is not legitimate.

Watch out, however!  I have not heard of this happening, but it is not beyond the realms of imagination that an illigitimate site would ask for your details, then attempt to log into your bank with the details you send. It would find them to be incorrect, and would tell you that there was an error, and suggest another try.

I even once heard of a spyware program that would search your browser links file and change your link to your bank so that it would point to an illegal site, so that next time you used your personal, trusted link to contact your bank, it would misdirect you.  I only heard that once, some years ago, so I don't know if it was true - but there are no bounds to the inginuity of fraudsters.

Avatar
  • 0 recommendations

I do the same as CeeBass.  However, I've have had difficulty when dealing with HMRC as they get very uppety if you ask them to confirm any details. 

Avatar
  • 0 recommendations

How to Identify if the e-mail message received is genuine or not.

Click on the link received in your e-mail and when it asks for log-in and password details, type in "INCORRECT" User Id and Password. If the link accept the incorrect details then the link is spoof. 99% it would be because none of the secured websites will ask you to click on the link in the e-mail. They will always tell you to go to their website wwww............. and log-into your account from there.

gordonbanks42; There are two reference numbers printed near your name and address, one is long reference number in small digits which is an internal tracing and identifying reference number of the company issuing the correspondence. This number includes many factors, like date & time of processing, company's name for whom it was printed for, which site it was printed from etc.etc. Some companies contract out their correspondence procedures and other services to third parties in order to save on time and expense and this number is there for identification. For example: CAPITA Management Services (part of a large stock market quoted plc) do all the leg work for many Government, Semi-Government and other private organisations in the country. Many local Councils have contracted out their services to them. TV Licensing is another. The second number or the last 5/6 digit of the only number on the letter is the grid reference number given to your home address by DVLA/Royal Mail for identification purposes.

Avatar

Spoonyboy said

  • 1 recommendation

RuthlessInvestor : I don't think suggesting that people try dummy names/passwords on websites that have been emailed is a wise thing to do.  By following the link to a unknown website you could install malicious software onto your PC.

I receive dozens of phising scam emails every week to my hotmail account & do not/have never followed any links, nor do I give any personal details to any phone caller. I check my bank/credit cards regularly by going directly to the banks website & know exactly what is happening with them.

However, this did not stop someone logging onto my bank & setting up a transfer to their bank account & transferring all of my savings (whilst I was on my honeymoon and I couldn't check what was happeneing!). The only explantion for this is key logging software that was installed without me knowing from a site that may not have been requesting financial/personal details at all (firewall & virus was already installed). 

The software will wait until you type any usernames/password/security answers & then bingo they know exactly what you have typed on which website. 

I would be very cautious of opening any email link that you have not 'signed up for'.

Avatar

monty said

  • 0 recommendations

I work for one of the mobile phone company's and so many people don't look at their bills i have has response when asked if they have checked their bills " i just call the bank to see what you have taken or "i pay by direct debit why should i look at my bill"s?, one customer though his contract automatically came to an end ant threw away his sim card, his next bill was a bit bigger than usual but he thought it was his las so just paid the next was over £1000 when he did query the bill, we found out that that the sim card was being used and run up the bill's unfortunately as he had not canceled the contract or checked the bill's destroyed the card or called to suspended it he was liable to pay ALL the money.    

Avatar

skimo said

  • 0 recommendations

I agree with SpoonyBoy. If you're in any doubt that the email is from your bank, contact them directly, either by phone or logging into your account online by typing in their web address directly into your browser.

Most banks that I know of will rarely send emails to your email account, they will more likely send a message that you can access when you log into their system. Cheers...

Avatar
  • 0 recommendations

Whenever a companu has contacted me, and asked for certain details, I have refused to dive them any answers. I have indeed been told by at least one of them that it is for the data security act, and that no personal financial information can be given out to me, unless I give them these details.

My simple answer was, the data security act is for my benefit, not theirs, and that if they wish to talk about any financial matter, ask that I ring them with the number I have already been provided, or write to me providing a legitamate phone number.

No company is allowed to ring you and ask for personal details, no matter who they are.

Join the conversation

Please sign in or register to add a comment or recommend.

Thank you for using Three Kings