The usual warning signs are getting harder to spot

https://www.which.co.uk/news/article/5-most-convincing-scams-of-2025-arqkX0a9i0WK

Action Fraud is urging people to look out for rogue QR codes, after 784 reports of ‘quishing’ were made to Action Fraud between April 2024 and April 2025, with almost £3.5 million lost.

A new alert has been issued by Action Fraud, warning about quishing, a form of phishing where a fraudulent QR code is scanned, designed to steal personal and financial information. The warning encourages people to stay vigilant and double check QR codes to see if they are malicious, or have been tampered with, before scanning them online or in public spaces.

Claire Webb, Acting Director of Action Fraud, said:

“QR codes are becoming increasingly common in everyday life, whether it’s scanning one to pay for parking, or receiving an email asking to verify an online account. However, reporting shows cyber criminals are increasingly using quishing as a way to trick the public out of their personal and financial information.

“We’re urging people to stop and check before scanning QR codes, to avoid becoming a victim of quishing. Look out for QR codes that may have been tampered with in open spaces, or emails and texts that might include rogue codes. If you’re in doubt, contact the organisation directly. You can follow our advice on quishing, on our website at www.actionfraud.police.uk to help protect yourself.”

Action Fraud can reveal that quishing happens most frequently in car parks, with criminals using stickers to tamper with QR codes on parking machines. Quishing also occurred on online shopping platforms, where sellers received a QR code via email to either verify accounts or to receive payment for sold items.

Reports also showed phishing attacks were taking place impersonating HMRC, or other UK government schemes, targeting people with QR codes designed to steal personal and financial details.

What can you do avoid being a victim of quishing?

QR codes used in pubs or restaurants are usually safe to scan. Scanning QR codes in open spaces (like stations and car parks) might pose a greater risk. Check for signs that codes may have been tampered with (usually by a sticker placed over the legitimate QR code). If in doubt, do not scan them: use a search engine to find the official website or app for the organisation you need to make a payment to. If you receive an email with a QR code in it, and you're asked to scan it, you should be cautious due to an increase in these types of 'quishing' attacks. Finally, we recommend that you use the QR-scanner that comes with your phone, rather than using an app downloaded from an app store.
If you receive a suspicious email, report it by forwarding it to phishing@report.gov.uk

Find out how to protect yourself from fraud: https://stopthinkfraud.campaign.gov.uk

If you’ve been a victim of fraud, report it at www.actionfraud.police.uk or by calling 0300 123 2040. In Scotland, contact Police Scotland on 101

Although this message was issued by the Thames Valley Police, the message is relevant to occupants of all police force areas.

Don’t get hooked: new warning urges the public to continue reporting phishing emails and texts with 41 million already reported

As of April 2025, the total number of phishing frauds reported to the Suspicious Email Reporting Service (SERS) reached over 41 million since its launch in April 2020. This has resulted in 217,000 frauds being removed from across 393,395 websites pages by the National Cyber Security Centre.

Insight revealed by Action Fraud shows the top industries impersonated in reported phishing emails were streaming services, tech, and telecommunication companies, with some posing as various UK government schemes.

Action Fraud, the national fraud and cyber-crime reporting service, launched a phishing awareness campaign to urge the public to beware of phishing frauds and report all emails and messages if they look suspicious.

Spam calls and suspicious text messages can be reported too. By using 7726, a free service offered by mobile network providers, customers can forward suspicious text messages, which helps the removal of fraud websites and allows networks to block users sending fraud text messages. Between April 2020 and April 2025, more than 27,000 frauds were removed because of being reported using 7726.

Detective Inspector Duncan Wynn, Head of Central Fraud Unit at Thames Valley Police, said:

“Fraudsters continue to exploit manipulative tactics to gain access to your personal information and money.

I urge you to become part of the solution by ensuring you forward spam calls and texts messages to 7726 and forwarding suspicious emails to report@phishing.gov.uk

Every fraud starts through a route of contact which is covered in our Fraud Protection toolkit

Knowledge and collective action are our biggest asset when rising the challenge of fraud.

I encourage you all to start having conversations about fraud, especially with any vulnerable family members or those in your community.

Together, we will continue to rise to the challenge of fraud.”

Superintendent Amanda Wolf, Head of the National Fraud Intelligence Bureau at the City of London Police, said:

“We know it can be difficult to spot fake messages or tell if a call is genuine. Criminals can change tactics fast and use the technology available to constantly create genuine looking emails and messages or facilitate calls that feel authentic - all designed to trick us and try and steal personal and financial information.

“Every phishing email reported helps us gain a better understanding of the tactics being used and enables us to tackle it head on by identifying malicious URLs trending in phishing emails and texts - they can be taken down and disrupted, preventing further activity. The more reports received, the more people we can protect, preventing them from becoming victims.

“Do not get caught out, Stop, Think Fraud, and make sure you report suspicious-looking emails or messages if you receive them. You can forward emails to report@phishing.gov.uk, or forward spam text messages to 7726.”

Sarah Lyons, NCSC Deputy Director for Economy and Society Resilience, said:

“Since 2020, over 41 million phishing attempts have been reported to the Suspicious Email Reporting Service — a powerful sign that the public is staying alert to online threats, helping to protect themselves and others.

“But cyber criminals are not giving up - they are constantly finding new ways to trick people into clicking malicious links, sharing personal information, or handing over money.

“That is why it is more important than ever to stay alert. You will find clear, practical advice on how to spot and report frauds - and how to stay secure online - on the NCSC website.”

What is phishing?

'Phishing', ‘quishing’ or ‘smishing’ is when criminals use fake emails, text messages, QR codes, or phone calls to trick victims.

The goal of a phishing message is to encourage the victim to click a malicious link, or scan a fraudulent QR code, which usually leads them to a genuine-looking website, designed to make victims part way with their financial and/or personal information. Criminals will use well-known brands or organisations the victim already has a connection with, like a bank or tradesperson, to make fake emails seem genuine and more convincing.

How can you protect yourself?

If you have received an email that does not feel right, STOP!

break the contact – do not reply, click on any links, call any phone numbers, or make any payments check if it is genuine: contact the organisation directly using an email address or phone number you know is correct, e.g. from your utility bills, via a search engine, on the back of your card or by calling 159 for banks before you delete the email, forward it to report@phishing.gov.uk
If you have received a text message that does not feel right, STOP!

break the contact – do not reply, click on any links, call any phone numbers, or make any payments check if it is genuine: contact the organisation directly using an email address or phone number you know is correct, e.g. from your utility bills, via a search engine, on the back of your card or by calling 159 for banks forward the message for free to 7726
If you have received a call that does not feel right, STOP!

hang up check if it is genuine: contact the organisation directly using contact details you know are correct, such as those on a utility bill, official website, the back of your card or by calling 159 for your bank do not trust the Caller ID display on your phone – it is not proof of ID report it by sending a text to 7726 with the word ‘call’ followed by the fraud caller’s number
For more advice on how to protect yourself from fraud: https://stopthinkfraud.campaign.gov.uk/

If you have lost money or provided financial information because of a phishing fraud, notify your bank immediately and report it to Action Fraud at actionfraud.police.uk or by calling 0300 123 2040. In Scotland, call Police Scotland on 101.

Message Sent By
Jo Howland
(Police, Neighbourhood Administrator, Aylesbury Vale)

https://www.which.co.uk/news/article/overstretched-trading-standards-teams-struggle-to-investigate-all-scams-and-fakes-aR6bG6B1KZ2w

https://www.which.co.uk/news/article/id-fraud-is-on-the-rise-with-criminals-using-ai-to-scale-their-attacks-aYg384j0kTqV

https://www.which.co.uk/news/article/illegal-and-potentially-dangerous-energy-saving-plugs-still-widely-available-aRj6E8g6e7AX

At lunchtime today, I received 2 almost identical messages from them telling me to apply for my £300 allowance.

What is really clever is that they are obviously working from home as both numbers are mobiles. There must also be some sophisticated software in use to be able to extract and process data from a form you submit.

Do you think if I respond to both numbers I'll actually get £600?

Just beware everyone, there are people out there who actually believe that everybody is a sucker!

A message appeared on my screen saying that my ukpowernetworks account had been accessed and I should create a strong password - or something to that effect. Immediate panic so I can't now recall in what form the message appeared, nor can I find it! It's not in my email inbox. Microsoft Word was also mentioned - I do have my password for ukpowernetworks in a Word doc but that is also password protected and I think wasn't open at the time. Has anyone else had anything similar?

https://www.which.co.uk/news/article/scam-alert-bogus-qr-codes-continue-to-target-motorists-ansiE0h1LKF0

https://www.youtube.com/watch?v=dV9U_aoHI_g

Be aware that sometimes when you phone to register your product or extend your guarantee, at the other end will be Domestic and General not the manufacturer. They will point out the pitfalls of not taking out their extended cover, and how much you will have to pay if the engineer's visit finds it is your fault that it is not working.

How to spot fundraising fraudsters exploiting the festive season, plus advice on donating safely

https://www.which.co.uk/news/article/four-common-charity-scams-and-how-to-avoid-them-akSDe7q9Bk29

I already have this under a different email address. Began to sign up and then saw the fee of £30, and realised it was a scam.

'We have seen an alarming rise in the number of queries we receive about fraudulent activity relating to properties. Recent news reports, including coverage on Rip Off Britain by the BBC, are highlighting how property fraud is skyrocketing. People are losing their homes without even knowing, leaving them devastated and with little recourse.



The HM Land Registry has launched a Property Alert Service, a proactive solution to protect your property and prevent you from falling victim to these scams. This service is currently the only way to stay on the safe side and ensure your property is safeguarded against fraud.
­
REGISTER NOW
How does it work?

Once you register, you will receive a unique login to the HM Land Registry portal where you can monitor up to 10 properties and receive notifications for any activity, allowing you to stay in control.


­
REGISTER NOW

This email was sent to all of our clients who have used our service before; if for any reason you believe this email was sent to you by mistake or you have other concerns, please call us on 0333 880 1108, and we will be able to confirm the service you used with us.
Online Land Registry
enquiries@onlinelandregistry.org.uk
0333 880 1108'

Much like several Scooploop members, Daisy can ramble along all day, but in her case, the rambling is beneficial. See her in action below.

https://news.virginmediao2.co.uk/o2-unveils-daisy-the-ai-granny-wasting-scammers-time/

https://www.which.co.uk/news/article/black-friday-deals-exposed-as-duds-aoK6u3j2suyu

More than 50,000 copycat home delivery websites were reported and criminals are retargeting victims with bank impersonation scams

https://www.which.co.uk/news/article/who-tops-the-list-of-home-delivery-scams-in-the-past-year-aWcog3V1HFVZ

https://www.bbc.co.uk/programmes/articles/1lGnq3mfpVhGX6PNRgfp2Vf/bbc-scam-safe-week-23rd-30th-november-2024

https://www.bbc.co.uk/sounds/play/p0k6k8jz

https://www.which.co.uk/news/article/quiz-could-you-spot-a-deepfake-a5Bk99o6oaPW

Click link, not image.

https://capitalaitechlab.pro/index.php?products=gbir_nine9&ad_id=120213863260880321&campaign_name=WF+1.53+%2F+UK+%2F+life+%2F+12.11&adset_name=Real+estate&ad_name=GB18&site_source_name=ig&placement=Others&FBpixel=1291849325138888&keyword=lewikUK&utm_medium=paid&utm_source=ig&utm_id=120213863260830321&utm_content=120213863260880321&utm_term=120213863260980321&utm_campaign=120213863260830321&fbclid=PAZXh0bgNhZW0BMABhZGlkAasV3y7RKsEBpr94rVy7Ov17FrNUYxahnR4kFV-lY2uspeNgCgE5bcUBygr78Y8OFTPiWA_aem_v9HFLi_pA3edWy7WTPRHvw

Interesting video: https://www.youtube.com/watch?v=IvScj6oeIRo

https://www.scooploop.com/user/EmillaFilipowic

https://www.scooploop.com/thread/new-service-to-check-if-a-communication-is-a-scam

Surprise, surprise, the offer expires today. Missing from the screenshot at the bottom is 'the UK Government. The writer is a bit confused.

Answering a call from an unknown number can add your number to a list that is sold by scammers. So, by answering the call, you have just signed up for others, and It also provides a recording of your voice to be used by AI. Leave your answering machine/service to deal with it; scammers/salesmen do not leave a message. If you are worried that it could be a valid caller that has not left a message, then check with the service in the comment below.

https://www.scooploop.com/thread/i-recieved-a-scam-text#comment_516965

Another reason not to answer unknown callers is that your voice can be recorded in order to impersonate you using AI. See what it is capable of in this edition of BBC's Click programme: https://www.bbc.co.uk/iplayer/episode/m0023m4d/click-clones-and-phones.

"07724 601011
Your car is on the way, Please Look For A Black Jaguar Xf Reg FT65 FHD Plate 1 Thanks for using AA Taxis, Click To Track http://d.dmbook.co/?x=1x3TcGSRrXXX"

But it's been reported to 7726

The XXX was not on the original link, but I didn't want to leave it active!

If you get one of these Do Not click the link.

https://www.scooploop.com/thread/a-message-taken-from-nextdoor

See comment below for more information.

https://www.which.co.uk/news/article/scam-alert-new-parking-fine-scam-text-aj5wx1j3trT1

Copied from Next Door.......

Bromley Trading Standards has issued the following warning:

Impersonation fraud warning

Bromley Trading Standards is warning residents to continue to be vigilant against impersonation scams and advising everyone how to spot the signs.

Impersonation fraud happens when an individual is convinced to make a payment or give personal and financial details to someone claiming to be from a well-known organisation such as the Police, your bank or a service provider, or even someone you trust.

Scammers will typically make contact via a phone call, a text, an email, or on social media, appearing to be from a trusted organisation. They may falsely report that the target's bank account is at risk, for example, and instruct that the money be sent to a 'safe account'.

If impersonating a friend or family member, the scammer may also ask for urgent help to pay a debt, bill, or other fees. Criminals often invent reasons such as these to ask for money or trick victims into sending money elsewhere.

In attempting to reassure people, a common tactic of fraudsters is to advise the resident to call the organisation immediately on their actual number, e.g. from the back of their bank card. The scammer then stays on the line without the person realising so they think they are speaking to the real organisation, when in fact the scammer is still connected.

The advice is, if you are asked to send money urgently, always be suspicious, especially if you have been contacted unexpectedly. Remember, as with any scam, fraudsters want you to give them your money or personal and financial information.

More advice and information about impersonation fraud can be viewed on the Take Five – Stop Fraud website.

To protect yourself from impersonation scams, take note of the following:

• Stop and think before clicking on any links or replying to messages. Are these really genuine? Check directly with someone you can trust first.
• Your bank or the Police will never ask you to transfer money to a safe account.
• If you receive a suspicious call, HANG UP. Contact the real organisation on a trusted number – wait for some time before calling or use a different phone.
• Only give personal or financial information to those you have requested to contact you.

Report & Assistance

Visit the new Get Safe Online Self-Help Tool Centre on the Get Safe Online website

Contact your bank if you have given your financial details. Call 159 — Stop Scams UK

Contact Citizens Advice for help and advice on 0808 223 1133 or on the Citizens Advice website

Report to Action Fraud on 0300 123 2040 or on the Action Fraud website

Forward suspicious emails to report@phishing.gov.uk

Report suspicious text messages to your phone provider on 7726

Report a suspicious website via the National Cyber Security Centre website

You can also visit the scams page on the council website for more information

Learn more about impersonation fraud on the Take Five – Stop Fraud website

https://www.which.co.uk/news/article/qr-codes-are-still-being-hijacked-to-set-subscription-traps-and-scams-alyxt1h5FrBD

If you have a GMX email account, beware of the scam email alert asking you to accept their new terms.

... Forwarded to National Cyber Security Centre.

https://www.scooploop.com/thread/beware-of-amazon-scams#comment_498351

This scammer is joining and being let in to loops (35) all over Scooploop. She is using different names. 2nd name in comment.

https://www.scooploop.com/user/EmillaFilipowic

BEWARE when you park in Tescos Rickmansworth i went yesterday and came back to a note attached to my car saying somebody had bumped my car it was a very polite message but i was suspicious as i could see no damage so I googled the phone number when i got home and its a HONG KONG phone number .This could be another scam.

This could be a new type of scam - be cautious.

https://www.which.co.uk/news/article/facebook-account-hacking-warning-what-you-need-to-know-aclY93g3zrJB

https://www.which.co.uk/news/article/3-ways-scammers-could-exploit-the-general-election-aYbOE2S6GLMj

https://www.which.co.uk/consumer-rights/advice/how-to-spot-and-avoid-ai-scams-aaDn52A8nDhR

https://www.dailyactunews.com/smart-tv-uk-sb?

https://www.which.co.uk/news/article/scammers-steal-home-deposits-in-callous-conveyancing-scams-afGcO5t39f7o

Just received a recorded message saying it was from Visa checking that I'd purchased train tickets costing £129 and if it was not me I should press 1.

Not heard that one before.

Beware of a Google Play Store scam. Scammers send a text or email pretending to be from Google, this has a link to update the Play Store. This will install malware on your phone. Google will never send such communications, as the Play Store updates in the background.

https://www.scooploop.com/thread/investment-fraud-and-a-new-self-help-tool-centre

https://www.scooploop.com/thread/whatsapp-group-chats-are-targeted-by-fraudsters

https://www.theregister.com/2024/05/09/dell_data_stolen/

Take Five offers straight-forward and impartial advice to help everyone in the UK protect themselves against financial fraud.


https://www.takefive-stopfraud.org.uk/

Yiewsley High Street incident
As a matter of urgency we wish to make you all aware of a scam that was brought to our attention recently.

This week an elderly female who has a disabled badge parked her car in Yiewsley High Street near to the GP surgery. A male approached the victim and told her that it was illegal to park on the single yellow line even with a disabled badge.

Later when she returned to her car, another male wearing what appeared like a black stab vest and a cap told her that she would get a fine for parking illegally. He made her tap her bank card on a portable machine and asked the victim for her card pin number.

Following this incident several fraudulent transactions were noticed in the victim’s bank account.

We would ask everyone to pay attention to anyone posing as enforcement officers in public and do not divulge your bank or personal information to anyone. These people are likely to act in groups. An enforcement officer in public should have identification and will not ask you to pay any fines on the spot.

Please report any suspicious activity to police and call someone you know if you are unsure.

If you need to reply regarding this message, tap on this email address: westdrayton@met.police.uk

Regards,
Jeff Jacob
PCSO
Email: westdrayton@met.police.uk

She only has one child and he's 9 months old.
How many other children of his age have got their own mobile number and know how to use it?