How to stay safe online and avoid scams

There are large number of different types of fraud scams. Below are some tips for staying safe online and some examples of the different scams that are out there.

What to do if you’re concerned:

Please contact us immediately by phone or visit your local branch if you are concerned:

• You may have fallen victim to a scam.
• You may have disclosed any confidential information to an unknown third party.
• You believe a transaction on your account is fraudulent.
• You have been a victim of identity theft.
• You have any concerns about your security.

Tips for staying safe online      

1. Unique passwords for each account - It’s tempting to re-use passwords, but if one account is hacked, then the fraudster will have access to all your other accounts too. 
2.  Use weird passwords - Random words and numbers can make your passport harder to crack.
3.  Turn on two-factor authentication - Banks and building societies often have 2 factor authentication. This adds an extra layer of security, such as being sent a text if someone tries to login to your account. 
4.  Use antivirus software - Make sure you have anti-virus software on your computer and then keep it updated.
5. Click links with caution - Even those shared by a friend. If the post doesn’t sound like them or it’s out of character to share that kind of thing – avoid it.
6. Log off when you’re done - Get into the habit of logging out between visits.
7. Avoid quizzes and games - Any that your name or email address may be used to build spam lists and send you phishing emails.
8.  When using wi-fi, check it’s secure.  If not, use your mobile data connection which 
   encrypts information you send.

Protecting yourself against scams

Scams are many and varied and are always evolving. Some examples are:

Tech support scams

Tech support scams use the threat of risk to your device or files to capture your information or encourage you to pay for false IT problems to be fixed. They use tricks to make it seem that there is a problem with your device – and they can fix it for you. Scammers might contact you by phone, or a pop-up on your device asking you to call for support. 

How to avoid tech support scams:

• Check any number that you are given to call.
• Don’t download remote access software.
• If someone else can see your screen, don’t log into your financial accounts.
• Don’t tell anyone your username, password, or access codes.
• Use anti-virus software on your device and keep it up to date.

Holiday fraud

Holiday fraud involves paying for holidays that doesn’t exist. Scams also target people looking for refunds for delayed flights or cancelled holidays.

How to spot holiday fraud:

• The price is too good to be true – If the holiday seems too cheap, it could be a scam.
• Bank transfer – Being asked to pay by bank transfer could be a red flag.
• Not protected – The company is not ABTA members or ATOL holders.
• Limited information – Online searches bring up very little about the company.

How to avoid holiday scams:

• Check for trust signals – An ATOL or ABTA holiday provider will have evidence on its website.
• Only buy from trusted sites – Use well- known brands to book holidays.
• Spot scam websites – Check for a locked padlock symbol and a website has ‘https’ at the start of the URL.
• Look at reviews – Make sure to check reviews from a few different sources.
• Don’t be rushed – Fake companies may try to rush you into handing over details to get a good deal or refund. Always take five and do your research.

Phishing email scams

This is a type of scam where the scammer contacts you via email, pretending to be from a rea brand to try steal your details.

How to spot a phishing email:

• Check the sender email address – Check that the email is genuine, and look out for random letters, or tricks like a 1 instead of an “I”.
• Do they use your name or ‘Dear customer’? – If they don’t use your name, it’s likely they don’t know who you are.
• Mistakes – Check the format, grammar, and spelling. If it doesn’t look right, it may be a scam.

What to do if you get a phishing email:

• Don’t click on the links or download any attachments.
• Don’t give any details.
• Flag the email as spam with your email platform.
• Delete it.
  If you ever receive an email pretending to be from Chorley Building Society, and you are unsure it us, please forward to  phishing@chorleybs.co.uk.
  
  

Energy scams

Criminals are taking advantage of people’s cost of living concerns in a host of new ways, such as:

• Offering fake energy saving devices or supermarket vouchers (purchase scams).
• Impersonating organisations such as the government or energy companies over email, text and phone (impersonation scams).

How to spot an energy scam:

• Scam text message - Any text from the government promising financial help with bills will be a scam and should be ignored, reported then deleted.
• Don’t click on any links that you receive through text, they will likely take you to a fake website.
• The phone number might be a mobile rather than from an official source.
• Scam Email – no genuine company will email you from a personal account.
• Look out for spelling mistakes and poor grammar.
• Urgency – if you are being told to act quickly? Scammers will often try to force you into action by pretending you need to respond immediately.

What to do if you feel you have been contacted by one of these scams, you need to report it:

• If you’ve received a scam email, you can report this to report@phishing.gov.uk
• Action Fraud is the UK’s national reporting centre for fraud and cybercrime. If you have been contacted by a scammer, report it on there website or give them a call.
• If you are in Scotland, report to Police Scotland directly by calling 

“Hi Mum” message scams

A “Hi Mum” or “Hi Dad” message scam is when a fraudster sends a message pretending to be the child of the recipient. They are asked to save a new number, then convinced to send money to a third party. The scammer may say their phone is broken, so they can’t pay bills using an online banking app. The reason for the money request can vary, it could be rent, a work expensive, a favour – from hundreds to thousands of pounds.

How to spot a “Hi Mum scam”:

• If you receive a message from a number that isn’t your child’s, think about:
• Is it asking for money to be sent to an account that isn’t your child’s account?
• Is there a sense of urgency? Are they trying to rush you?
• Does the message sound like your child? Does the tone or language seem “off”?

What to do if you receive a “Hi Mum” scam message:

• If you receive one of these messages, stop replying once you’re sure it’s not been sent by your child.
• Block the number so they cannot contact you again.
• Don’t give any information away, including your name or the name of your children.
• You can report impersonation scams like “hi mum” messages to the NSCS. 

More information available: 

Action Fraud - https://www.actionfraud.police.uk
Take Five - https://www.takefive-stopfraud.org.uk/
Cyber Aware - https://www.ncsc.gov.uk/cyberaware/home
FCA Scam Smart – https://www.fca.org.uk/scamsmart
Little Book of Big Scams -https://nbcc.police.uk/crime-prevention/cyber-and-fraud/little-book-of-big-scams-fifth-edition