How to stay safe online and avoid scams

Criminals use a wide range of methods to steal your personal information or money. They often use social media, emails, texts, phone calls and fake websites in their scams. They might use your information to access your account directly and take money out. Or they might create convincing scenarios to try and trick you into sharing your information or making a payment.

Below are some tips for staying safe online and some examples of the different scams that are out there.

What to do if you’re concerned:

Please contact us immediately by phone or visit your local branch if you are concerned:

• You may have been targeted by a scam.
• You may have disclosed any confidential information to an unknown third party.
• You believe a transaction on your account is fraudulent.
• It looks like someone may have used your identity fraudulently. 
• You have any concerns about your account security.

Tips for staying safe online      

1. Unique passwords for each account - It’s tempting to re-use passwords, but if one account is hacked, then the fraudster could have access to all your other accounts too. 
2.  Use strong passwords - Random words and numbers can make your password harder to crack.
3.  Turn on two-factor authentication - Banks and building societies often have 2 factor authentication. This adds an extra layer of security, such as being sent a text if someone tries to login to your account. 
4.  Use antivirus software - Make sure you have anti-virus software on your computer and then keep it updated.
5. Click links with caution - Even those shared by a friend. If the post or message doesn’t sound like them or it’s out of character to share that kind of thing – avoid it.
6. Log off when you’re done - Get into the habit of logging out between visits.
7. Avoid quizzes and games - Any that your name or email address may be used to build spam lists and send you phishing emails.
8.  When using wi-fi, check it’s secure.  If not, use your mobile data connection which encrypts information you send.

Protecting yourself against scams

Scams are many and varied and are always evolving. Some examples are:

Romance Fraud

Romance fraud is when a criminal uses a fake profile to form a relationship with you. They try to gain your trust by appealing to your compassionate side, finding out personal information about you and creating fake stories so it seems like you have a lot in common. Criminals sometimes target any profiles that are widowed or divorced. Once they have gained your trust, they start inventing reasons for needing money. These can be anything from an emergency situation or medical care, funds for travel to come and see you, asking you to take out a loan for them in your name, and many more. There will often be a promise of paying you back.  

How to avoid romance fraud:

• Avoid sending money to someone you’ve never met or have only met a few times, especially if they’re declaring strong feelings for you after only a few conversations.
• Research the person you’re speaking to. You can upload the photos from their profile into a search engine to see if it appears anywhere else with a different name.
• If someone asks you to lie to your bank or building society, this is a scam - don't engage with them. Report them immediately.
• Always consider the possibility of a scam.
• Be alert to inconsistencies in their stories.
• Stay on the dating site or platform until you’re confident the person is who they say they are and before you share your phone number or personal information.
• Speak to family and friends about people you match with online.
• Be wary if you are encouraged to keep things from your family and friends.

For more information and examples of romance scams, visit the Take Five to Stop Fraud website: Take Five To Stop Fraud | To Stop Fraud

If you believe that you have been targeted by a romance fraud, please remember that you are not to blame, are not alone, and you should not feel ashamed. Support and help are available. Contact your bank or building society and also report to Action Fraud (contact details for Action Fraud are towards the bottom of this page).

Tech support scams

Tech support scams use the threat of risk to your device or files to capture your information or encourage you to pay for false IT problems to be fixed. They use tricks to make it seem that there is a problem with your device – and they can fix it for you. Scammers might contact you by phone, or a pop-up on your device asking you to call for support. 

How to avoid tech support scams:

• Check any number that you are given to call.
• Don’t download remote access software.
• If someone else can see your screen, don’t log into your financial accounts.
• Don’t tell anyone your username, password, or access codes.
• Use anti-virus software on your device and keep it up to date.

Holiday fraud

Holiday fraud involves paying for holidays that doesn’t exist. Scams also target people looking for refunds for delayed flights or cancelled holidays.

How to spot holiday fraud:

• The price is too good to be true – If the holiday seems too cheap, it could be a scam.
• Bank transfer – Being asked to pay by bank transfer could be a red flag.
• Not protected – The company is not ABTA members or ATOL holders.
• Limited information – Online searches bring up very little about the company.

How to avoid holiday scams:

• Check for trust signals – An ATOL or ABTA holiday provider will have evidence on its website.
• Only buy from trusted sites – Use well- known brands to book holidays.
• Spot scam websites – Check for a locked padlock symbol and a website has ‘https’ at the start of the URL.
• Look at reviews – Make sure to check reviews from a few different sources.
• Don’t be rushed – Fake companies may try to rush you into handing over details to get a good deal or refund. Always take five and do your research.

Phishing email scams

This is a type of scam where the scammer contacts you via email, pretending to be from a real brand to try and steal your details.

How to spot a phishing email:

• Check the sender email address – Check that the email is genuine, and look out for random letters, or tricks like a 1 instead of an “I”.
• Do they use your name or ‘Dear customer’? – If they don’t use your name, it’s likely they don’t know who you are.
• Mistakes – Check the format, grammar, and spelling. If it doesn’t look right, it may be a scam.

What to do if you get a phishing email:

• Don’t click on the links or download any attachments.
• Don’t give any details.
• Flag the email as spam with your email platform.
• Report the email to the National Cyber Security Centre by using report@phishing.gov.uk
• Delete it.
  If you ever receive an email pretending to be from Chorley Building Society, and you are unsure it is us, please forward to  phishing@chorleybs.co.uk.
  
  

Energy scams

Criminals are taking advantage of people’s cost of living concerns in a host of new ways, such as:

• Offering fake energy saving devices or supermarket vouchers (purchase scams).
• Impersonating organisations such as the government or energy companies over email, text and phone (impersonation scams).

How to spot an energy scam:

• Scam text message - Any text from the government promising financial help with bills will be a scam and should be ignored, reported and then deleted.
• Don’t click on any links that you receive through text, they will likely take you to a fake website.
• The phone number might be a mobile rather than from an official source.
• Scam email – no genuine company will email you from a personal account.
• Look out for spelling mistakes and poor grammar.
• Urgency – are you being told to act quickly? Scammers will often try to force you into action by pretending you need to respond immediately.

What to do if you feel you have been contacted by one of these scams:

Report the email to the National Cyber Security Centre by using report@phishing.gov.uk

• To report a text message, forward it to the National Cyber Security Centre on 7726. It’s free and will report the message to your mobile phone provider so they can block or ban the number if it’s found to be malicious. 
• Action Fraud is the UK’s national reporting centre for fraud and cybercrime. If you have been contacted by a scammer, report it on their website or give them a call (contact details for Action Fraud are towards the bottom of this page). 
• If you are in Scotland, report to Police Scotland directly by calling 101.

“Hi Mum” message scams

A “Hi Mum” or “Hi Dad” message scam is when a fraudster sends a message pretending to be the child of the recipient. They are asked to save a new number, then convinced to send money to a third party. The scammer may say their phone is broken, so they can’t pay bills using an online banking app. The reason for the money request can vary, it could be rent, a work expensive, a favour – from hundreds to thousands of pounds.

How to spot a “Hi Mum" scam:

• Is it asking for money to be sent to an account that isn’t your child’s account?
• Is there a sense of urgency? Are they trying to rush you?
• Does the message sound like your child? Does the tone or language seem “off”?

What to do if you receive a “Hi Mum” scam message:

• If you receive one of these messages, stop replying once you’re sure it’s not been sent by your child.
• Block the number so they cannot contact you again.
• Don’t give any information away, including your name or the name of your children.
• You can report impersonation scams like “Hi mum” messages by forwarding it to the National Cyber Security Centre (NCSC) on 7726. It’s free and will report the message to your mobile phone provider so they can block or ban the number if it’s found to be malicious. 

More information available: 

Here are some other official websites and resources dedicated to keeping you safe from fraud:

Action Fraud for information on types of frauds and to report a fraud - https://www.actionfraud.police.uk and telephone 0300 123 2040 (Monday to Friday 8am - 8pm)
Take Five to Stop Fraud for guidance on protecting yourself from fraud - https://www.takefive-stopfraud.org.uk
National Cyber Security Centre for advice on staying secure online - https://www.ncsc.gov.uk/cyberaware/home
FCA Scam Smart for guidance on avoiding investment and pension scams - https://www.fca.org.uk/scamsmart
Little Book of Big Scams for information on the latest and most prolific scams - -https://nbcc.police.uk/crime-prevention/cyber-and-fraud/little-book-of-big-scams-fifth-edition