Keeping your business safe is our priority

The Banking Industry has seen an increase in customers and businesses receiving cold calls from companies claiming to be from a large telecommunication or computer company, or, for businesses in particular, an internal/external IT department.

The caller may offer:

• to fix, upgrade or protect your computer from running slowly;
• upgrades in service for internet connections, devices or phone lines; or
• assistance for refunds of overpayments.

The caller asks you to log on to your internet banking and then they attempt to remotely access your computer so they can ‘assist with the issue’. However, this allows them to release malicious software and gain access to your personal data.

Fraudsters may also ask for banking, card, security or other personal details in order to get access to your internet banking. 

Protect yourself

• Never give control of a computer to a third party who calls out of the blue.
• Never disclose personal or security details such as PINs, passwords or Security Numbers, or allow anyone to collect your bank card.
• Never rely on caller ID alone to authenticate a caller – criminals can spoof caller ID numbers, so the number displayed can’t be relied on to validate where the call is coming from. 
• Never follow a telephone instruction asking to press keys on the keyboard or run any programmes from a cold caller.  
• Never give a card or any financial information to someone who calls unexpectedly and tells you a refund is due.
• Never transfer money based on an instruction from a cold caller, even if they say it’s for a return of an overpayment.
• Never log on to your internet banking while a third party is connected – even if you think the caller is genuine and they ask you to make a payment for their service.
• Download the free online security software, Trusteer Rapport – it can help identify and remove malicious software, offering you protection when using Online Banking. It can be used alongside any standard anti-virus product. 

If you think you’ve been a victim of fraud or a scam, are concerned you may have allowed access to your computer, or have potentially downloaded malware, call us immediately on:

• Commercial: 0800 085 2090
• Corporate: 0151 298 6520

For more information about common frauds and scams, visit our website at www.santandercb.co.uk/fraud

Telephone number spoofing happens when a caller deliberately falsifies how their phone number appears on the Caller ID to disguise their identity. Fraudsters are increasingly targeting businesses over the phone by posing as bank staff, police officers and other officials or companies in a position of trust. The fraudster tries to persuade the victim that their accounts are at risk and that they must move their money to a new account, which normally belongs to the fraudster.

Warning signs

If the victim questions giving out personal details or moving their money, the fraudster tells them to check the Caller ID of the phone number they’re calling from, which they have masked, or ‘spoofed’ to look like your bank’s phone number.

Never disclose your security details 

Sensitive information such as your bank card details and bank security information (PINs and passwords) shouldn’t be shared with anyone – not even your bank. We’ll only ever ask you for part of the details, such as the first and fifth letters of your password.

Remember 

Santander or the police will never ask you to give your full security details over the phone or by text message, nor to surrender your bank card. And we’ll never tell you to move your money to different accounts for security reasons.  

If you think you’ve been a victim of fraud or a scam, or you’re worried you may have given out any of your security details, call us immediately on:

• Commercial: 0800 085 2090
• Corporate: 0151 298 6520

Invoice fraud happens when fraudsters send a fake invoice, or bill, asking you to pay for goods or services that you haven’t used. Usually, they’ll try the following:

• the fraudster takes on the identity of one of your suppliers, business contacts or even a colleague, often by hacking their email system, or by sending you a request by fax or post that seems genuine
• they trick you into changing the bank account details for an outstanding/future payment or a senior colleague may ask you to make a new payment
• the message will usually urge you to pay straightaway to avoid further charges or consequences.
• your money is then paid to the fraudster's bank account.

You'll only know it was fraud when the genuine company sending the invoices chases the payment. By this time, it’s unlikely you’ll be able to recover your money from the fraudster.

How to spot invoice fraud

The main thing you should look out for, is unusual grammar and spelling mistakes, or requests to change your usual payment details.

If the invoice comes in the post on headed paper, look out for minor discrepancies, such as a change in font or a change in the usual payment details.

Your contacts email address may be altered very slightly to give the impression that it’s correct, but it is in fact fraudulent. Alternatively, you might receive an email directly from someone you’ve dealt with before, but their email account may have been hacked or spoofed.

What you can do to protect yourself

• Always confirm any requests to make a new payment or change bank account details directly with the company or colleague making the change. Avoid replying to the email or using the contact details in the letters.?
• Set up a single point of contact for companies you make regular payments to.
• Review changes of account details that have already gone through where the payment is due at a future date and confirm that the request is genuine.
• Consider extra checks for payments over a certain amount.
• Corporate customers should review their payment approval processes – as mentioned, you can use dual authorisation for an extra layer of security as all payments go through at least two people.
• Call our Fraud Team immediately if you think you’ve been a victim of a scam, or even an attempted victim – we’ll be able to set up a case and attempt to recover funds from the recipient bank on your behalf.

How is usually happens:

1) A cold caller contacts you claiming to be from a ‘Tech Support’ company and says that your device is running slow. They might even guess what computer software you’re using.

2) They may ask you to go to your computer and perform a series of complex tasks – sometimes, they target legitimate computer files and claim that they are viruses. Their tactics are designed to scare you into believing they can help fix your ‘problem.’

3) They try to gain your trust by pretending to be associated with well-known companies or confusing you with a barrage of technical terms.

4) Once they’ve gained your trust, they may:

• Ask you to give them remote access to your computer and make changes to your settings, leaving your computer vulnerable;
• Try to enrol you in a worthless computer maintenance or warranty program;
• Ask for account or card details so they can bill you for phony services, or services you could get elsewhere for free;
• Trick you into installing malware that could steal sensitive data, like user names and passwords;
• Direct you to websites and ask you to enter your banking or card details and other personal information.

Regardless of the tactics they use, they have one purpose: to make money.

Protect yourself

Here are some simple rules to follow:

• Never give control of your computer to a third party who calls you out of the blue.
• Never follow a telephone instruction asking you to press keys on your keyboard, or run any programmes from a cold caller.
• Never disclose your security details such as your PIN, passwords or security numbers. These are personal to you and shouldn’t be shared with anyone, not even us.
• Never rely on caller ID alone to authenticate a caller as criminals can spoof caller ID numbers. They may appear to be calling from a legitimate company or a local number, when they’re not even in the same country as you.
• Never give your card, personal or financial information to someone who calls and claims to be from a Tech Support company or any other company that advises you are due a refund.
• Never Log on to Santander Connect after a caller tells you too. If they have gained access, they can see what you see, including your account information and your security passwords.

Remember

• If you get a cold call from someone who claims to be a Tech Support Company, hang up.
• A caller who creates a sense of urgency or uses high-pressure tactics is probably a scam artist.
• If you think you might have downloaded malware from a scam site or allowed a cybercriminal to access your computer, call our Santander Connect Helpdesk on 0800 068 6059.