Feel like an idiot - fraud

[defrauded2]

So I had one of those phishing emails, telling me a direct debit had failed. Because it was for a service I do actually use, and because I've only recently reactivated the direct debit for the year I thought it was legit. It wasn't in my junk mail either which is where usual phishing emails go.

I was in a rush yesterday when I saw the email asking for updated card details and I stupidly put in lots of information - name, address, email, phone number, account number and sort code and my bank card. (Even possible DOB, I can't remember) I realised my mistake within 5 minutes and called the bank who cancelled my bank card.

I thought that might be it but today I had a call from a withheld number from someone claiming to be from the Bank. They even called me by my full name. I told them they weren't the bank because the Bank wouldn't call me on a withheld number. They were asking me to check a transaction on my account.

The transaction it turns out was for Credit - I contacted the company right away and they cancelled the credit application. The scammer then called me again and I explained I knew they weren't the bank and they got a bit nasty.

What can I do to protect my identity??
So far, I have:

1. downloaded the Credit File apps to keep track of things, Clear Score, Equifax and Experian. 2. made sure there is a note on my credit file including a password for companies looking to obtain credit. 3. signed up for Cifas protection.

Its really worrying that they have all my personal details and I felt unnerved that they called me by name

Edited to add, also reported to Report Fraud who have given me ref number

You aren't an idiot OP. ANYONE can get caught out by scammers. And it sounds like you have been very much on the ball since your slip up.
As regards what else you can do to protect your identity have you asked the Police Fraud Departnent for advice on measures you can take? Or your bank Fraud Departnent?

I'm really sorry, these scams can be so convincing. Can you look into CIFAS? We offer this at work to customers who have had their data leaked

https://www.cifas.org.uk/about-cifas/what-is-cifas

They add a warning flag against your name and other details so if you or a fraudster applies for credit the company the application is with will do enhanced security checks to ensure it's you applying.

You reacted really well ultimately and have saved your bacon
Scammers can be very sophisticated and persistent
Just remember anyone legit will never put this level of pressure on you.

Well done for spotting it when you did. Absolutely anyone can get caught by these - they are getting better and better.

Nothing to add apart from saying I hope it gets sorted and I’m sorry it happened.

I was advised to use Clear Score to keep a check on all my accounts. It doesn’t impact your credit rating, but will tell you if anyone has tried to apply for anything in your name.

I spoke to the Credit company where an application was attempted and they said an application was tried twice. Those times the fraudster called me claiming to be from the bank was a tactic to get me to tell them the authorisation code for the credit.

I've also had to completely reset my phone, because I downloaded an attachment in the email by mistake when I opened it although once I realised what I'd done, went straight into downloads on my phone and deleted the file. I was advised to reset my phone to factory settings which I have done. But now I feel really uncomfortable logging into anything on my phone which is really annoying. :(

Reading about the things they can do with all my information has had me spiralling abit. I feel it's an anxiety which isn't going to go away for a while and i've even been thinking of reopening a Bank Account and closing my current one, changing my phone number and email, but are all these things abit extreame?

You can also add a credit lock to your credit report so any applications for credit will be auto declined.

You just need to remember to unlock it if you wish to apply for credit and once approved can put the lock back in place.

I work in fraud and what we advise customers is to ensure any compromised data is made secure.

Email: Change your passwords (also check your deleted items folder, fraudsters often delete from your inbox but not always your deleted items).

Phone: Factory reset and contact your phone provider if you are still concerned, they may be able to offer more reassurance

Bank: Have the card blocked and new card reissued. This will provide a new card number so thr fraudster no longer has the card number

I work in credit card fraud and we always check a customer's account to ensure there have been no changes made to a customer's account by the fraudster. If we can see changes have been made or any devices added and it's confirmed it's not the customer we can block and secure the account.

How to stay safe:
CIFAS protection loading
Password on credit report
Put a credit lock on

Fraudsters can also skim their phone number to make it appear they are calling from a number they are not. Always release the call and call the number on the back of your card.

As long as your bank provider have followed their internal procedures correctly, I personally don't think you need to close and open a new bank account. Do, I think it's extreme to do so? Absolutely not, if it offers you reassurance, then that's what you need right now.

You are not an idiot OP, fraudsters are constantly upping their game and are coming across as more authentic.

The best advice, I think we give is, any phone calls, texts or emails you receive that appears to be from your bank provider. Just call the number on the bank of your card and the customer service team will be able to confirm its authenticity.

I’m so sorry this has happened to you, @defrauded2 , but can I just say thanks for posting? I had no idea of some of the things you and other posters have mentioned that you could do to prevent fraud (and I thought I was pretty well informed!).

What a helpful post, @Wheelz46 - for loads of us I’d imagine.

Hope you’re feeling a bit better about things, OP. Can and does happen to any of us x

I've had similar - once I realised what was going on, I immediately called my bank, they cancelled the card and ran through previous transactions to check which were mine and any not. Fraudster was trying to set up google pay on their phone which my bank could see at their end and therefore blocked that too. Fraudster had my phone number and full name - was a very well spoken woman so this led to me letting my guard down. Felt silly afterwards but my bank were very reassuring. Once card was cancelled, no further issues.

I'm feeling terrible about it, and wondering how I could be so stupid! I actually feel embarrassed. I am usually very hot on these things, but because the email I had connected to a current circumstance, I fell for it! I suppose i've also been abit vulnerable recently as I haven't had a very good year at all so far.

@Wheelz46 thank you for your post. Changed my Bank Account login details. My Email login details... anything else I should think about?

I have signed up to both Equifax, Experian. I upgraded on Experian in order to 'lock' the credit, but it is not allowing me to do that, error saying 'We need a few minutes to confirm your address details, please try again later'? Really annoying, their office is closed on a weekend so fraud could be taking place on my accounts as we speak. Is it worth signing up to TransUnion also?

I have added Notices of Corrections to Equifax and Experian stating my password.

I already used ClearScore regularly to check my credit score.

Also CIFAS Protection at a cost of £30 added.

New Bank Card coming.

Now feel like I should be putting home on the market and moving out to get a new address!! Also feeling a bit sick that they referred to me by name on the calls.

Can I also add that if you can’t get hold of your bank phone number you can call 159 from your phone and that will get you to your banks fraud department. 159 cannot be spoofed by criminals.
send spam texts to 7726 (spam on an old phone) and send emails to report @ phishing. Gov. Uk (without the spaces obvs - no idea if MN allows email addresses) the email that you will get back is very informative.
youve done everything you should, start using passkeys too.

It sounds like you have done everything you can to protect yourself.

CIFAS and password protection on your credit profile are the best starting points. If someone attempts to apply for credit using your details, the provider has a legal obligation to check the authenticity of the application.

You are very well protected with a password on your credit report as the providers have a legal obligation to confirm that password with you before accepting credit. Along with the CIFAS protection, an underwriter will be doing extra vigilant checks.

Fraud monitoring systems that are used by companies are constantly improving and the information provided helps with the decisioning process. From a fraud prospective, if contact is made with the fraudster, we have ways and means to be suspicious.

We always advise customers to check credit reports with Experian, Equifax and TransUnion. TransUnion, I do believe is less common and would imagine most companies will use the main companies for their credit searches. We always err on the side of caution and confirm all 3. I do think you are likely safe with just Experian and Equifax but for ease of mind, I would recommend placing it on TransUnion too.

Please don't he embarrassed, the only ones that should be embarrassed is the fraudsters. You've done everything you need for now to keep your details safe, hopefully Experian will be able to verify your details soon to put a credit lock on. Just know, you have the safety net of the password and CIFAS loading.

I will be creating a TransUnion account next. I just tried to log into my email account and it asked me to set a new password and security settings as it said my account had been compromised😩Looking at the login data is shows 'Sign in blocked (account compromised)' before I reset the security settings.

I am worried they've been trying to get in my email next since I refused them my credit.