bulletin from Suffolk Trading Standards
The Met Police are contacting scam victims by text message as a result of the UK’s largest ever fraud operation.
If you receive a text message, do not ignore it!
The text message will ask you to visit the Met Police and Action Fraud websites.
The text will not include a link to click.
Operation Elaborate is the UK’s largest ever proactive fraud operation. The Met has led an international investigation targeting a website that enabled criminals to disguise their phone number and commit fraud, a practice known as spoofing.
More than 100 people have been arrested.
Losses reported to Action Fraud as a result of the calls and texts via the fraud website is around £48 million.
More than 200,000 potential victims in this country alone have been directly targeted through the fraud website iSpoof.
At one stage, almost 20 people every minute of the day were being contacted by scammers hiding behind false identities using the site.
They posed as representatives of banks including Barclays, Santander, HSBC, Lloyds, Halifax, First Direct, Natwest, Nationwide and TSB.
Scotland Yard’s Cyber Crime Unit worked with international law enforcement, including authorities in the US and Ukraine, to dismantle the website this week.
This was a crucial phase in a world-wide operation, which has been running out of the public eye since June 2021, targeting a suspected organised crime group.
iSpoof enabled criminals to appear as if they were calling from banks, tax offices and other official bodies as they attempted to defraud victims.
Victims are believed to have lost tens of millions of pounds while those behind the site earned almost £3.2 million in one 20 month period.
The Met’s Cyber and Economic Crime Units co-coordinated the operation with the National Crime Agency, Europol, Eurojust, the Dutch authorities and the FBI.
In the UK, more than 100 people have been arrested, the vast majority on suspicion of fraud.
iSpoof allowed users, who paid for the service in Bitcoin, to disguise their phone number so it appeared they were calling from a trusted source. This process is known as ‘spoofing’.
Criminals attempt to trick people into handing over money or providing sensitive information such as one time pass codes to bank accounts.
The average loss from those who reported being targeted is believed to be £10,000.
In the 12 months until August 2022 around 10 million fraudulent calls were made globally via iSpoof, with around 3.5 million of those made in the UK.
Of those, 350,000 calls lasted more than one minute and were made to 200,000 individuals.
Losses reported to Action Fraud as a result of the calls and texts via iSpoof is around £48 million. Because fraud is vastly underreported, the full amount is believed to be much higher.
The Met, which has also worked closely with the Cyber Defence Alliance and UK Finance, is asking anyone who believes they were contacted as part of a scam where a number was spoofed to report this online via Action Fraud.
The Met’s Cyber Crime Unit began investigating iSpoof in June 2021 under the name of Operation Elaborate. It was created in December 2020 and had 59,000 user accounts.
Investigators infiltrated the site and began gathering information alongside international partners.
The website server contained a treasure trove of information in 70 million rows of data. Bitcoin records were also traced.
Because the pool of 59,000 potential suspects is so large, investigators are focusing first on UK users and those who have spent at least £100 of Bitcoin to use the site.
A wave of UK arrests followed with details of other suspects passed onto law enforcement partners in Holland, Australia, France and Ireland.
Earlier this month the suspected organiser of the website was arrested in East London. He has been charged with a range of offences and remanded in custody.
There are more than 70,000 numbers that have been contacted via iSpoof that the Met has linked to an identified suspect.
The Met are actively contacting those numbers this week asking owners to visit their website for more information and to report any fraud losses online.