Police Scotland Business Advice 04 September 2020
Should this email be sent to one of your colleagues as well as you? If you are ‘moving on’ please let us know a new contact within your company to send the bulletin toDo you have any sister companies or businesses you work closely with who you think would benefit from this email (check with them first) then please let us knowIf you no longer wish to receive this email then please let us know at NorthEastCrimeReduction@Scotland.pnn.police.uk
URGENT MESSAGES THEY WILL BE SENT OUT AS APPROPRIATE
National Cyber Security Centre (NCSC)Exercise In A Box
The NCSC have launched two new micro exercises as part of their Exercise In A Box service. This is a free tool that helps organisations test and practise their response to a cyber attack. The micro exercises cover the topics of Phishing and Ransomware take approximately 20 minutes to complete. To use Exercise in a Box you need to register for an account. This enables the NCSC to provide you with a tailored report, helping you identify your next steps and pointing you towards the guidance which is most relevant for your organisation.The Suspicious Email Reporting Service was launched by the NCSC to allow members of the public to report suspicious emails. Since the launch of this service, the reports received stand at more than 1.9 million leading to 7,080 sites being removed. Please forward any suspicious emails to: report@phishing.gov.uk, suspicious text messages should be forwarded to 7726.
‘Vishing’ Scams Targeting Home Workers
Employees working from home are being targeted by new voice phishing or ‘vishing’ scams. Scammers phone staff, posing as their company’s IT department, and say that they are troubleshooting issues with the company’s VPN.The aim of these calls is to obtain the employee’s login details, either over the phone or by convincing them to enter them on a fake website. Throughout the Covid-19 pandemic, we have reported on other scams targeting home workers, including ‘spoofing’ attacks where emails appear to come from trusted colleagues or IT departments. A recent report has found that SMEs in the UK are at risk of 65,000 cyber attacks every day, with almost half of companies surveyed admitting that they don’t have adequate cybersecurity provision for staff working from home.
Useful Guidance for Businesses
The NCSC has a variety of resources including security guidance to help organisations choose, configure and safely use video conferencing services, guidance for businesses who have had to move from physical premises to online working and guidance on preparing your business and staff for home working. The Scottish Business Resilience Centre (SBRC) have a variety of resources to support and protect Scottish businesses. Business Gateway have advice and a range of useful resources to help you keep your business safe online. Report business scams to Advice Direct Scotland – you can also forward scam emails to the National Cyber Security Centre.
Brushing Scams
Most e-commerce websites rate sellers by multiple criteria, and display the seller ratings to customers. Since good ratings can boost sales, these ratings are very important to sellers along with the number of items sold being an important factor in that rating. Brushing scams consists of generating fake orders to boost the rating. A seller can do this by paying someone a small amount to place a fake order, or just using another person’s information (often without their consent) to place an order themselves. Because a shipment usually has to take place for an order to be considered valid by the e-commerce website, the seller may ship an empty box or some cheap item. These fake orders, if unnoticed, can boost the seller’s rating, which can make it more likely that the seller’s items will appear at the top of search results on e-commerce websites.The deliveries arrive addressed to residents who didn’t order the items and the seller will then post false customer reviews to boost their sales. Scammers mail lightweight (inexpensive to ship) packages, such as rings, face mask and recently Scottish households have been receiving small parcels containing seeds in the post from China/Singapore as part of a likely scam. Science and Advice for Scottish Agriculture (SASA) have the following advice for households in Scotland if you receive an unsolicited parcel and suspect it to contain seeds. SASA urges those receiving seeds to take the following actions.- If the packet of seeds has not been opened, please leave it sealed.
DO NOT PLANT OR COMPOST THESE SEEDS. It is possible that these seeds could be a harmful invasive species or harbour a disease both of which if released could pose a threat to agriculture and the environment.- Do not handle the seeds These seeds may have been treated with a chemical pesticide. Please wash your hands if you have handled them without gloves.Science and Advice for Scottish Agriculture (SASA) is collecting these unsolicited packets of seeds for analysis. It is asking for your co-operation to send these seeds to SASA and further details are available at the following linkhttp://www.sasa.gov.uk/content/unsolicited-seeds
OFFICIAL If you receive an unexpected parcel and believe you may have been the victim of brushing scams then immediately notify the e-commerce retailer. If you have an account with the e-commerce retailer please change your passwords.
Remote Access Scams
Police Scotland have released guidance about remote access scams and how to avoid them. Scammers may tell you that you have an issue with your computer or broadband router and ask you to allow them to access your device remotely in order to ‘fix’ it or to download software.In the last week, there have been reports from Scottish consumers about cold callers claiming to be from BT who told them that their router was not efficient and that the speed could be improved. They were asked to visit a ‘secure website’ and download an upgrade.
Last month, there were several complaints about scam calls supposedly from Amazon Prime – recipients were told that there was a problem with their account and that they should download software to allow the caller remote access to their computer. One elderly couple in Dundee unfortunately lost £4,000 after falling victim to this scam – once the scammer had gained remote access to their computer, they were able to access their online bank accounts.
If you receive a similar call or if a cold caller asks you to download software for any reason or to allow them to remotely access your computer, hang up and report the number to Advice Direct Scotland.
If you’re worried that you have given a scammer access to your computer and that your details have been hacked, contact your bank immediately – they may be able to stop the money leaving your account. You should also report it to Police Scotland on 101.
Misleading Energy Adverts
Since the announcement of the UK Government’s Green Homes Grant scheme (which will only be available in England), Trading Standards Scotland has been warning Scottish consumers to be wary of misleading energy marketing scams.
Since July, we have seen evidence of several misleading adverts for energy efficiency measures such as double glazing, insulation or boilers on social media. These adverts often promote non-existent funding schemes or grants and are designed to collect your details and generate leads for companies who may go on to cold call you with bogus ‘deals’.
A large number of energy marketing scams are reported in Scotland every year – the best way to avoid fraudulent companies is to know what to look out for and where to turn for advice. Find more information and links to trusted sources of advice at www.tsscot.co.uk.
Doorstep Scams
In the last week, there have been complaints about doorstep scammers visiting communities across Scotland and:- Offering garden furniture for sale;- Offering to pressure wash driveways or roofs;- Offering to carry out weeding work;- Claiming that they had excess product left over from a recent job and offering to install a monoblock driveway in return for a cash payment. Police Scotland have warned that bogus workers are cold calling North Lanarkshire residents and offering to clean gutters and roofs. They tend to target elderly people and request money up front, but then fail to carry out any work.
A woman in her 70s from Renfrewshire lost thousands of pounds last week after paying cold callers to carry out repair work on her roof. The men left with the money and did not return.
There have also been recent reports in Manchester of doorstep scammers posing as charity collecters, some of whom asked for donations for those who have lost their jobs due to Covid-19. Don’t give your bank details to a cold caller who says they represent a charity – check that the charity is genuine online and find out how to donate through their official website. If you’re unsure whether a charity is genuine, search for it through the Scottish Charity Register or the Charity Commission. You can also check whether a charity is registered with the Fundraising Regulator, meaning that it is committed to good fundraising practice.
General Advice for Avoiding Doorstep Scams
Remember – you are not being rude if you shut the door on unsolicited callers.- Don’t agree to make any payments for goods or services offered by cold callers. – If you feel feel uncomfortable or suspicious, call Police Scotland on 101. If you feel threatened or unsafe at any time, call 999.- Report rogue traders to Advice Direct Scotland on 0808 164 6000 or through their website– Sign up for Neighbourhood Watch Alerts to stay up to date with what is going on in your community. Keep an eye on vulnerable neighbours.
Holiday scams
Police are warning the public to be on their guard amid a rise in “fake online adverts” offering rentals that do not exist. Recent incidents where people have made bookings to rent caravans at an Ayrshire caravan park left victims out of pocket when the caravan in question was found not to be owned by the person posing to be the owner. You should book a holiday direct with the site operators or through a reputable agent in order to ensure the holiday is genuine. Be extra cautious when asked to pay using a money transfer service or cash.
Safe Student
Young people are generally familiar at using technology, however, this confidence can result in them taking more risks online that could adversely affect their finances or their reputation. Action Fraud reported that nearly a quarter of shopping fraud victims were aged between 18 to 26.
A common tactic used by criminals is to promote “investment” opportunities on social media accounts, promising large returns from a small up-front payments. During June 2020, 164 reports of individuals falling victim to fraudulent investment schemes resulted in a financial loss of £358,809. This fraud targets a younger demographic, typically aged between 20 and 30.
Fake News
False information online costs lives. The World Health Organisation (WHO) previously said that the “infodemic” surrounding COVID-19 spread just as quickly as the virus itself, with conspiracy theories, rumours and cultural stigma all contributing to deaths and injuries. Scottish Government have posted a video on twitter, sharing tips for recognising false information, encouraging people to find the latest official information from trusted sources such as the Government, NHS or the World Health Organisation. Learn about inaccurate information on the WHO myth busters page. If you see content online that you believe to be false or misleading, you can report it to the hosting social media platform on which it appears. Guides on how to do this are available on the WHO website as well as information on cyber criminals pretending to be WHO.
CRIMESTOPPERS
Tel. 0800 555 111
SPEAK UP. STAY SAFE – CRIMESTOPPERS are an independent charity that gives people the power to speak up to stop crime 100% anonymously.
ARE YOU READY FOR A LIFE CHANGING CAREER? – http://www.scotland.police.uk/recruitment/police-officers/
Neighbourhood Watch Scotland
Neighbourhood Alert is delivered in Scotland by Neighbourhood Watch Scotland. The Alert system allows you to stay up to date with the latest crime, safety and resilience news for your local area which has proved particularly useful to people and communities over the last few weeks. All information comes from trusted sources and removes any doubt to the accuracy and authenticity of the information you receive.Neighbourhood Alert is free to join just go to www.neighbourhoodwatchscotland.co.uk and sign up to receive Alerts.
As always please share the above information with your colleagues.
Regards, Crime Reduction Unit, North East Division
Police Scotland, 230 Abbotswell Crescent, Aberdeen, AB12 3JT
Email: NorthEastCrimeReduction@scotland.pnn.police.uk
Website: www.scotland.police.uk
Twitter: www.twitter.com/NorthEPolice
Facebook: www.facebook.com/NorthEastPoliceDivision
Police Scotland’s North East Division covers rural and urban areas in Moray, Aberdeenshire and Aberdeen City. The division has five territorial command areas which have their own dedicated Area Commander, who is responsible for the daily policing function. Each command area is served by a number of community policing teams whose activities are built around the needs of the local community. These teams respond to local calls and look for long term solutions to key issues. They are assisted by the division’s Crime Reduction Unit who deliver against Force and local priorities in a number of areas, including physical and social crime prevention, supporting and enhancing community engagement and creating and sustaining strong and effective partnership working. PC6444A Mike UrquhartCrime Reduction OfficerAberdeenshire SouthStonehaven Police StationDunnottar AvenueStonehaven01224 304101 Website: http://www.scotland.police.uk/
Twitter: @policescotland
Facebook: www.facebook.com/policescotlandNeighbourhood Alert is delivered in Scotland by Neighbourhood Watch Scotland. The Alert system allows you to stay up to date with the latest crime, safety and resilience news for your local area which has proved particularly useful to people and communities over the last few weeks. All information comes from trusted sources and removes any doubt to the accuracy and authenticity of the information you receive.
Neighbourhood Alert is free to join just go to www.neighbourhoodwatchscotland.co.uk and sign up to receive Alerts.