UK banks urged to beef up anti-fraud systems for international payments
UK banks and payment firms have been urged to strengthen their anti-fraud systems for international payments after a rise in scammers tricking people into sending money abroad.
After years of horror stories about people losing huge sums through bank transfer scams, rules came into force last October requiring UK banks and other payment firms to refund those who have been manipulated into sending money to criminals. This week, industry data revealed that the number of cases of this type of crime had fallen to its lowest level for five years.
Related: 'Remote purchase' fraud in UK surges as customers tricked into disclosing passcodes
The frauds are known as authorised push payment (APP) scams. The number of cases fell by 20% last year to just under 186,000, said the banking body UK Finance, which issued the data. In 2023, there were more than 232,000 cases. The decrease is thought to be down in part to the new rules, plus other initiatives and greater awareness.
But the figures came with some stings in the tail. While the number of cases fell substantially, the total amount lost to APP fraud decreased by just 2% to £450m. In other words, as UK Finance put it, 'fewer people are handing over bigger sums of money'.
There was also a 'notable increase' in APP scams involving international payments, in which criminals trick people into sending money outside the UK. This is not covered by the new rules, which apply to money that is moved from one UK bank account to another.
This week's data revealed that international payments accounted for 11% of APP scam losses in 2024 – almost double the 2023 figure.
Rocio Concha, the director of policy and advocacy at Which?, said: 'Fraudsters are constantly evolving their tactics, so it is disheartening but unsurprising to see a rise in the number of cases in which scammers trick their victims into sending money abroad.'
As these payments are not covered, the victims are very unlikely to get their money back.
'Banks and payment firms should enhance their anti-fraud controls for international payments, and the independent review of the mandatory reimbursement scheme in October should take note of these emerging trends,' said Concha.
Most of the APP frauds reported last year (71%) were purchase scams, in which the victim hands over money for goods or services – perhaps a car, a mobile phone or gig tickets – that either do not exist or never arrive.
When it comes to the total amount of money lost, investment scams dominate. Typically, the criminal convinces victims to move their money to a fictitious fund or pay for a fake investment. Cryptocurrencies often feature heavily. More than £144m was stolen via this type of APP fraud in 2024 – up 34% on 2023, despite a sizeable fall in the number of cases.
UK Finance is itself not immune to being targeted by scammers. This week there was a prominent warning on its website saying: 'We are aware of a potential scam involving people being offered loans for an upfront fee by an individual posing as a representative of UK Finance.' The organisation doesn't offer any financial products, 'and anyone claiming to provide such products on our behalf is fraudulent,' it said.
Meanwhile, the payments firm Visa this week revealed four fraud tactics that it said had been gaining ground across the UK and Europe in recent months. They are:
Fraudsters offer high-value goods – such as exercise machines – at low prices. Shoppers are tricked into handing over the one-time passcode banks send customers to authorise transactions. These are then used by criminals to carry out fraud.
Fake apps impersonating trusted organisations are stealing personal and financial data.
Scammers get hold of people's card details via phishing and then link these to criminal-controlled digital wallets. They then use software that allows them to make contactless payments using these details remotely from anywhere in the world.
Generative artificial intelligence is increasingly being used to create convincing fake IDs and open fraudulent accounts.
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Gizmodo
39 minutes ago
- Gizmodo
Lifetime Subscription to Babbel for 71% Off and an Extra Discount Gets You Mind-Expanding Language Lessons Forever
It's natural to be envious of people who can casually move from language to language, in conversation or as they're reading. It's definitely not easy, but learning a new language is well worth the effort, especially when you have lifetime access to 14 languages when you buy a subscription to Babbel at StackSocial for 71% off. See at StackSocial Babbel is the world's top-selling language instruction app, and this is a buy-once-own-forever deal rather than a recurring yearly or monthly bill for you. And to sweeten the polyglot pot even more, you can use the code LEARN40 at checkout to drop the price even further, so your final bill for a lifetime of learning is just $130. That's a huge break from its regular price of $599. 15 Million+ Subscribers For Babbel to reach this enormous number of customers, they must be doing a lot of things right even beyond having a wide range of international languages available to learn. Babbel's wide-ranging appeal comes in part from how the lessons are structured, Instead of lengthy, tiring sessions, Babbel's lessons are broken down in to increments of 10 to 15 minutes, and rather than getting lost in the minutiae of sentence diagramming, arcane grammar, and other deep-dive teaching, Babbel concentrates on practical vocabulary and sentences you would use in real-life situations. Babbel's goal is not only to teach you a new language, but also to teach it so you sound as close to native as possible. It skips the stilted sentences that many other language teaching formats use in favor of more colloquial speaking, and Babbel also had advanced speech-recognition technology to help you with your pronunciation. Worldwide Languages Babbel offers courses in Spanish, German, Italian, French, Portuguese, Swedish, Turkish, Dutch, Polish, Indonesian, Norwegian, Danish, Russian, and English, and all are covered by this lifetime subscription deal for just $130. Babbel's lessons can go with you wherever you like, since one subscription covers access across al your devices, and you can start a lesson on your laptop and then pick up exactly where you left off with your phone. They're also downloadable so you can brush up anytime you like, regardless of whether you have internet access. An actual U.S. passport costs $165, but the amazing app that can give you a worldwide education in language that you'll use for the rest of your life is just $130 at StackSocial. Head there now to get 71% off the cost of a lifetime subscription to Babbel, and don't forget to use the code LEARN40 to get that final discount. See at StackSocial
Travel Weekly
40 minutes ago
- Travel Weekly
ASTA executive Sarah Little will be godmother to AmaWaterways ship
AmaWaterways announced that Sarah Little of the American Society of Travel Advisors will be godmother to a new ship. Sarah Little The river cruise line named Little godmother of the AmaSofia, which will sail the Danube beginning next year. The christening ceremony is slated for next March during the ASTA River Cruise Expo in Amsterdam. Little, ASTA's senior vice president of business development, was chosen due to her "unwavering support of the advisor community and her deep-rooted passion for the industry," said Kristin Karst, AmaWaterways' co-founder and chief brand ambassador. "It will be incredibly meaningful to christen AmaSofia in front of more than 1,600 travel advisors during ASTA's River Cruise Expo. There couldn't be a more fitting setting or audience for this special celebration," Karst said. The river cruise line said that Little's "enthusiasm for storytelling and commitment to building meaningful connections reflect the very essence of river cruising with AmaWaterways." "Being part of this journey with AmaWaterways, a company that shares ASTA's commitment to supporting travel advisors, is very meaningful to me," Little said. "I look forward to christening AmaSofia alongside so many of my fellow advisors at ASTA's River Cruise Expo and celebrating the future of travel together." The AmaSofia will cruise seven-night itineraries on the Danube, including Melodies of the Danube and Romantic Danube. The vessel will be the brand's 10th ship on the Danube.
Washington Post
41 minutes ago
- Washington Post
With retail cyberattacks on the rise, customers find orders blocked and shelves empty
NEW YORK — A string of recent cyberattacks and data breaches involving the systems of major retailers have started affecting shoppers. United Natural Foods, a wholesale distributor that supplies Whole Foods and other grocers, said this week that a breach of its systems was disrupting its ability to fulfill orders — leaving many stores without certain items. In the U.K., consumers could not order from the website of Marks & Spencer for more than six weeks — and found fewer in-store options after hackers targeted the British clothing, home goods and food retailer . A cyberattack on Co-op, a U.K. grocery chain, also led to empty shelves in some stores. Cyberattacks have been on the rise across industries. But infiltrations of corporate technology carry their own set of implications when the target is a consumer-facing business. Beyond potentially halting sales of physical goods, breaches can expose customers' personal data to future phishing or fraud attempts. Here's what you need to know. Despite ongoing efforts from organizations to boost their cybersecurity defenses, experts note that cyberattacks continue to increase across the board. In the past year, there's also been an 'uptick in the retail victims' of such attacks, said Cliff Steinhauer, director of information security and engagement at the National Cybersecurity Alliance, a U.S. nonprofit. 'Cyber criminals are moving a little quicker than we are in terms of securing our systems,' he said. Ransomware attacks — in which hackers demand a hefty payment to restore hacked systems — account for a growing share of cyber crimes, experts note. And of course, retail isn't the only affected sector. Tracking by NCC Group, a global cybersecurity and software escrow firm, showed that industrial businesses were most often targeted for ransomware attacks in April, followed by companies in the 'consumer discretionary' sector. Attackers know there's a particular impact when going after well-known brands and products that shoppers buy or need every day, experts note. 'Creating that chaos and that panic with consumers puts pressure on the retailer,' Steinhauer said, especially if there's a ransom demand involved. Ade Clewlow, an associate director and senior adviser at the NCC Group, points specifically to food supply chain disruptions. Following the cyberattacks targeting M&S and Co-op, for example, supermarkets in remote areas of the U.K., where inventory already was strained, saw product shortages. 'People were literally going without the basics,' Clewlow said. Along with impacting business operations, cyber breaches may compromise customer data. The information can range from names and email addresses, to more sensitive data like credit card numbers, depending on the scope of the breach. Consumers therefore need to stay alert, according to experts. 'If (consumers have) given their personal information to these retailers, then they just have to be on their guard. Not just immediately, but really going forward,' Clewlow said, noting that recipients of the data may try to commit fraud 'downstream.' Fraudsters might send look-alike emails asking a retailer's account holders to change their passwords or promising fake promotions to get customers to click on a sketchy link. A good rule of thumb is to pause before opening anything and to visit the company's recognized website or call an official customer service hotline to verify the email, experts say. It's also best not to reuse the same passwords across multiple websites — because if one platform is breached, that login information could be used to get into other accounts, through a tactic known as 'credential stuffing.' Steinhauer adds that using multifactor authentication, when available, and freezing your credit are also useful for added lines of defense. A range of consumer-facing companies have reported cybersecurity incidents recently — including breaches that have caused some businesses to halt operations. United Natural Foods, a major distributor for Whole Foods and other grocers across North America, took some of its systems offline after discovering 'unauthorized activity' on June 5. In a securities filing , the company said the incident had impacted its 'ability to fulfill and distribute customer orders.' United Natural Foods said in a Wednesday update that it was 'working steadily' to gradually restore the services. Still, that's meant leaner supplies of certain items this week. A Whole Foods spokesperson told The Associated Press via email that it was working to restock shelves as soon as possible. The Amazon-owned grocer's partnership with United Natural Foods currently runs through May 2032. Meanwhile, a security breach detected by Victoria's Secret last month led the popular lingerie seller to shut down its U.S. shopping site for nearly four days, as well as to halt some in-store services. Victoria's Secret later disclosed that its corporate systems also were affected, too, causing the company to delay the release of its first quarter earnings . Several British retailers — M&S , Harrods and Co-op — have all pointed to impacts of recent cyberattacks. The attack targeting M&S, which was first reported around Easter weekend, stopped it from processing online orders and also emptied some store shelves. The company estimated last month that the it would incur costs of 300 million pounds ($400 million) from the attack. But progress towards recovery was shared Tuesday, when M&S announced that some of its online order operations were back — with more set to be added in the coming weeks. Other breaches exposed customer data, with brands like Adidas, The North Face and reportedly Cartier all disclosing that some contact information was compromised recently. In a statement, The North Face said it discovered a 'small-scale credential stuffing attack' on its website in April. The company reported that no credit card data was compromised and said the incident, which impacted 1,500 consumers, was 'quickly contained.' Meanwhile, Adidas disclosed last month that an 'unauthorized external party' obtained some data, which was mostly contact information, through a third-party customer service provider. Whether or not the incidents are connected is unknown. Experts like Steinhauer note that hackers sometimes target a piece of software used by many different companies and organizations. But the range of tactics used could indicate the involvement of different groups. Companies' language around cyberattacks and security breaches also varies — and may depend on what they know when. But many don't immediately or publicly specify whether ransomware was involved. Still, Steinhauer says the likelihood of ransomware attacks is 'pretty high' in today's cybersecurity landscape — and key indicators can include businesses taking their systems offline or delaying financial reporting. Overall, experts say it's important to build up 'cyber hygiene' defenses and preparations across organizations. 'Cyber is a business risk, and it needs to be treated that way,' Clewlow said.
