Police warn of new scam targeting holiday makers
AN ALERT has been issued warning the public about a new scam.
Dorst Police, on behalf of Action Fraud, has issued a new alert warning about phishing emails and unusual messages from hotel accounts on the Booking.com platform.
A police spokesperson said: 'Those using the platform Booking .com to book their holidays or accommodation are being warned they could be targeted with emails or messages requesting payments from hotels who have had their account taken over by fraudsters.'
Between June 2023 and September 2024, Action Fraud received 532 reports from individuals, with a total of £370,000 lost.
Adam Mercer, deputy head of Action Fraud, said: 'With more than 500 reports made to Action Fraud, those who have booked a holiday on the Booking.com platform should stay alert to any unexpected emails or messages from a hotel using the Booking.com platform, as their account could have been taken over by a criminal.
'If you receive an unexpected request from a hotel's account you booked with using Booking.com, asking for bank details or credit card details, it could be a fraudster trying to trick you into parting ways with your money. Contact Booking.com or the organisation directly if you're unsure.'
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Yahoo
5 days ago
- Yahoo
TV Industry Scam Exposed: Fraudster Reported To FBI & UK Cybercrime Agency After Posing As Well-Known British Producers And Demanding Thousands Of Pounds From Writers
EXCLUSIVE: A scammer has been reported to both the FBI and UK cybercrime agency after posing as well-known TV executives and asking writers to send them up to £2,500 ($3,300) to help get their scripts developed. Deadline has seen evidence of at least half a dozen British writers who have been contacted by a person pretending to be UK producer Charlotte Walls on the Stage 32 networking platform, asking them to submit ideas, sign an NDA and then pay a 'refundable facilitation fee' of between £2,000 and £2,500. More from Deadline Disney Slack Hack Suspect Pleads Guilty In Deal With Feds; Could Get 10 Years Behind Bars For 2024 Attack Eriq La Salle To Direct First Episode Of CBS' 'FBI' Offshoot Series 'CIA' Starring Tom Ellis 'FBI' Offshoot 'CIA' Starring Tom Ellis Ordered Straight-To-Series By CBS For 2025-26 Season The scammer also posed as another high-profile UK producer, who wished to remain nameless, and approached writers asking for money. In all, we are told by Stage 32 that around 100 messages were sent to UK creatives on the platform and about 25 people responded. Working with one writer, Anette Martinsen, we have tracked down what we believe to be the scammer's name, bank details and bank address. This information has been reported by Stage 32 to the FBI and by Martinsen to UK Action Fraud, a national reporting center for fraud and cybercrime that passes reports to the National Fraud Intelligence Bureau, which then decides whether to refer to local police forces for investigation. We are aware of at least one other report of the same scammer to Action Fraud. 'Action Fraud can confirm that it received a report on 30 May 2025 and it is currently being assessed by the National Fraud Intelligence Bureau (NFIB) at the City of London Police,' said a spokeswoman. Stage 32 founder Richard Botto told us the scam is a 'copy or extension of the same scam that has infiltrated Facebook, Instagram, Reddit, LinkedIn and X over the last three years.' He said Stage 32 'believes we have identified the perpetrator of this scam and are working with Action Fraud and the FBI's Internet Crime Complaint Center in an effort to bring them to justice.' How it works Using a VPN to create a Stage 32 account from a foreign IP address, the scammer sets up fake profiles and impersonates producers like Catalyst Global Media's Walls. They then send writers a message like the one in the above image asking if they are interested in submitting material. If they respond saying they are interested, the scammer sends over a set of terms that say, 'Should your project be identified as a strong candidate for development, we will proceed under a formal Non-Disclosure Agreement (NDA).' Following the signing of the NDA, the scammer says it requires a 'refundable facilitation fee' of varying amounts between £2,000 and £2,500, which 'serves as a demonstration of mutual commitment to advancing the project into early development and securing access to critical production infrastructure and strategic resources.' The scammer goes on to note that while this fee 'may not be customary in every production arrangement,' 'it is important to clarify that most professional producers and consultants charge substantial fees for their involvement.' 'We fully understand that some creators may be seeking informal feedback or free evaluations,' it adds. 'However, we wish to be transparent: our team invests significant time, resources, and professional leverage into every project we undertake.' We are not aware of anyone who has fallen victim to the scam and Stage 32's Botto told us 'to the best of our knowledge, no one sent this 'producer' any money.' Some writers told us they smelled a rat quickly due to the payment demand and the even stranger stipulation to sign an NDA simply to get a script into development. Others realized that the email address the scammer supplied was different to the company's email address on its website. The scammer pretending to be Walls, for example, was using a Gmail account. 'Most people contacted recognized the scam, notified us, and the offending accounts were deleted and the IP's and emails blocked immediately,' Botto said. Martinsen went along with the scam to see what she could uncover. Having agreed to the scammer's 'terms' and signed a fake NDA, she was asked swiftly to send a £2,000 payment to a person called Agnieszka Falkowska, who banks with Barclays and whose bank address is listed in Peterborough, South England. When Martinsen didn't respond, she was quickly chased up and told that Agnieszka Falkowska works in the accounts department at Catalyst Global Media, although no such person in the Catalyst accounts team exists. At this point, Stage 32 was notified and contacted both the FBI and Action Fraud. We are aware of at least one other person who has also reported the name Agnieszka Falkowska and these same bank details to Action Fraud. Deadline has contacted the Gmail address the person calling themselves Agnieszka Falkowska was using and we have not received a response. Martinsen said 'something didn't feel right' when she was contacted by the scammer via the fake Walls profile on Stage 32 about a comedy script she was developing titled In The Spotlight. 'I talked to my friend Gina Lyons from Gobby Girl Productions who suspected it was a scam too,' Martinsen told Deadline. 'I feel disappointed as you can imagine as it is tough being an older woman in the TV and film industry and I was of course hoping to get In the Spotlight made with a well respected company.' When Deadline contacted Walls last week to tell her she was being impersonated on Stage 32, Walls was mortified. 'I'm devastated to have been caught up in a scam like this and genuinely shocked,' she said. 'Writers are the lifeblood of our industry. It's more important than ever for people to be vigilant.' Another producer who has been impersonated and preferred to remain anonymous queried why these scammers are able to create fake profiles in the first place on platforms like Stage 32, and why they contacted so many writers before being caught. 'There must be a way to check,' said the producer. 'This is appalling. Our own reputations will end up being smeared and tarnished.' Botto said Walls' profile was 'deleted within two minutes, much to her satisfaction.' 'I speak frequently and repeatedly during my monthly Ask Me Anything broadcasts about how to protect yourself in this industry, including not to trust if a 'named producer' is writing to you in broken English or through a suspicious email address,' added Botto. 'As a writer, producer and actor myself who has been targeted by these scammers, I urge everyone to be vigilant and to do your due diligence.' Ellie Peers, General Secretary of the Writers Guild of Great Britain, said the guild's recent Is it a Steal? report, which found that 94% of writers who had paid to have their book published lost money, typically in the thousands, proves that 'there is no shortage of people wanting to exploit writers online.' 'If writers are asked to pay someone for something that they should themselves be paid for, that is always a red flag,' added Peers. 'This also shows the importance of always getting your writing contracts vetted by an expert before signing.' Another writer we spoke with pointed out that scams have become far more sophisticated and hard to spot in the age of AI, with platforms like ChatGPT able to easily replicate documents like contracts and NDAs. Spot the fraud: how to avoid getting conned Be on high alert if anyone is asking for money prior to a meeting and for work you have previously done for free (or have even been paid for in the past). If you haven't heard of them, search LinkedIn and other platforms for the person getting in contact in order to check their credentials. Contact the producers independently if you believe they are being impersonated. Check the email addresses you are being supplied and whether this matches up to the company email address on its website. Share concerns in forums or with industry friends. If you wish to contact the author of this article to supply further information or share your experience, please email: Best of Deadline 2025 TV Cancellations: Photo Gallery 2025 TV Series Renewals: Photo Gallery 2025-26 Awards Season Calendar: Dates For Tonys, Emmys, Oscars & More
Forbes
5 days ago
- Forbes
This Dangerous Email Tricks You Into Hacking Your Own PC
Do not be tricked into hacking your own PC. getty Take a walk through any major tourist city in the world, and eventually you will see them. On a bridge or promenade or in a park. Someone sitting with three plastic cups and a bunch of onlookers, watching as someone is scammed. Everyone knows it's a scam. It doesn't matter that you've watched as the marble is placed under a cup, keeping an eagle eye on it as the three cups are swapped around. The marble has moved and you cannot win. You know you should know better. So it is with the so-called ClickFix lures currently hacking PCs around the world. The leading example of the new wave of 'scam yourself' attacks, you know you should know better. But the cleverness of the hook, the trickery of the scammer still works. As McAfee explains, ClickFix attacks 'begin with users being lured to visit seemingly legitimate but compromised websites. Upon visiting, victims are redirected to domains hosting fake popup windows that instruct them to paste a script into a PowerShell terminal.' In reality, this 'sophisticated form of social engineering, leveraging the appearance of authenticity' just 'manipulates users into executing malicious scripts.' The email lure. Cofense A new warning from Cofense has just outed one of the most devious lures I've seen recently. It's a nasty attack that plays on the human emotions and fears of the victim being scammed, so much so that they don't see the attack coming. But they should. The dangerous email lure is sent to businesses in the travel industry, purporting to be from market giant warning that a customer has made a serious complaint and giving the recipient a time-boxed opportunity to respond using the link provided. This click launches ClickFix Cofense 'While the exact email structure varies from sample to sample,' Cofense says, 'these campaigns generally provide emails with embedded links to a ClickFix fake CAPTCHA site which is used to deliver a malicious script that runs RATs and/or information stealers.' The campaign 'preys on the recipient's fear of leaving a guest dissatisfied' and might 'claim that a guest was trying to contact the hotel but was unable to get a response.' Cofense provides one such example, which is 'particularly notable for mentioning potential reputational damage and giving a strict 24-hour deadline for compliance.' ClickFix attack. Cofense Not all these attacks are negative, some suggest requests or questions from future (imaginary) guests, while also providing a link for the hotel operator to respond. 'The emails used in these campaigns will sometimes state that the embedded link only works on Windows computers,' simply because this malware only infects Windows PCs. But despite the lure, the attack is the same as all the others. In this case it's a CAPTCHA 'Robot or Human?" challenge, which instructs the user to open a Windows prompt and paste in the text on the PC's clipboard, and then press Enter. Absent a few wording changes, there is no variation in this part of the attack. It's the most blatant tell. Cofense says some of the latest attacks used Cloudflare CAPTCHAs while others used brand instead. The instructions, though, are all the same. Once you know about ClickFix, in theory at least you can't be fooled. But the cybercriminals will try nonetheless, and the attacks are flying, so it's working. Don't be fooled. Never paste in copied text and hit Enter in this way. Whether it's a CAPTCHA, a secure website or document restriction, or a technical fault, it's always an attack. And the hacker is always you.
Yahoo
30-05-2025
- Yahoo
Police impersonator took £50k from elderly people
A man who impersonated a police officer to take more than £50,000 from elderly people has been jailed. Gavin Butters, 27, of no fixed abode, was sentenced to two years and nine months in prison at Liverpool Crown Court after being involved in courier frauds in eight different areas in the UK. According to Thames Valley Police victims received phone calls from an unknown person impersonating a police officer or bank investigator who asked them to hand over cash, bank cards and jewellery. Butters would then impersonate a police officer while visiting the addresses to collect the items. Police said one victim was a women in her 70s from Flackwell Heath, near High Wycombe in Buckinghamshire, On 7 January 2025 she had answered a call from an unknown number on her mobile phone from a man who pretended to be from Scotland Yard's Action Fraud. In calls which lasted for more than six hours throughout the day, the victim was told her bank cards had been used fraudulently and were needed as evidence to arrest somebody in the local area. She was told if she did not hand over the cards she would be arrested herself. Butters went to the woman's address later that day and collected three bank cards, which he used to buy iPhones worth £5,896. The force worked with Merseyside Police and Cheshire Constabulary in the investigation. Det Con Claire Nangle, the officer in charge of the Thames Valley case, said: "Butters showed a complete disregard for his victims by pressuring them to co-operate in his fictional covert operation, taking advantage of their trusting nature. "This sentence reflects the seriousness of his offending, aggravated by the fact that he systematically targeted vulnerable, elderly victims." On 19 May Butters was sentenced after previously admitting to four counts of fraud by false representation at the same court. Follow Beds, Herts and Bucks news on BBC Sounds, Facebook, Instagram and X. Thames Valley Police
