The sneaky Companies House scam
It's not so easy to ignore emails purporting to be from Companies House. But fall for this scam and you could lose a fortune.
I'm a non-executive company director. But before anyone asks whether I get £10,000 (plus a slap-up lunch and a chauffeur driven car) for a day spent at a meeting, or if I'm on a remuneration committee rubber-stamping billionaire banker bonuses, I ought to add that I'm an unpaid voluntary trustee/director of a charity.
It's the London Cycling Campaign as anyone putting my name into one of many company-checking websites can easily discover. My directorship of this not-for-profit cause is a matter of public record.
Accountability is good. What's not so good is the torrent of spam I receive as a result of my directorship, including a large number which purport to come from Companies House, the Government organisation which regulates the limited liability system.
Not so easy to ignore
These are in a different league to phishing emails that purport to come from banks. I happily ignore these as they rarely if ever come from the bank where I have my current account. Companies House is in a different league. I should not ignore messages as I have a number of legal duties and responsibilities as a director, despite the charity having a full time staff. So they are more dangerous.
They typically start with “A company complaint was submitted to Companies House website” followed by a submission number .
The latest I've received continues: “For more details please click : https://companieshouse.gov.uk/Case?=5480781"
Note the absence of the www which appears on the real site. Don't go to this site at home unless you are very sure of your anti-malware.
The site looks totally plausible, including an up-to-date address and phone number. But it is easy to download real material for a phoney site.
Of course, there is no complaint either real or alleged. And while I do have duties as a director, were there to be a complaint, it would be in writing – with substantial details rather than a vague email addressed to me (and my co-directors) via our company emails. A real problem would be firstly addressed to the company secretary (that's not me) rather than to all directors.
The trouble with trojans
If you click on the case number, or anywhere else in the email, you end up with a website called “ballsoutpen15”. If you look for this site, it will sometimes appear as a source of film or music reviews. A number of internet service providers automatically block this site but if you get through, you will almost certainly download something nasty.
According to anti-virus firm Sophos, this is a 'trojan' which will seek to take over your computer, possibly installing a keylogging device. This will read every letter and number you hit – enabling anyone to read passwords and log-ons.
This is far more dangerous than mere 'phishing' for bank details. Instead of just getting numbers for one bank account, the malware here could capture all your email contacts and hit them as well, on top of virtually free access to all your accounts.
This particular malware website may have been blocked, but that does not stop the perpetrators from setting up several more.
No one should ever reply to any email attack but in case of temptation, it says: “This email was sent from a notification-only email address which cannot accept incoming email. Please do not reply directly to this message.”
Getting carried away
However email spammers often expose themselves as scammers by simple errors. As I received twelve similar messages in two days – the only difference was the complaint number - it was obvious that I was being attacked. No company, especially a relatively small one, will ever be on the end of so many complaints over such a short period of time.
Companies House, the real one, says: “We have been made aware that random emails claiming to be from Companies House are being sent. These mails have not been generated by Companies House and we strongly advise customers not to open any attachments or click any suspicious links at it may contain a virus. Our customers should be assured that the details we hold have not been compromised."
More on scams:
Don't be duped by the Council Tax fraudsters
Don't fall for these Will scams
Firm pushing "the ultimate scam" closed down
Comments
Be the first to comment
Do you want to comment on this article? You need to be signed in for this feature