Santander 'suspicious activity' text message scam – how to stay safe
This fake Santander 'suspicious activity' text scam is the latest in a series of sophisticated fake bank messages we've seen that can actually hijack genuine threads on your phone. Worst of all, your bank might not refund you if you fall victim.
A devious 'Santander' text message scam aimed at stealing customers' funds is conning people into handing over their details by claiming there has been "suspicious activity" on their account.
The scammers are able to mimic Santander's number, meaning the text could actually appear within a legitimate thread of messages from the bank, making it especially hard to spot.
Potential victims are told to follow a link and enter their details, enabling the crooks to wipe out their accounts.
Have you received a message like this pretending to be from Santander? If so, do NOT click the link - it is a scam. Remember, never enter your Online Banking details after clicking on a link in an email or text message. pic.twitter.com/wKPOnSHTrQ
— Santander UK (@santanderuk) March 7, 2018
Your bank might not reimburse you
Crucially, anyone who hands over their One-Time Passcode (OTP) as part of the scam could find their bank won't refund them.
The OTP is an extra layer of security Santander (and other banks) use to authorise things like setting up a new payee or changing details on the account.
All banks that use OTPs are clear that they will never ask you to reveal this under any circumstance. So anyone who does so probably won't be protected.
Last year, we reported how numerous Santander victims lost money after handing over their OTP as part of a scam and Santander refused to reimburse them.
"Whilst we are very sympathetic to customers who are victims of scams, as there was no Santander error and all three customers divulged personal, security information, we therefore cannot accept any responsibility for the losses on these accounts," Santander said at the time.
More to lose
More and more people are using current accounts as savings accounts as they offer more interest than traditional deals.
This means more cash is likely to be held in a current account, which makes them a prime target for fraudsters.
The Santander 123 Current Account pays 1.5% on savings up to £20,000 and is especially good for large balances.
Growing trend
Of course, the scammers can easily imitate any other bank, so it's not just Santander customers who need to be vigilant.
The industry as a whole has seen an alarming rise in the use of ‘social engineering techniques’, including targeted text scams.
Take a look at our guide to the latest tricks scammers are using to keep up to date with how criminals are trying to steal your money.
How to stay safe
Your bank will never contact you to ask for your account details, PIN or your OTP code.
You should ignore and report any message, call or email you get asking for this sort of sensitive personal information.
Never follow links in a text message or email under any circumstances. If you are concerned, either log into your banking separately or ring them using a number you found on a bank statement.
Take a look at our guide: Reporting scams: who to contact when you get fraudulent phone, post and email.
If you suspect you have become a victim of a phishing scam, contact your bank as soon as possible using the number on the back of your debit card.
Sign up for your credit report to get suspicious activity alerts
Stay safe with loveMONEY:
ATM fraud: five signs a cashpoint has been tampered with
Common Tesco scams to avoid: fake vouchers, Facebook offers and banking emails
Most Recent
Comments
-
Every time I visit a branch of HSBC, where I hold a current account, they keep asking what my email address and telephone number are, as they don't have them on record. When questioned as to why they need to know them "In case there is a problem with your account, so we can contact you" is the reply. Seeing as that is the opening gambit of many scammers, I refuse to tell them as a "security measure". I suspect that HSBC want the details for marketing purposes and to push blame for any account fraud from the bank on to the customer.
REPORT This comment has been reported. -
It's called Darwinism. Anyone who is idiot enough to disclose enough details to get scammed deserves what they get. It's natures way of telling them they are idiots.
REPORT This comment has been reported. -
I got a text from Lloyds saying that my account had been suspended due to recent activity and to click on the link. I didn’t fall for this scam and called the bank to make sure and they confirmed it was a scam. You can also get scams on what looks like a genuine PayPal account. They send you an email saying that someone has paid a large amount in your PayPal account but you need to pay a fee to a worldpay account to release. If you pay them you will never see the money again. If you fall for a scam you will find yourself on a mugs list and will get more scammers contacting you as they see you as an easy target.
REPORT This comment has been reported.
Do you want to comment on this article? You need to be signed in for this feature
10 March 2018