UK consumers are being warned about a new wave of sophisticated scam emails that are impersonating well-known British brands, including B&Q, Boots, the AA, and the RAC. These deceptive emails are designed to lure recipients with attractive special offers, such as significant discounts or product giveaways, before directing them to suspicious websites that harvest personal information.
Upon inspection, these websites, despite featuring convincing branding initially, contain disclaimers confirming they are not officially associated with the brands they claim to represent. Users are encouraged to complete surveys under the guise of receiving a reward, such as a 50% discount code for B&Q or a portable air conditioner during the current heatwave. Other examples include a Boots-branded email offering 60% off a blood pressure monitor, an AA email promising 60% off a dash cam, and an RAC email for 60% off a tyre inflator.
However, after completing these surveys, users are then redirected to an entirely different website, which has no connection to the initial brand. This subsequent site typically features a range of products for sale. Investigations into these websites suggest they were created recently, either this year or last, a common characteristic of illegitimate sites. Furthermore, suspicious online reviews have been identified, with the same profile pictures appearing across various sites under different usernames, indicating a coordinated effort to create a false sense of legitimacy.
Consumer complaints about the ultimate sales website include receiving emails 'posing as BT', being charged for more items than ordered, receiving items different from what was advertised, and experiencing non-delivery of goods. One reviewer recounted purchasing a dash cam, supposedly endorsed by the AA and RAC, which turned out to be 'poor quality' with 'incomprehensible instructions'.
To protect themselves, consumers should be vigilant for common signs of a suspicious email or website. These include offers that appear too good to be true, pressure to make a quick decision, poor spelling and grammar, negative online reviews across multiple platforms, and the absence of essential pages like a privacy policy, terms and conditions, or a 'contact us' section. Emails from random or unfamiliar addresses are also a red flag. Under UK consumer law, individuals are protected against misleading advertising and fraudulent transactions.
Should you encounter a suspicious email, forward it to report@phishing.gov.uk. Websites that appear fraudulent can be reported to the National Cyber Security Centre. If money has been lost due to a scam or an unauthorised transaction is spotted, immediately contact your bank using the number on the back of your card. Scams should also be reported to Action Fraud, or to Police Scotland by calling 101 if you reside in Scotland.