Scam to get bank details.

[GasEngineer]

There are posts on our local facebook pages about a scam where people have had a phone call from 'The Council', asking for bank details, so the £150 council tax rebate payment can be paid.

There is a warning that this is a scam to get bank details. Presumably name sort code and account number


But it led me to think what could anyone do with just a person's bank details. Its no different to paying by cheque which has all the info, or giving someone on eBay or facebook marketplace your bank details to receive a payment.

So what can they do with your bank details?

[steveo3002]

is there a card linked to this account sir? just the long number and 3 digits on the back ?

[sherman]

My £150 council tax rebate was on my council tax payment plan letter for this year.
It will help pay for the fuel bill for about a month.

[LordHaveMurci]

Didn’t Clarkson fall foul of this, gave out his bank details assuming nobody could do anything?

[soad]

LordHaveMurci said:

Didn’t Clarkson fall foul of this, gave out his bank details assuming nobody could do anything?

Direct debit to a charity iirc.
http://news.bbc.co.uk/1/hi/entertainment/7174760.s...

[Jenny Tailor]

Not sure exactly what details are on the magnetic strip of debit cards.

But the sort code and account no are.
If you can get the 16 digit card card no and the name on the card...

Can a cloned card be printed up to look genuine with the magnetic strip info?

Must be some black market surely?

[bigandclever]

GasEngineer said:

So what can they do with your bank details?

They can phone back at some point in the future saying they’re your bank, please go through security because there’s been an attempted fraud, blah blah.

[Whats on Second]

The council phoning me would be a red flag, in many decades I can't think of an occasion when my bank or council finance dept. have phoned me, I always instigate initial phone communication, or they send a letter.

Don't think anyone can do much fraud with my sort code and acc. no., they can
put money into my account, id be most grateful.

[SturdyHSV]

bigandclever said:

GasEngineer said:

So what can they do with your bank details?

They can phone back at some point in the future saying they’re your bank, please go through security because there’s been an attempted fraud, blah blah.

This is far more the point. First off, if you give out the details, then they know they've got a sucker on the line. So they'll go through and be all professional etc.

Then 30 minutes later, a different number will phone, or a text message with a link in it saying to log in as there has been an attempted fraud.

They'll say they're from your bank and there has been some suspcious activity within the last 30 minutes, can you confirm you are the account holder on <account number> etc. You say why yes, yes I am, and you assume they're genuine because they just said they're your bank, they've given you your own account number correctly, they have your mobile and your name correct, and they must be your bank because they have seen activity that must be from that dodgy call you just took 30 minutes ago...

Much like the £1.99 postage payment scam. The initial scam is just to identify suitable victims, and then give the real scam credibility because it 'knows' that you've just been scammed out of the £1.99 so it must be real / trustworthy.

[captain_cynic]

Jenny Tailor said:

Not sure exactly what details are on the magnetic strip of debit cards.

But the sort code and account no are.
If you can get the 16 digit card card no and the name on the card...

Can a cloned card be printed up to look genuine with the magnetic strip info?

Must be some black market surely?

I'm not even sure that modern UK cards even have a magstripe. They were massive security holes and most of the world has.been chip and pin for decades. I think the stripe is cosmetic.

However contactless will give out your card number, name and expiry date to anything that asks for it. That is all you need to make transactions online. No, you don't need a CVC/CCV number, you can still make transactions it's just the transaction fee paid by the merchant is higher.

Card cloning hasn't been a real source of fraud for ages. Not since you can just run card numbers though a dodgy online business.

With your sort code and account number, direct debts can be added. Seems a bit daft really but I suspect it's a legacy thing with th UKs banking system.

[anonymous-user]

captain_cynic said:

Jenny Tailor said:

Not sure exactly what details are on the magnetic strip of debit cards.

But the sort code and account no are.
If you can get the 16 digit card card no and the name on the card...

Can a cloned card be printed up to look genuine with the magnetic strip info?

Must be some black market surely?

I'm not even sure that modern UK cards even have a magstripe. They were massive security holes and most of the world has.been chip and pin for decades. I think the stripe is cosmetic.

However contactless will give out your card number, name and expiry date to anything that asks for it. That is all you need to make transactions online. No, you don't need a CVC/CCV number, you can still make transactions it's just the transaction fee paid by the merchant is higher.

Card cloning hasn't been a real source of fraud for ages. Not since you can just run card numbers though a dodgy online business.

With your sort code and account number, direct debts can be added. Seems a bit daft really but I suspect it's a legacy thing with th UKs banking system.

Sort of off topic but I watched this video on the subject of contactless fraud recently, with a whole load of history about credit/debit cards, magstripes and whatnot. Very interesting if you have a spare 25 minutes, they do loads of great videos on online security and stuff.