Path: ...!weretis.net!feeder9.news.weretis.net!news.quux.org!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!eternal-september.org!.POSTED!not-for-mail
From: Java Jive <java@evij.com.invalid>
Newsgroups: comp.mobile.android,uk.telecom.mobile
Subject: =?UTF-8?Q?=22=27Scammers_stole_=C2=A340k_after_EDF_gave_out_my_numb?=
 =?UTF-8?B?ZXIi?=
Date: Mon, 3 Mar 2025 12:27:55 +0000
Organization: A noiseless patient Spider
Lines: 52
Message-ID: <vq478a$1a6p9$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Mon, 03 Mar 2025 13:27:55 +0100 (CET)
Injection-Info: dont-email.me; posting-host="7221d7214696439d49d02b0a9673ec8e";
	logging-data="1383209"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX1/TmLkqZVj/ZIRQfteD42UNbvpaNiSkxZk="
User-Agent: Mozilla Thunderbird
Cancel-Lock: sha1:lIPxdL/qBQ/bmBmdUV7hK7tkc9k=
Content-Language: en-GB
Bytes: 2800

"Scammers stole £40k after EDF gave out my number"
https://www.bbc.co.uk/news/articles/ckg885lxd3jo

[An unfortunate choice of photo of the victim, he looks really cheerful 
about it.]


"A man targeted by fraudsters who got his mobile phone number from an 
energy company said he often woke up in the night thinking "what next?".

Stephen, from Hertfordshire, had more than £40,000 taken from a savings 
account after his name and email address was used to get the information 
from EDF.

Within 48 hours of his mobile phone number being divulged, his accounts 
with O2, Nationwide Building Society and Virgin Media had all been 
compromised.

EDF said such incidents were rare but it took them seriously and added: 
"We are sorry for the difficulties this fraudulent caller has caused 
Stephen."

....


'£50 to close the case'

After more than a week, EDF finally responded about the call it thought 
Stephen made at 11:00 GMT on 3 February.

EDF explained the fraudster had his name and email address and had asked 
EDF to give them his mobile number, which the company did.

"I said, 'Why would you do that?' They said the person had gone through 
security. 'With a name and email address', I asked?," he said.

"EDF said, 'Yes' - and then offered me a £50 goodwill gesture to close 
the case."


So, EDF allowed them to go from his email address to obtaining his 
mobile phone number for a SIM-swap scam, but I wonder how they managed 
to go from either to all his savings accounts, unless they'd also 
compromised his PC or phone as well; if the latter, why did they need to 
go via EDF?

-- 

Fake news kills!

I may be contacted via the contact address given on my website: 
www.macfh.co.uk