Tesco Bank customers at risk of further fraud attacks

The UK’s official online safety group has warned Tesco Bank customers that fraudsters might launch further attempts to steal money and bank details in the wake of one of the largest cyber attacks on a bank in history.

Get Safe Online said customers should be alert for phone calls, emails and other messages from criminals purporting to be from the bank.

The messages could include instructions to move money to a new account, confirm login details for security reasons or to hand a debit or credit card to a courier for checking.

Tesco Bank said it never asks customers for their full Pin over the phone, and will never email or text links that direct them to their account login page.

Andrew Goodwill, of the Goodwill Group, which fights fraud, said Tesco Bank customers should scrutinise any email or message purporting to be from the bank asking them to verify their account via a link.

He also advised customers to be wary of phone calls asking for banking information, such as Pins, passwords and security details.

He said: “In light of the Tesco Bank attack fraudsters will try to exploit our insecurities that our accounts are vulnerable. Not everyone will fall for the scam, but the small number who do make it worthwhile.

“If in doubt, don’t do anything until you call your bank.”

Suspicious activity was detected on 40,000 Tesco Bank accounts last weekend. It was initially believed that 20,000 customers had lost money, although Tesco has since said 9,000 accounts were hit. The bank has paid back £2.5m in total – an average of £278 per account. However, some customers, such as Matthew Martin, had much larger amounts stolen. Mr Martin, 21, had more than £1,500 taken from his account, and criminals attempted to steal more than £3,000. The last attempted transfer of £1,600 was stopped by the bank. However, £1,515 had already been successfully stolen in three separate transactions. When Mr Martin telephoned Tesco Bank, he said he was kept in a queue for at least an hour. He said: “When I finally got through I wasn’t told much – just that I’d get a call back. I had no idea if I’d get my money back. I’m surprised the first large payment wasn’t flagged up. I’d never spend £1,500 in one go.” Tesco Bank announced a freeze on online transactions on November 7. It said all accounts had been refunded by the following day.

Suspicious activity was detected on 40,000 Tesco Bank accounts; Matthew Martin, below, had £ 1,500 taken