It has been noted that as Christmas approaches, the Christmas Cadbury WhatsApp scam has reappeared.
In this scam, victims receive a WhatsApp message claiming that Cadbury is giving away free ‘Chocolate Magic Baskets’ or Christmas hampers. The message includes holiday-themed text, branded Cadbury images, holiday-themed text, a prompt to share the giveaway with friends, along with a link to a suspicious website.
In some versions it is clear that scammers have collected details from previous data breaches, as they include your name and address in order to make the message feel more convincing.
Which? has reported that you go to a survey website if you click the link in the message. At the survey website, you will be asked questions as part of a ‘quiz’ ahead of ‘finding the golden ticket’.
They also reported that the website uses authentic-looking branding and says: ‘Hello, welcome to Cadbury’s Special Christmas Giveaway! Answer this short quiz, find the golden ticket and win an exclusive Christmas Chocolate Magic Basket. 235 gifts left.’
You are then required to answer four questions following which you get three attempts to select a prize box with a ticket inside. This means that you have ‘won’. You win on the third attempt.
At this point, the scammer tells you: “You must share a WhatsApp link with five groups or 20 friends (to spread the scam further) before you can finally claim your ‘gift’. You’ll then need to enter your delivery address.
Which? goes on to add that they have “seen survey scams like this before that lure you in with the promise of a free product before asking you to answer questions and give away your personal information”.
Other scams doing the rounds
Which? has also highlighted a number of other scams currently doing the rounds and reported since 1 December.
On 1 December Which? discovered a scam email impersonating the People’s Postcode Lottery. This features a dubious email which looks like it’s from the People’s Postcode Lottery telling you you’ve won a ‘scratch card advent calendar’ with daily ‘surprises, prizes and discounts’.
On 3 December, Arthritis charity Arthritis UK warned the public of a wave of scam calls claiming to be from them.
It has been noted that, “the calls tell you that you’re eligible for help with the completion of benefits forms in return for a fee, but this isn’t the case, and you never should pay to fill out benefit forms for support you’re eligible for.
On 9 December, it was noted that Trading Standards services across the country are “warning of a scam email impersonating Costa Coffee”.
The email states that you can win a Yeti Rambler Tumbler. It also contains a link, which leads you to a phishing website that will steal your financial and personal information.
Scam emails can be reported by forwarding them to this address: report@phishing.gov.uk.
Dodgy websites can be reported to the National Cyber Security Centre.
You can report phone scams on your mobile by forwarding the number to 7726.
On WhatsApp, find the number on your call log, select the ‘i’ and then ‘report.’
Charity scams and how to spot them
A charity scam is said to be a fraudulent scheme where scammers misrepresent themselves or create fake charities to obtain donations from well-meaning individuals.
These scams use deceptive practices to collect money under the guise of philanthropy and in so doing exploit donor generosity. The funds are pocketed by the scammers, instead of going to worthy causes. It is important to always check the legitimacy of a charity before donating so that you don’t fall victim to such scams.
Many great causes depend upon charitable donations, and it is great to give to charities and feel that you are helping people, animals or other good causes that need your help. It is a great thing to do. However, it is important to be sure that whoever is asking you for support is legitimate and Which? has made a list of some ways you can distinguish legitimate charities from fakes.
Watch out for fundraising posts on social media which may include links but don’t disclose the charity name. If you are considering donating, it is “prudent to search the images the cause is using to see if they have been used elsewhere – a tool like Tineye or a reverse image search on Google can help with this”.
You should ignore unsolicited emails or phone calls asking for donations. Charities are commonly impersonated in phishing emails. Instead donate directly through its official website.
If you are dealing with doorstep fundraisers ask for their ID and search for the charity on the ID. You can always call the charity to check if the fundraiser is genuine. If a fundraiser doesn’t feel comfortable with you doing this, you should be suspicious.
Ads from genuine charities on social media are accounts with a blue tick next to them and those that don’t, aren’t posted from verified accounts.
Which? suggests that you “check that the charity is signed up to the Fundraising Regulator’s Directory, which lists charities that have committed to good fundraising practices”.
You should also, “check the charity register. UK-based charities can be verified, and you can search using the charity’s name and registration number. You can also search the OSCR for Scottish charities or the Charity Commission for Northern Ireland”.
Any fundraising initiatives that don’t say where their donations go should be ignored.
Scam Sharer tool
For information on how to share scam warnings and help protect others, see Which?’s Scam Sharer tool.
CLICK HERE TO DONATE TO OUR CROWDFUNDER
HELP US BECOME STRONGER SO THAT WE CAN CONTINUE TO DELIVER POWERFUL CITIZEN JOURNALISM!
