‘They call every week’: the phishing attacks targeting past victims

by | Oct 16, 2026 | Financial

‘They call every week’: the phishing attacks targeting past victims

British actor Lisa Riley became a victim of an online scam when she applied for an Esta travel authorization through a fraudulent website that appeared nearly identical to the official US Customs and Border Protection portal. After submitting her passport, bank, and personal information and paying a fee, she received confirmation attempts that led her to discover the deception. The initial loss was modest, but the consequences have persisted and escalated significantly since.

Following the initial scam, Riley has experienced a substantial increase in fraudulent contact attempts. She now receives calls claiming to be from her bank regarding suspicious money transfers at a frequency of once or twice weekly, with text messages arriving even more regularly. This pattern reflects a broader criminal strategy identified by financial institutions, where scammers leverage stolen personal information obtained during initial frauds to conduct targeted follow-up attacks.

According to research conducted by Nationwide building society, approximately 15% of people have provided personal information to fraudulent entities, creating vulnerability to subsequent scams. Annya Burskys, head of fraud operations at Nationwide, explains that criminals either resell harvested personal data to other scammers or use it to make impersonation attempts via phone calls, text messages, and emails appear more credible. The use of artificial intelligence has enabled criminals to recreate legitimate government websites with increasing sophistication, often incorporating official terminology in domain names to establish false legitimacy.

US Customs and Border Protection officials note that fraudulent sites frequently employ urgency tactics to bypass consumer caution. To protect against such schemes, applicants should only use the official Esta website with a .gov address or the authorized mobile application. Authorities recommend documenting suspected fraud and reporting it to both financial institutions and local government agencies. For individuals who have already disclosed personal information, vigilance regarding unexpected communications is essential, with legitimate banks never requesting money transfers, authentication codes, or prescriptive instructions via unsolicited contact.

Article Attribution | Read More at Article Source

Article summary produced by Claude AI