‘They call every week’: the phishing attacks targeting past victims

by | Oct 19, 2026 | Financial

‘They call every week’: the phishing attacks targeting past victims

Lisa Riley, a British actor, became a victim of an online fraud scheme while attempting to obtain an Esta travel authorization for a trip to the United States. She discovered a fraudulent website through a Google search that closely resembled the official US Customs and Border Protection portal. After submitting her passport, banking, and personal details and paying a fee, Riley realized the deception when the expected confirmation failed to arrive and a suspicious response was received.

Since the initial incident occurred 17 months prior to the article’s publication, Riley has experienced an escalation in fraudulent contact attempts. She now receives multiple calls and text messages each week, often from individuals claiming to represent her bank and inquiring about money transfers. The attackers leverage the personal information obtained from the initial scam to make their subsequent fraud attempts appear more credible.

Research from Nationwide building society indicates that approximately 15% of people have disclosed personal information to parties that later proved to be fraudulent. Annya Burskys, head of fraud operations at Nationwide, explained that criminals frequently retarget victims by either selling their information to other scammers or using it to conduct follow-up impersonation schemes via phone calls, text messages, and emails.

The fraudulent Esta websites are designed to closely mimic legitimate government portals and are optimized to appear prominently in search results. Criminals increasingly employ artificial intelligence technology to replicate authentic government sites and incorporate relevant keywords like “Esta” in domain names. The US CBP spokesperson noted that such sites often employ pressure tactics, demanding quick action from applicants to circumvent careful consideration.

To protect themselves, applicants should exclusively use the official Esta website bearing a .gov address or the authorized mobile application. Individuals who have inadvertently provided personal information should remain vigilant for unexpected communications and report suspected fraud to their financial institutions and relevant local authorities. Legitimate banks will never request fund transfers, share security codes, or advise individuals on what to communicate with family or friends.

Article Attribution | Read More at Article Source

Article summary produced by Claude AI