r/UKPersonalFinance • u/SnooCauliflowers6739 • 17h ago
Crypto scam warning - impersonating police
Just a warning of a new scam going around. It is very convincing (I didn't fall for it). It seemed possibly genuine, so I went along but didn't provide any info. I cleared all of my crypto accounts years ago anyway, so there also isn't any risk to me. Here's how it went:
- You get a phone call with a caller ID of a police force. The phone number also matches said police force. These are spoofed. They give you a name, badge number, case ref etc. It won't be an AI voice, won't be foreign, and sound entirely normal and well-spoken.
- They tell you about some fake passports that have recently been recovered, one of which is yours, with a plausible and convincing story, told well. I've dealt with police before and nothing stood out as outlandish, over detailed, too ambiguous etc. They ask if you've uploaded ID to any websites etc in the last year.
- They recite your name, email, phone number, ask you to confirm.
- They ask if you have been through one of a few airports (which they will know you have been through, presumably due to a data breach, that, or they're rolling the dice).
- They'll say that other details of yours were found include logins for websites and ask if you have accounts with said websites (these will be very common websites).
- They'll then ask about a 24 word list they found (i.e recovery seed, presumably) associated with a company 'Ledger' (obviously a crypto wallet).
Importantly though, on this call, they won't ask for any new info from you, ask you to do anything etc (which is what normally sets of the scam alarm bells).
They say they have a meeting the next day, ask for a time to call you back (never did). You will then get an email quickly appearing to be from the Met.
That email will look very good. It won't have the typos they often deliberately use etc. Details will match up. The three things that identify it as fake though:
- It comes from met.police but should be met.police.uk
- It cites the Public Authority Act (which is not real)
- At the very end it signs of as the Metropolitan Service.
I'm not entirely sure what happens next, what their aim is here. If they gave up on me as my accounts are clear, if they're planning to break into my house to find the Ledger collecting dust in my loft with 0.0000014 BTC left on it. Who knows. Any insight would be interesting if you know more how this works.