Energy UK Explains: Social engineering fraud

What is social engineering fraud?

• Social engineering fraud is when someone tricks people into giving away private information, such as passwords or bank details, by pretending to be someone they trust. They may tell believable stories or impersonate a friend, or a coworker.
• Or the individual may use tactics to gain access to someone’s property. They may say they are from an established organisation, such as the person’s energy supplier, and even carry fake ID. 

How do fraudsters try to use social engineering to deceive energy customers?

• The goal of social engineering is to fool people into clicking on links, sharing confidential information or doing something that helps the scammer. It works because people tend to trust others, and they naturally react quickly when something seems urgent. To stay safe, it’s important to slow down and think before responding to unexpected approaches.
• For energy customers, social engineering can mean being tricked into sharing account details or payment information with scammers pretending to be energy suppliers. The following is a list of some things that could happen:
  • Fake calls or emails: Scammers may pose as energy companies, warning about overdue bills and threatening to cut off the person’s energy supply unless payment is made immediately. They could demand urgent payment through a fake link. Always pay through usual channels, and triple check first.
• • Phishing messages: These might say there’s a refund due or a billing error, asking the customer to click a link and enter personal information.
  • Impersonation in person: Someone could come to the customer’s door claiming to be from their energy company and asking to inspect or upgrade equipment or read the meter – only to steal information or gain access to the home.

How can energy customers spot and avoid social engineering fraud scams?

• People may be especially vulnerable to social engineering during times of high cost-of-living pressures, when urgency and stress can cloud their judgment. Energy is also an essential service, so people feel the need to act quickly if they are told they may lose supply.
• It is very important for energy customers to stay watchful. It is also essential to verify contacts and avoid clicking on unknown website links.
• If people have any doubt about a communication or visit from an energy supplier, they should contact their energy supplier directly using the supplier’s contact details. These can be found on a bill or their official website.
• Energy UK has also produced a guide to help energy customers protect themselves against social engineering fraud.