Skip to main content

tv   Hunting the Social Media...  BBC News  August 20, 2021 3:30am-4:01am BST

3:30 am
than they were in january. now on bbc news, panorama. i'm on the trail of a new generation of criminals. they're fuelling a fraud epidemic. i was starting to panic because obviously my account hit zero. i just started crying. their targets are everywhere — big brands, the banks... and they could be coming for you. ifeel like, how stupid was i to believe this? they are openly using social media to run criminal networks. you could potentially earn anywhere from £2000 to £4,000. and promoting fraud as a lifestyle choice. i'm a london scammer, i see it, i want it, i click it.
3:31 am
nights in the bando pyrex whipping. so he's saying, i'm making all this money and if you want to make this money, here's how you do it. my name is kaf okpattah and i'm investigating what happens when fraud goes viral. there is one crime that is the most commonly experienced of all — fraud. it makes up 40% of all criminal activity in the uk. during the pandemic, it boomed, costing us all more than £2 billion in a year. for many, the crime begins with a dodgy text. i've found out where some of the messages like these are coming from. earlier this year, emmeline hartley was fooled by a text from fraudsters.
3:32 am
well, there was a text, first of all, from the royal mail. it said on the text delivery failed you need to pay £2.99 additional postage paid. and i've paid that before. and it kept directing me to the royal mail website. and then, i clicked back and scrolled around and then i entered my details. and then, i got a phone call the next day, which was on my birthday, from my bank. in fact, it was the fraudsters. because they had used the information she had entered to the fake royal mail website, she believed it was her bank. they convinced her to transfer her money into a different account to protect it. emmeline suddenly realised she had just paid over £1000 to criminals — everything she had. ijust broke down on the phone.
3:33 am
he was still on the phone. ijust started crying and he's still trying to calm me down, knowing full well at this point, there's nothing else he could get out of me and eventuallyjust gave up and hung up, to which point ijust, i wailed. emmeline shared her story online. it went viral. it led to messages of support, and she got her money back from the bank. but emmeline also received disturbing messages. i started to get other messages from people who were supposedly within the scammers' network as well, which were a bit worrying. so, a few of them sent me screenshots of the scammers' bank account with my money in it, in the exact transactions that i'd sent, the exact figures. so, i knew, obviously, that it had come from them.
3:34 am
it's surprising how public and open it is. like, it's almost as if it's not illegal. the photo that showed emmeline's money going into another bank account was posted by someone calling themselves uncle vio. i want to find out more about him and what he's up to. it turns out this little green king has been marketing himself on social media as a fraud consultant. �*with the economy in a rough spot, generating a legal source of income has become tough. but uncle vio is here to assist you.�* this promotional video was posted on snapchat. �*you could potentially earn anywhere from £2000 to £4,000.' uncle vio offers a way into fraud. �*so if you're interested, don't hesitate to message us today �*at uncle vio for more information.�* his marketing might be professional and modern — but this is old fashioned
3:35 am
crime. as his victims know only too well. sending out fraudulent text messages like the one that tricked emmeline is known as spamming. we wanted to find out how easy it would be to become a spammer ourselves. uncle vio was ready to help. he's been advertising on snapchat for people to work with him. and he's easily reached through the messaging app telegram. he got back to us immediately. it cost £100 in bitcoin to buy our way in. he explained that he was offering a fake website for spamming phone numbers — or leads. for £15 more, he said he would spam 4000 leads on our behalf. i've never met uncle vio, but thanks to a couple of apps
3:36 am
on my phone and £115, i could have tried to defraud thousands of people. obviously, i couldn't take part in the fraud, so i didn't take him up on the offer. instead, i asked if we could supply some numbers. vio agreed to the deal. but all of the phone numbers belonged to me. sure enough, i was targeted. it was scammers pretending to offer me a phone contract. you said you needed my bank details, is that right? yeah. what details would you need? so, we will need like the sort code and the account number.
3:37 am
i should probably let you know that i'm actually a bbc reporter for panorama. it's pretty obvious that you're trying to scam me, how can you do that? it's clearly not though. any normal provider... hangs up. uncle vio appears to be running a sort of criminal enterprise. but we haven't been able to identify him. after we wrote to uncle vio on social media, he phoned us, using his alias. he said he doesn't actually commit fraud himself but has people working for him. when asked about defrauding emmeline, he said, "that was one of my boys. "that wasn't even me." after we wrote to snapchat,
3:38 am
uncle vio's account was closed for violating community guidelines. criminals like uncle vio used to hide on the dark web, but now they don't need to. social media can give them enough anonymity to escape investigation. anonymous accounts are leaving notjust a small amount of breadcrumbs to investigate them, there are no breadcrumbs, there is no additional footprint left behind them, so to investigate this is nearly impossible. this anonymity has enabled some social media fraudsters to build influential brands without the fear of being caught. and there's one in particular that stands out. meet tankz. listen — i'm a london scammer, i see it, i want it i click it.
3:39 am
nights in the bando pyrex whippin. he keeps his true identity hidden while rapping and bragging about fraud on social media. this track has been played nearly 7 million times on youtube. from time to time, he even posts a bit of life advice. it doesn't matter if it's legal or illegal at the end of day it's still a hustle. he is probably, you know, one of the influencers out there when it comes to this kind of stuff. he wants to be the kim kardashian of fraud. tankz is on youtube, twitter, instagram, snapchat and tiktok. he's built his reputation through a web of the biggest social media platforms. with a total of over 150,000 followers, tankz is a social media influencer who promotes crime. fraudsters on social media have brought this kind of crime to a new audience.
3:40 am
i've gone back to my old school to meet some year 12s. these students are not involved in fraud themselves but have agreed to talk me through what school kids are finding on social media. when did you start seeing fraud specific posts on social media? i'd say around year 10. so, that's like 15? on social media. has this become like a thing for young people? yeah, definitely. no one really brags about other crimes. you don't really hear people say, "oh yeah, i robbed that house last night." so, that's why if it's on social media, it's everywhere, you've seen the lifestyle, you've seen everything, then there's no reason for you to think it's really bad. i think it's very much glamorised all over social media to have the rich lifestyle. and so, it doesn't really matter how you get there. the fraudsters, they're
3:41 am
thinking as it's not myi pocket, i don't care. but they don't actually sit - there and think whose pocket is it coming out of. that person is losing out on their money. | they're not going to. get that money back. for the social media generation, there's a gateway to crime that they hold in the palm of their hand every day. online fraud against uk retailers is on the rise. on social media, it's known as clicking. last year, it's thought to have cost the uk economy over a quarter of a billion pounds. tankz, the man in the mask, doesn'tjust rap about fraud. he's been selling how—to guides about clicking. they're known as methods. he's promoting a lifestyle, which is what influencers do. so, he's saying, "i'm making all this money and if you want to make this money, here's how you do it. you have to buy these
3:42 am
methods off me." we posed as someone interested in learning about fraud. we asked tankz for a guide via instagram. he offered us a set of how—to guides to choose from. we chose what he called the expert guide. it cost £100. the files he sent contain multiple techniques to commit fraud. we're not going to reveal his tricks, but i can tell you these methods target major brands. and there's even a way to con the taxpayer by defrauding the universal credit system. we showed the guide to fraud expert, tim ayling.
3:43 am
based on what you've seen there, i'm guessing it poses a threat or...? oh yeah, forsure. i mean what he's doing here is finding weaknesses in systems of different companies and advertising that. i mean, the price, £100, he's got to be selling that a lot for it to be worthwhile for him to do this, so for sure, there's going to be a lot of takers and that in itself is an issue. tankz is still selling these guides, he's still making money from them, does that mean that retailers, banks, even the government, haven't clocked onto his methods? certainly in the finance world and to an extent, the retail world, there is a lot of technology that they have in place to stop as much as they can. the reality is that it's very difficult to stop everything. tankz�*s tiktok, instagram and snapchat accounts were closed after we wrote to the social media companies. twitter said he was not in breach of their guidelines. youtube didn't close his
3:44 am
account, but said they strictly prohibit videos �*that promote violence or criminal activity�*. many of the clicking methods being circulated by people like tankz rely on the fraudsters getting hold of stolen personal information. this information is known as "fullz". we kind of use the term "fullz" now, full financial profile essentially is what that stands for and we know that criminal can get these through the likes of phishing attacks. so, they might send you an email, get you to click a link, fill out all your details. and once they�*ve captured that information, what are they doing with it? essentially, they will sell that. again, fraudsters are using social media for their marketing. sometimes, they even give away free samples of fullz. like on this account on instagram.
3:45 am
my name is kaf, i�*m a reporterfrom the bbc. some of the phone numbers of the victims were listed so i gave them a call. i was just wondering if you were aware that your details were online. i don�*t want to scare you. it�*s all sitting there on instagram. i�*m sorry about this. it�*s clear that the details are real. i�*ll let you go right now so you can double check your account. i felt as if i was the one violating their privacy. no, no, that wasn�*t nice. i know. after making the calls, we reported this post to instagram using their reporting tool. but they left it up there for a month. i went to meet one of the people whose information had been posted. i showed him what we�*d found.
3:46 am
i can see basically all my details, i can see my full name, i can see my fully address, my number of my phone, the number of my card. my account number, my sort code. so, basically i can see my whole life here. what�*s going through your head having looked at that? it�*s scary because you never realise how unprotected you are. we�*ve reported it to instagram but they haven�*t taken it down. if it�*s still there that means they, they don�*t, they don�*t care about us. wilson had cancelled his card by the time the post went up. but with the help of instagram, social media fraudsters now have his personal information. after we wrote to instagram�*s pr team, the post was finally taken down. but they didn�*t explain why it stayed up for so long. facebook, who own instagram, told us "fraudulent activity
3:47 am
is banned" and they take "strong action wherever possible to remove it". they say they�*ve launched a new reporting tool within the facebook app. so, what is the government doing to tackle online fraud and its promotion on social media? earlier in the year, they unveiled plans to reduce illegal and harmful digital content. it�*s called the online safety bill. the world wide web was, of course, invented by a brit, and now the uk is setting a safety standard for the rest of the world to follow. the proposed laws were initially aimed at tackling things like online hatred and abuse, not fraud. but after pressure from consumer groups, the banks and the police, the government changed its mind. the government announced that they did want posts about fraud to be covered by the rules after all. but i�*m reading the draft
3:48 am
of the new laws and i can�*t see any mention of fraud anywhere. fraud experts say it is included in what the bill refers to as illegal content but for some, refers to as illegal content, but for some, that�*s not enough. it shows that they had no thought prior to the bill drafting to include fraud. after a bit of campaigning they said, ok, it should include fraud, but it doesn�*t actually do very much to hold the companies that are providing these online media platforms to account. this bill is not fit for purpose for the war against fraud. it�*s miles off. the government says the new laws would increase people�*s protection from scams. they said that including fraud in the bill is just one part of our plan to tackle fraud. and they continue to pursue fraudsters and close down the vulnerabilities they exploit. social media fraudsters
3:49 am
have their eyes on our bank accounts. so, banks and businesses are fighting back. they�*ve brought in new systems to verify their customers�* transactions, including the one time passcode. but criminals are finding more and more ways around it. now, the one time passcode is essentially sent to your mobile phone so that you can authorise a transaction, but what we know is that criminals are often socially engineering the victim to get that one time passcode, you know. carina schneider knows how easy it is to be caught out. it started with a call she thought was from her bank. they call you telling you your account has been compromised, "let�*s go through security," and they go through security, they know your name, they know your address, they know your date of birth.
3:50 am
she said "i�*m going to send you now a one time passcode, "and then you just read the information to me please." and that�*s what i did. carina had unwittingly given the criminals the one time passcode, which is used to authorise activity on an account. they say that my current account was compromised. they would cancel my card, open a new account, and then my money would be safe, but that was just the beginning of it, because i had savings as well. how much money ended up in this new account? £7,192. she was refunded by her bank, but it looks like the criminals got away with it. i feel like how stupid was i to believe this, and i do read a lot i see the news, and i didn�*t realise how damaging was this one time passcode.
3:51 am
stealing one time passcodes is a growing criminal trend. i started investigating how one gang offered to help fraudsters do it with a highly professional automated service. otp agency marketed themselves through the telegram app. they used videos like this to advertise their services while hiding who they were. the group was even on the review site trust pilot. it was a highly rated service. so, how did it work? imagine a criminal client of otp agency has got hold of your details. they try to buy something — and when they do, your bank sends you a one time passcode to check that it is you making the payment. at this point, the criminal uses otp agency to trigger
3:52 am
a robo—call to you, posing as your bank. i�*ve obtained a demonstration of one of these calls from inside otp agency. it shows just how convincing they can be. john seymore, this is an automated call from halifax bank. they pretend to be calling to prevent fraud. they say if you want to stop the transaction, you need to give them your one time passcode. an authorised payment of £85.23 was made using your debit card ending in 1312. in order to cancel this transaction, please enter the code that you received by text message followed by the hash key after the beep. if you follow these instructions, the criminals will have everything they need to take your money. i was not the only one investigating them. i discovered an american cyber intelligence firm,
3:53 am
scylla intel, was also on the case. my professional focus is disrupting financially motivated cybercrime. we�*re not revealing his identity for security reasons. are services like otp agency, are they a one—off? i would describe it as a growing market. and whereas fraud is this nebulous term, what�*s developed now are these services that makes cybercrime incredibly approachable. scylla was looking into a wider network of uk based cyber fraud groups, including otp agency. but after information was shared with the police, otp agency suddenly disappeared. it doesn�*t seem to have deterred others from offering a similar service. this colourful cartoon looks like a gateway into serious crime using one time passcodes.
3:54 am
use our service to intercept your otps or telepins from your target. ispoof is here to help. the cat and mouse game would always continue with criminals and police, but it�*s just about the distance in between the cat and the mouse. can you say, who is winning in that cat and mouse game? i would have to say right now, criminals are winning. in the world of cybercrime, it�*s easy to stay anonymous and hidden. but there�*s one social media fraudster who�*s not as clever as he thinks he is. remember tankz? he�*s the guy who raps about fraud who sold me a fraud guide. i think i�*ve worked out where he is. and i�*m on the way there now. tankz�* posts about life as a fraudster reveal more than he intended. typing on youtube search bar, in this video tankz is heard saying he�*s a uni student. do your parents know you click?
3:55 am
yes, but because i�*m at uni, it�*s made them kind of more accepting of it. in this clip, he suggests he lives in the wembley area of north west london. i�*m gonna go to kings cross, head back to wembley from there. but the most distinctive thing in his videos that i�*ve noticed is this... ..the black and grey carpet. i think i�*ve matched it to a student accommodation block near here. another right and hopefully, when we start going down, we�*re going to be on the road to tankz�*s apartment. left up ahead, that�*s good. now we�*re in the right place, the question is how will i recognise the anonymous london scammer? again, tankz has given too much away online. earlier in the year, he posted a video of
3:56 am
a run—in with the police in which he accidentally revealed his number plate. when i searched official records, i could see that it�*s a grey vauxhall corsa. all i have to do is find the car. that�*s it, that right there, that�*s tankz�* car. that�*s his number plate, it�*s a grey vauxhall. all that�*s left now is to wait for tankz. so we did. and when he turned up, we were there. the first confirmed pictures of tankz. they�*re so good, you can pretty much id him from this. so, who is he?
3:57 am
an ebay account in the name of tankz gives a clue — an email address for a luke joseph. we�*ve been told there�*s someone with that name who lives in the student accommodation where the vauxhall was parked. and then there�*s this — an apple music page suggests the writer of this tankz song was lukejoseph. the clothes match — and so does the name. it seems that tankz, the london scammer, may be a london student called luke. this is a talented individual who clearly is clever. but using those skills for something that in my mind is criminal and is wrong, if tanks is prosecuted, is criminal and is wrong. if tanks is prosecuted, there is a real risk he�*ll face prison. we wrote to lukejoseph and tankz about our allegations. there was no response. all the social media companies who responded to our questions say they have rules against
3:58 am
fraudulent activity. they all said they take enforcement action against violations, work with law enforcement agencies, and are developing new ways to combat fraud. only telegram did not respond to our request for a comment. social media has transformed how criminals work. you can now appeal to hundreds, thousands, millions of people in one go by a simple social media post. it�*s helping to fuel an epidemic of crime. it seems the government and social media companies are struggling to stop the spread. social media is now the area of expertise for criminals because we are immersed in it, so they�*re immersed in it. so, social media companies need to realise that they�*re part of the problem. the uk�*s number one crime is going viral. keep an eye out for the social
3:59 am
media fraudsters — next time, they could be coming for you.
4:00 am
this is bbc news. i�*m lewis vaughan jones. our top stories: the taliban tighten their grip after taking over afghanistan, carrying out house—to—house searches for people who worked with western forces. the militants beat back the crowds at kabul airport, as afghans
4:01 am
turn up in hope at abandoned western embassies.

30 Views

1 Favorite

info Stream Only

Uploaded by TV Archive on