A house surrounded by snow.

Winter Fuel Payment Text Scam Hits UK Pensioners

Senior citizens in the UK are receiving letters about the “Winter Fuel Payment” and “Cost of Living Support” as winter approaches. Unfortunately, scammers are now targeting them with fake texts claiming to offer government subsidies. These messages impersonate official communications to deceive recipients.

The Winter Fuel Payment is a tax-free annual benefit for households with at least one person born on or before 22 September 1958. These formerly £100 – £300 payments will no longer be available to those who do not get pension credit or other means-tested benefits as of the fall of 2024.

The recent, controversial move by the UK government to reduce winter heating subsidies, which affects almost 11 million seniors nationally, is being exploited by this scam operation.

Eddie Lynch, the Commissioner for Older People, has raised concerns about scams targeting seniors, particularly during the colder months:

As we brace for another challenging winter, the recent cuts to the Winter Fuel Payment present great concern for pensioners, many of whom live on fixed incomes and are already struggling to make ends meet. Fraudsters are exploiting the current financial climate and people’s anxieties. These payments are not just financial support; they represent a lifeline for countless older people by helping them manage the high costs of heating their homes, and these disgraceful scams are preying on that need.

This phishing scam targets UK senior citizens during a vulnerable time of year by posing as helpful information. The scam is particularly harmful because it preys on those most in need, who rely on seasonal government support to cover heating expenses.

Scammers usually propagate a false sense of urgency to lure victims into responding without giving it a second thought. The purpose of this scam is to create nervousness and prevent recipients from discovering suspicious components by sending them a “last notice” before an approaching deadline.

Phishing Scam Targets Pensioners with Fake Winter Fuel Payment Promises

According to Eddie Lynch, scams that use text messaging to target vulnerable components of society are becoming more common. These scams come up at a time when many people are struggling to make ends meet the cost-of-living crises and recent cuts to public services.

The UK Department for Work and Pensions (DWP) offers Winter Fuel Payments annually to assist individuals of pension age with their heating expenses. According to a recent government announcement, the number of eligible applicants decreased from 10 million last year to about 1.5 million today.

This alarming situation follows a recent change by the UK government to the Winter Fuel Payments system, which helps seniors born before September 23, 1958, in covering heating bills during the colder months.

Scammers are exploiting this change by impersonating authorised organisations. Their messages link to fake GOV.UK websites, where personal and financial information is requested under the guise of helping with winter heating payments.

Winter Fuel Payment Phishing Text Message
Winter Fuel Payment Phishing Text Message

The URL redirects recipients to a webpage on the domain “noticesgove[.]top,” designed to mimic a GOV.UK page, especially on mobile devices. The domain uses keywords like “notices,” “gov,” and “e” to appear legitimate this is a common phishing tactic. The page first prompts victims for personal information, followed by a request for payment details.

It is interesting to note that this phishing website was created especially for mobile devices. On desktops or laptops, the domain displays that the website is “for sale,” which is likely a strategy to target mobile users, particularly senior citizens who may be less knowledgeable with internet security.

Deceptive "Domain for Sale" Phishing Scam Targets Mobile Users
Deceptive “Domain for Sale” Phishing Scam Targets Mobile Users (BleepingComputer)

The scam’s mobile-only approach reflects its targeting strategy. Elderly users who rely heavily on mobile phones may find it difficult to differentiate between legitimate and fake government sites, making them more vulnerable to fraudulent SMS notifications.

The desktop version’s limited functionality reduces the risk of detection by cybersecurity professionals, who routinely monitor systems for suspicious links.

Recommendations

UK authorities are advising the public, particularly elderly, of scams that target those seeking government help. The Regional Organised Crime Unit (ROCU) has advised against receiving bogus emails or messages offering government subsidies, especially if they include links to external websites.

The ROCU claims that official government entities do not make unsolicited enquiries for information concerning payments.

The ROCU recommends sending suspect emails to Action Fraud or the National Cyber Security Centre at “report@phishing.gov.uk” and reporting strange texts to your cell operator by forwarding them to 7726 (which spells “SPAM”) to help stop these frauds.

Avoiding clicking on links from unfamiliar sources is essential due to the increasing prevalence of phishing schemes, and if in doubt, always get a second opinion. These attacks don’t only target individuals but can also impact entire organizations.

It is important that companies offer regular training sessions to teach staff members how to spot and handle phishing attacks. This proactive strategy aids in protecting corporate and personal data. Phishing attacks are on the rise, and it is important to protect your organisation. One effective way to do this is by increasing user awareness about these types of attacks. Phishing Tackle is a great resource that can help you in this regard. We offer a free 14-day trial to help train your users to recognise and avoid phishing attacks.

Recent posts