Cyber criminals are increasingly exploiting interest in cryptocurrencies to scam speculators and prey on British pension pots, new research has revealed.
Crypto scammers have seen their returns nearly double in the last 12 months, according to cybersecurity company NordVPN.
Total losses from UK investment fraud involving fake digital currencies, websites, apps or funds has risen to more than £226million in the year to May 2022 – up from the £143million lost during the 12 months before that.
Bitcoin bandits: Latest figures for reported fraud linked to digital currency scams show a 58% rise in money stolen year on year
This year, scammers have already made off with £118million, and currently pocket £36,250 per fraud.
As cryptocurrencies are not regulated by the UK’s Financial Conduct Authority, criminals are finding it easier to lure Britons to bogus investment and pension schemes with the promise of market-beating returns.
These fake schemes appear to have become more profitable for scammers despite much of the cryptocurrency market having slumped over the past six months.
The two biggest names, bitcoin and ethereum, are each down 48 per cent and 62 per cent respectively since the start of the year – as of 8 July.
However, while the amounts being stolen is rising steeply, this year’s data shows only a small increase in the number of incidents reported, suggesting criminals could be profiling victims to extract more from their scams.
Month | Report volume | Financial loss | Loss per incident |
---|---|---|---|
June 2021 | 875 | £20,275,547 | £23,172 |
July 2021 | 721 | £12,545,679 | £17,400 |
August 2021 | 738 | £13,336,233 | £18,071 |
September 2021 | 668 | £14,207,558 | £21,269 |
October 2021 | 808 | £15,623,715 | £19,336 |
November 2021 | 815 | £16,662,324 | £20,445 |
December 2021 | 783 | £15,661,991 | £20,003 |
January 2022 | 1,040 | £19,158,977 | £18,422 |
February 2022 | 900 | £15,225,636 | £16,917 |
March 2022 | 936 | £37,698,663 | £40,276 |
April 2022 | 892 | £12,908,057 | £14,471 |
May 2022 | 911 | £33,024,379 | £36,251 |
Marijus Briedis, chief technology officer and digital privacy expert at NordVPN said: ‘With inflation skyrocketing and traditional savings rates failing to keep up, bogus crypto investment schemes offering the prospect for high returns are the perfect bait for scammers.
‘These frauds are thriving, despite the huge crash in Bitcoin and other currencies, and worryingly the clear rise in the amounts stolen per fraud shows the scammers are getting better at fleecing their victims.
‘With huge amounts of personal and financial information for sale on the Dark Web, it could be that individuals are now being specifically targeted by hackers.’
How does it work?
Often the schemes will be advertised on social media, using fake celebrity endorsements from respected finance experts like Martin Lewis, or stars of the TV investment show Dragons’ Den.
Hackers may also use phishing emails or text messages, either to persuade victims to invest in a non-existent cryptocurrency fund via a bogus website, or to encourage them to click on a link or download an app containing malware.
This can then infect their devices and steal data or drain money from online accounts.
Cyber thieves’ success at touting fake schemes has come despite the crypto crash.
Malibot, a new and highly aggressive form of malware, which targets devices running the Android operating system, is being spread using a website and text messages offering fake links to real cryptocurrency apps, TheCryptoApp and Mining X.
Once these links are downloaded, Malibot, created in Russia, can quickly give criminals access to a victim’s phone, enabling them to harvest personal and financial data and send messages to other phones spreading the malware further.
Briedis adds: ‘With banking and investing online a part of everyday life it is vital to take steps to keep fraudsters at bay.
‘This includes making use of smart tech like VPNs and virus-checking software, and increasing your digital safety by creating strong passwords and checking the source of any link, site or app before you click.’