WHEN Scott Rodriguez answered a phone call from his bank, he could barely believe he had been the victim of a fraud.
The 25-year-old oil worker had previously had his credit cards cloned and was surprised when fraudsters hit again – this time using a high-tech computer bug to steal nearly £5,000 from his bank account.
The construction engineer, from Aberdeen, is
among an increasing number of consumers falling victim to online banking scams. Industry figures have revealed a 200 per cent jump in "phishing" e-mails that try to persuade users to disclose information about their internet bank accounts.
Mr Rodriguez used online banking for two personal accounts set up with Clydesdale Bank. Crooks managed to access his funds and sent them to an account in a foreign name held at NatWest Bank in the Notting Hill area of London.
Luckily employees spotted the theft in time and called the construction engineer to query the transaction.
Mr Rodriguez said: "I got a phone call from the bank asking me if I had made a transaction for £4,900. My card has been cloned before and I thought, 'you're joking, please don't tell me this has happened again'."
He has now closed down all his internet and telephone banking facilities to avoid falling victim again.
He was told hackers may have used a Trojan monitor or virus to infiltrate his home computer. The bug would have weaved itself into the PC and tricked him into opening what looks like legitimate software.
Trojans create a "back door" that gives unauthorised users access to personal documents and accounts by tracking all keys pressed so they can get passwords.
A Clydesdale Bank spokesman said Mr Rodriguez would be refunded the cash this week because the transaction was spotted early. He said: "Mr Rodriguez will not experience any financial loss as a result of this incident."
Industry body Apacs says the number of so-called phishing attacks had soared from 3,394 during the first three months of 2007 to 10,235 during the same period this year.
The scam involves fraudsters sending people e-mails claiming to be from their bank and asking them to click on a link that takes them to a website that looks identical to their bank's.
Victims are then asked to verify or update their personal security information, and the fraudster then uses these details to access accounts online and empty them of money.
Apacs said each single phishing incident recorded in its statistics could involve thousands or even millions of e-mails being sent to people.
It said that although online banking fraud had fallen by a third during 2007 to £22.6 million, fraudsters were still having some success in tricking people into giving them their security information.
The number of phishing attacks being carried out has been growing steadily since the beginning of last year.
Sandra Quinn, director of communications at Apacs, said: "Although online banking fraud losses fell last year, the fraudsters clearly aren't giving up.
"Phishing scams are continuing to rise and they are becoming ever more sophisticated, which is why we want to remind people to remain wise to them.
"The advice is quite simple: your bank will never send you e-mails asking you to disclose Pin numbers, log-in details or complete passwords – if you receive an e-mail of this nature you should delete it. If you think your details have been compromised contact your bank immediately."
The group said research had shown that 82 per cent of people were aware of phishing scams and said they would ignore or delete an e-mail asking for their details, but 29 per cent of people do not have up-to-date security software, which could help to protect them.
Meanwhile, a survey has found that more than one-third of consumers blame banks for fraud and nearly three-quarters say it is the sole responsibility of banks or credit card issuers to resolve any problems that arise with their accounts.
Seven in ten believe that card issuers also have a responsibility to minimise the risk of card fraud and the same proportion of those polled expect to be fully compensated should any financial fraud occur – regardless of whether they are at fault.
But the research, conducted by Life Assistance firm CPP, also shows that users are willing to take some responsibility for instances of fraud, with 74 per cent acknowledging that they share accountability for reducing the risk of card fraud and identity theft and more than half blaming individuals for fraudulent activity because they don't keep their personal details safe.
Despite this, one in five still don't check their bank statements thoroughly – a suggestion many consumers are not taking enough care when it comes to fighting fraud.
Banks and credit card firms have put extra security measures in place such as Chip and Pin and Verified or MasterCard SecureCode, but these will not be effective if consumers prove to be the "weakest link", says CPP.