The UK’s National Crime Agency Halts Russian Coms Scam Platform

The United Kingdom’s National Crime Agency has taken down an online platform that had been used by criminals to defraud consumers, resulting in tens of millions of pounds lost.

Approximately 170,000 UK citizens fell victim to the “Russian Coms” scammer platform, according to Reuters. Although there is no evidence linking the platform directly to Russia, its operations were global, impacting a wider audience beyond the UK.

Russian Coms as a Service

Russian Coms was available in both handset and web application forms. It also offered crime-as-a-service for £350 (or $446) per month, providing features such as 5,000 minutes of encrypted calling, round-the-clock customer service, voice alteration tools, and even custom hold music.

Stopping the Fraud

“It’s excellent news that authorities have stopped this fraud-as-a-service platform and prevented millions from becoming victims,” said Jennifer Pitt, a Senior Fraud & Security Analyst at Javelin Strategy & Research. However, she warned that complacency cannot set in with similar platforms on the rise and the use of generative AI-based deepfakes making it easier for unsophisticated criminals to carry out convincing phishing and impersonation attacks.

Impersonating Institutions

Criminals utilized Russian Coms to impersonate banks or credit card companies, deceiving consumers into believing their bank accounts had been compromised. The callers would often use polite tones, industry jargon, and personal information from the victims’ past interactions to try to convince them of the urgency.

Impact on UK Seniors

Fraudulent phone calls have become a common method of communication for fraud attempts in the UK, with over 40% of senior citizens having been victims. The average loss from these fraudulent calls was estimated at £9,400.

Advice to Consumers

Pitt advised consumers to be skeptical about every communication and never provide money or information in response to unsolicited contact. Instead, consumers should use verified contact information to directly reach the organization they are communicating with.