{"id":16352,"date":"2019-09-18T09:10:06","date_gmt":"2019-09-18T17:10:06","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2019\/09\/18\/news-10093\/"},"modified":"2019-09-18T09:10:06","modified_gmt":"2019-09-18T17:10:06","slug":"news-10093","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2019\/09\/18\/news-10093\/","title":{"rendered":"International students in UK targeted by visa scammers"},"content":{"rendered":"<p><strong>Credit to Author: Christopher Boyd| Date: Wed, 18 Sep 2019 16:49:40 +0000<\/strong><\/p>\n<p>A new visa scam has come to light targeting international students from China studying in the UK. At least, it\u2019s being presented as new. In truth, it comes around every so often and has been on the radar for a few years.<\/p>\n<p>The scam works by presenting a threat to students\u2019 immigration status and uses various techniques to extract sizable payments from the victims. In the worst cases, it also embroils them in <a href=\"https:\/\/www.moneymules.co.uk\/index.html\" target=\"_blank\" rel=\"noopener noreferrer\">money mule scams<\/a> and that\u2019s a bad result for the students.<\/p>\n<p>Many of these attacks target specific regions in the UK with a high density of overseas students, and because all manner of immigration-related statistics are published regularly in the UK, it\u2019s an <a href=\"https:\/\/www.ukcisa.org.uk\/Research--Policy\/Statistics\/International-student-statistics-UK-higher-education\" target=\"_blank\" rel=\"noopener noreferrer\">open-source goldmine<\/a> for people wishing to create a list of targets.<\/p>\n<h3>A broad surface area of attack<\/h3>\n<p>The UK is hugely popular with international T4 visa students from China, with <a href=\"https:\/\/www.theguardian.com\/education\/2019\/jul\/11\/chinese-students-applications-to-uk-universities-up-by-30\" target=\"_blank\" rel=\"noopener noreferrer\">applications up some 30 percent since 2018<\/a>. Data available from the Higher Education Statistics puts this trend into <a href=\"https:\/\/www.hesa.ac.uk\/data-and-analysis\/students\/where-from\" target=\"_blank\" rel=\"noopener noreferrer\">sharp perspective<\/a>. As they mention:<span class=\"Apple-converted-space\">\u00a0<\/span><\/p>\n<blockquote>\n<p><em>Since 2012\/13 the number of entrants from China each year has exceeded the number from all EU countries combined.<\/em><\/p>\n<\/blockquote>\n<p>In the 2017\/18 academic year alone, the <a href=\"https:\/\/www.hesa.ac.uk\/data-and-analysis\/students\/where-from\" target=\"_blank\" rel=\"noopener noreferrer\">biggest international cohort was from China<\/a>, with 106,530 first year students. India was a distant second with just 19,750. What\u2019s particularly interesting is you can break this data down further and see which universities <a href=\"http:\/\/www.chinadaily.com.cn\/a\/201809\/03\/WS5b8d26c5a310add14f389551.html\" target=\"_blank\" rel=\"noopener noreferrer\">have the most students from specific regions<\/a>.<\/p>\n<p>Some of those universities, as well as others with a strong Chinese student community, have had to give out repeated warnings to students about these attacks.<\/p>\n<h3>Why are scammers targeting Chinese students?<\/h3>\n<p>Being a student in the UK on a T4 student visa is <a href=\"https:\/\/www.theguardian.com\/education\/2019\/jul\/29\/overseas-students-face-unacceptable-visa-costs-after-outsourcing\" target=\"_blank\" rel=\"noopener noreferrer\">expensive<\/a>, so every penny counts. As one student notes in the article linked above regarding application increases, there is a stereotype that Chinese students in the UK all come from wealthy families. As many of these attacks result in large payouts for scammers, they\u2019ll simply keep doing what they see is working whether the target is actually wealthy or just surrounded by multiple student loans. After all, they only need to strike it lucky once.<\/p>\n<p>So, now that we\u2019ve look at why these particular students are hot targets, let\u2019s take a walk through a timeline of attacks stretching back to 2007.<\/p>\n<h3>Back in the day<\/h3>\n<p>In 2007, student Jaiyue Wang was tricked into handing over \u00a36,000 to scammers based in Nigeria who\u2019d convinced her of half a million pounds in lottery winnings. When the prize didn\u2019t turn up, it hit her hard and she eventually committed suicide at her residence in Nottingham. An absolutely tragic end to a commonplace scam, and notable for potentially being<span class=\"Apple-converted-space\">\u00a0<\/span>one of the first well-known confirmed UK deaths off the back of one of these groups (here\u2019s <a href=\"http:\/\/news.bbc.co.uk\/1\/hi\/england\/cambridgeshire\/3444307.stm\" target=\"_blank\" rel=\"noopener noreferrer\">another awful one<\/a> from 2004).<\/p>\n<p>These two attacks probably weren&#8217;t targeting students specifically; they just landed in people\u2019s mailboxes, like so many scams did way back when. However, targeting specific groups of people (students, workers, people from a certain region, and so on) would soon become commonplace.<\/p>\n<p>Wind forward a decade, and students are treated as an amazing opportunity for bad people to exploit and ruin while making a tidy profit in the bargain.<\/p>\n<h3>2018\u20132019<\/h3>\n<p>2018 and 2019 have been fertile years for money mules. A typical scam usually <a href=\"https:\/\/www.bbc.co.uk\/news\/uk-england-sussex-46196850\" target=\"_blank\" rel=\"noopener noreferrer\">plays out like this<\/a>, with students caught passing stolen sums of cash between various bank accounts. Elsewhere, the scale of the crimes committed are quite significant. Criminal gangs don\u2019t just exploit one or two students; they\u2019ll make use of as many as they can, resulting in hundreds of bank accounts being frozen by the National Crime Agency and <a href=\"https:\/\/www.universityworldnews.com\/post.php?story=20190307200521986\" target=\"_blank\" rel=\"noopener noreferrer\">students galore brought in for questioning<\/a>.<\/p>\n<p>Because these scams often rely on unwitting students, many are found to have already returned to China long after the fraud is discovered, which makes investigating even more difficult. And US$4.6 million in money mule shenanigans is not pocket change. Here\u2019s a <a href=\"https:\/\/www.belfasttelegraph.co.uk\/news\/northern-ireland\/queens-student-paid-300-in-16m-belfast-money-laundering-operation-court-told-38379560.html\" target=\"_blank\" rel=\"noopener noreferrer\">similar scam from August of this year<\/a>, which involved another Chinese student, a \u201cbusiness opportunity,\u201d and a US$19 million money laundering<span class=\"Apple-converted-space\">\u00a0<\/span>operation targeting multiple students.<\/p>\n<h3>The visa scam makes its move<\/h3>\n<p>The earliest reference I found to this visa threat targeting Chinese students is from 2015, though there are quite likely others prior to that. The UK Council for International Student Affairs <a href=\"https:\/\/www.ukcisa.org.uk\/Information--Advice\/Studying--living-in-the-UK\/Frauds-and-scams\" target=\"_blank\" rel=\"noopener noreferrer\">warn of the following<\/a>:<\/p>\n<ul>\n<li>Criminals pretending to be in education, UKCISA itself, or the Home Office<\/li>\n<li>Fictitious claims of immigration problems related to their visa, resulting in a claim<\/li>\n<li>Potential mention of some personal information to make the scam seem more genuine<\/li>\n<li>Payment demanded via Western Union to avoid problems or deportation<\/li>\n<\/ul>\n<p>The attack tactics may vary, but most of the common elements repeat themselves with minor variations.<\/p>\n<p>By 2018, the scam has widened to <a href=\"https:\/\/manchesterstudentsunion.com\/articles\/statement-on-recent-phone-scam-targeting-non-eu-international-students\" target=\"_blank\" rel=\"noopener noreferrer\">target Indian students, too<\/a>. The scammers switch things up a little and instead of vague claims of problems with immigration status, they now mention <a href=\"https:\/\/www.sheffield.ac.uk\/students\/news\/phone-scam-2018-1.799166\" target=\"_blank\" rel=\"noopener noreferrer\">dubious packages addressed to the student<\/a>. The only way out, of course, is to send a sizable chunk of money to fake police officers, who are cloning numbers to make it appear as though they\u2019re really the Shanghai police department.<\/p>\n<h3>Renewing a visa scam<\/h3>\n<p>In 2019, the fake visa threat scam adds an unexpected development into the mix. A first year student had their laptop stolen at Heathrow Airport, and then shortly after <a href=\"https:\/\/www.theguardian.com\/money\/2019\/aug\/31\/fraudsters-target-chinese-students-in--visa-scam\" target=\"_blank\" rel=\"noopener noreferrer\">the phone calls began<\/a>.<\/p>\n<p>The scammers claimed to be the Chinese embassy, insisting the student had been referred by Chinese police officials claiming they were involved in a money laundering scam. At that point, they were passed onto the \u201cpolice\u201d themselves. So far, so typical. The only real odd thing up to this point is the stolen laptop. If you\u2019re wondering how it fits into things, wonder no more.<\/p>\n<h3>Bogus websites and data uploads<\/h3>\n<p>A website purporting to belong to the prosecutor general\u2019s office contained uploads of the student&#8217;s personal details, including her national ID card and photograph. All this information plus banking details had been left unsecured on the stolen device, and now the criminals were determined to make full use of it.<\/p>\n<p>By the time they\u2019d forced the student to upload a recorded statement to the social media site QQ and threatened her with deportation and imprisonment via web streams of men dressed up as police, they were likely too panicked to realise where they\u2019d obtained all this information from in the first place.<\/p>\n<h3>A dent in your personal finances<\/h3>\n<p>\u00a330,000 was sent to the fake police\/embassy officials, and the money was gone forever. Organisations have warned of similar attacks taking place on Chinese students, but the airport connection is particularly disturbing. It\u2019s possible students are being targeted on arrival, with the stolen details sent to mainland China where the groups set up the fake websites then set about contacting potential victims.<\/p>\n<p>It could, of course, be an entirely random theft, though it stretches probability somewhat to think the laptop stealer randomly decided to hand over personal information\u2014quite randomly\u2014to random scammers in China, who then very randomly indeed start dressing up as policemen.<\/p>\n<p>In my humble opinion, this seems\u2026unlikely.<\/p>\n<h3>Pressure points<\/h3>\n<p>This attack is particularly insidious, as there are a huge amount of changes to take in for a new arrival to the UK, and new students would just put a laptop theft down to bad luck. They almost certainly wouldn\u2019t know about the targeting taking place or have had a chance to see one of many warning pages on university websites.<\/p>\n<p>They\u2019ll just receive a strange, terrifying phone call one day and then see themselves plastered all over fake embassy websites. At that point, they\u2019re almost certainly doomed to send fraudsters large sums of money. Even without the bogus threat of jail time on return to China, penalties for visa holders in the UK can <a href=\"https:\/\/www.freemovement.org.uk\/general-grounds-refusal-understanding-re-entry-bans\/\" target=\"_blank\" rel=\"noopener noreferrer\">severely impact future career prospects<\/a>.<\/p>\n<h3>Portable device security tips<\/h3>\n<p>We\u2019ve published a lot of advice on the Labs blog over the years regarding physical device security, and quite a bit of it is applicable here for students who are always out and about with devices galore. While none of these will neatly fit into your own personal threat model, you\u2019ll hopefully be able to pick and choose the tips most relevant to your needs.<\/p>\n<p>Do you have an iPhone you need to lock down? Passwords, screen notifications, and event loss procedures <a href=\"https:\/\/blog.malwarebytes.com\/cybercrime\/2015\/10\/security-tips-tricks-for-the-iphone-6s6s-plus\/\" target=\"_blank\" rel=\"noopener noreferrer\">are all covered here<\/a>.<\/p>\n<p>Do you want some methods for securing sensitive data? <a href=\"https:\/\/blog.malwarebytes.com\/privacy-2\/2019\/08\/data-and-device-security-domestic-abuse-survivors\/\" target=\"_blank\" rel=\"noopener noreferrer\">Look no further<\/a>, especially if you need some advice for secure messaging apps, locking down data, and whether to store it in the cloud.<\/p>\n<p>Would you like some general travel tips? We\u2019ve <a href=\"https:\/\/blog.malwarebytes.com\/security-world\/2018\/06\/tips-safe-summer-travels-cybersecurity-checklist\/\" target=\"_blank\" rel=\"noopener noreferrer\">got you covered<\/a>.<\/p>\n<p>If you really want to make sure nobody has tampered with your device while away from your dorm, there\u2019s an <a href=\"https:\/\/blog.malwarebytes.com\/cybercrime\/2015\/10\/leaving-laptops-in-hotel-rooms-a-bad-idea\/\" target=\"_blank\" rel=\"noopener noreferrer\">awful lot of options to choose from<\/a>. Be warned, not all of these are probably warranty friendly.<\/p>\n<p>Finally, don\u2019t forget the old classic of putting your leg through a laptop bag strap when sitting at a busy location to prevent chance snatch and grab attacks.<\/p>\n<h3>Keep visa scam thieves at bay<\/h3>\n<p>These are terrible attacks aimed at people who spend a small fortune to be able to go to the UK and study, often with significant student debt\u2014even if some do come from rich families. Universities aren\u2019t often best equipped to know about sophisticated scams, much less warn students about them. Indeed, it\u2019s to their credit that so many do.<\/p>\n<p>Even so, criminals don\u2019t just target students in the UK. They also go after students from mainland China studying in Hong Kong, with one unfortunate victim handing over just shy of <a href=\"https:\/\/www.scmp.com\/news\/hong-kong\/law-and-crime\/article\/3004234\/phone-scammers-cheat-mainland-student-hong-kong-more\" target=\"_blank\" rel=\"noopener noreferrer\">half a million dollars<\/a> to scammers.<\/p>\n<p>This is one attack where not only education is key, but a little bit of preventative action, too. The Home Office via <a href=\"https:\/\/www.gov.uk\/government\/organisations\/uk-visas-and-immigration\" target=\"_blank\" rel=\"noopener noreferrer\">UKVI<\/a> will never cold call you demanding money for vague-sounding immigration problems, nor will they tell you about suspicious packages addressed in your name. Neither will law enforcement agencies jump into a quick VoiP chat asking for cash. Should you run into anything like this, don\u2019t send them a thing and report what happened to your university immediately.<\/p>\n<p>Students have enough to worry about without this adding to their woes, so let\u2019s see if we can help steer them safely in the direction of \u201cnot today, thanks\u201d and keep their money exactly where it should be.<span class=\"Apple-converted-space\">\u00a0<\/span><\/p>\n<p>The post <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\/scams\/2019\/09\/international-students-in-uk-targeted-by-visa-scammers\/\">International students in UK targeted by visa scammers<\/a> appeared first on <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\">Malwarebytes Labs<\/a>.<\/p>\n<p><a href=\"https:\/\/blog.malwarebytes.com\/scams\/2019\/09\/international-students-in-uk-targeted-by-visa-scammers\/\" target=\"bwo\" >https:\/\/blog.malwarebytes.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><strong>Credit to Author: Christopher Boyd| Date: Wed, 18 Sep 2019 16:49:40 +0000<\/strong><\/p>\n<table cellpadding='10'>\n<tr>\n<td valign='top' align='center'><a href='https:\/\/blog.malwarebytes.com\/scams\/2019\/09\/international-students-in-uk-targeted-by-visa-scammers\/' title='International students in UK targeted by visa scammers'><img src='https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2019\/09\/shutterstock_508591141.jpg' border='0'  width='300px'  \/><\/a><\/td>\n<\/tr>\n<tr>\n<td valign='top' align='left'>Visa scammers are at it again, this time targeting Chinese international students in the UK. Learn how these scams work in order to steer clear, and advise others to do the same.<\/p>\n<p>Categories: <\/p>\n<ul class=\"post-categories\">\n<li><a href=\"https:\/\/blog.malwarebytes.com\/category\/scams\/\" rel=\"category tag\">Scams<\/a><\/li>\n<\/ul>\n<p>Tags: <a href=\"https:\/\/blog.malwarebytes.com\/tag\/china\/\" rel=\"tag\">china<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/chinese-students\/\" rel=\"tag\">Chinese students<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/home-office\/\" rel=\"tag\">home office<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/hong-kong\/\" rel=\"tag\">hong kong<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/money-mule\/\" rel=\"tag\">money mule<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/scam\/\" rel=\"tag\">scam<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/uk\/\" rel=\"tag\">uk<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/ukvi\/\" rel=\"tag\">UKVI<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/universities\/\" rel=\"tag\">universities<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/university\/\" rel=\"tag\">university<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/visa\/\" rel=\"tag\">visa<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/wire-fraud\/\" rel=\"tag\">wire fraud<\/a><\/p>\n<table width='100%'>\n<tr>\n<td align=right>\n<p><b>(<a href='https:\/\/blog.malwarebytes.com\/scams\/2019\/09\/international-students-in-uk-targeted-by-visa-scammers\/' title='International students in UK targeted by visa scammers'>Read more&#8230;<\/a>)<\/b><\/p>\n<\/td>\n<\/tr>\n<\/table>\n<\/td>\n<\/tr>\n<\/table>\n<p>The post <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\/scams\/2019\/09\/international-students-in-uk-targeted-by-visa-scammers\/\">International students in UK targeted by visa scammers<\/a> appeared first on <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\">Malwarebytes Labs<\/a>.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10488,10378],"tags":[402,22954,22955,5729,16491,3985,10574,6674,22956,22957,5865,11294,17106],"class_list":["post-16352","post","type-post","status-publish","format-standard","hentry","category-malwarebytes","category-security","tag-china","tag-chinese-students","tag-home-office","tag-hong-kong","tag-money-mule","tag-scam","tag-scams","tag-uk","tag-ukvi","tag-universities","tag-university","tag-visa","tag-wire-fraud"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/16352","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=16352"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/16352\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=16352"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=16352"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=16352"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}