The AnyDesk Trap: Lessons from BBC’s Scam Interceptors

If you’ve been watching the latest series of Scam Interceptors on BBC One, you’ll know the feeling of shouting at the telly. Watching the team, led by Rav Wilding and ethical hacker Jim Browning, race to stop a remote-access theft in progress is gripping, but it’s also a sobering reminder of how easily "standard" tech is being weaponised.

The most common tool in the scammer's arsenal? AnyDesk.

What is the "AnyDesk Scam"?

AnyDesk is a legitimate piece of software used by IT professionals to help people with computer problems remotely. However, scammers use it as a digital skeleton key.

In Series 4 and 5 of Scam Interceptors, we see this play out repeatedly. A victim receives a call—often claiming to be from "Sky Technical Support," "Amazon," or "BT"—warning of a security breach. They are told to download AnyDesk to "fix" the issue. The moment the victim hands over their unique ID code and clicks "Accept," the scammer has total control of their device.

Why it’s so Effective (and Dangerous)

It’s easy to think we’d never fall for it, but these episodes show just how sophisticated the manipulation is. In Series 4, Episode 9, we watched in horror as a scammer used a remote connection to take photos of a man’s credit cards. In Series 5, Episode 1, the interceptors showed how scammers black out the victim's screen so they can’t see the money being moved out of their bank account in real-time.

The "AnyDesk" red flags include:

• The "Black Screen": If your screen goes dark and they claim "it's just an update," they are actually hiding their movements.

• Banking "Verification": They will ask you to log into your bank while they are connected. Never do this.

• The Sense of Urgency: They will tell you your money is at immediate risk to stop you from thinking clearly.

How to Stay Safe

The best way to fight back is to spread the word. If you have friends or family who aren't tech-savvy, share these three golden rules:

1. Zero Remote Access: No legitimate bank or utility company will ever cold-call you and ask to "remote in" to your computer.

2. The "Ten-Minute" Rule: If a caller pressures you, hang up. Wait ten minutes for the line to clear, then call the company back using a trusted number from an official statement or the back of your bank card.

3. The AnyDesk ID is a Key: Treat your AnyDesk ID like your house keys. You wouldn't give them to a stranger on the street; don't give them to a voice on the phone.

Take Action

If you want to help "highlight" this beyond just talking about it:

• Report IDs: If you receive a scam call, report the AnyDesk ID directly to AnyDesk’s Abuse Channel to get their access revoked.

• Community Groups: Post warnings on Nextdoor or local Facebook groups. Scammers often target specific UK regions in "waves," so a local heads-up can save a neighbour’s life savings.

• Watch and Learn: Encourage others to watch Scam Interceptors (specifically Series 4, Episode 3). Seeing the scam in action is often the best deterrent.

Scam Interceptors does a brilliant job of showing the reality of these crimes, but the best "interception" starts at home. By staying informed, we can make sure these scammers find a dial tone instead of a victim.

• https://www.bbc.co.uk/programmes/m00164f1/episodes/guide
• https://anydesk.com/en/abuse-prevention

Beware the "AnyDesk" scam

[click The AnyDesk Trap image to view enlarged]

How to Check if You Are Owed Money for Past Car Finance

If you bought a car, van, or motorbike on finance before 28 January 2021, you might be due a significant refund. A major investigation by the Financial Conduct Authority (FCA) is currently looking into "hidden commission" deals that saw many UK drivers overcharged.

Here is a simple guide on how to use the free tools provided by MoneySavingExpert (MSE) to see if you are eligible and how to start your claim.

What is the Car Finance Scandal?

For years, some car dealers and finance companies had "discretionary commission" arrangements. This meant lenders allowed dealers to increase the interest rate on a loan so the dealer could earn a bigger commission. This was often done without the customer’s knowledge, meaning many people paid much more than they should have.

Step 1: Find Your Past Agreements

If you can’t remember who your finance provider was or how many agreements you had, Martin Lewis recommends using a credit reporting tool like MyEquifax. FREE Equifax Basic signup.

By checking your credit file, you can see a list of previous lenders and the dates of your agreements. This is a vital first step if you no longer have your original paperwork.

Step 2: Use the Free Reclaim Tool

You do not need to pay a lawyer or a claims management company to do this for you. MoneySavingExpert has launched a that makes the process straightforward.

1. Enter your details: Use the MSE tool to generate a formal request.

2. Use the template: The tool provides an easy template letter/email.

3. Submit to the provider: You send this directly to the bank or finance company that provided the loan.

The goal of this letter is to ask two simple questions: Was there a discretionary commission arrangement on my loan? And if so, I want to lodge a formal complaint.

Step 3: Wait for the Investigation

The FCA has paused the deadline for firms to respond to these specific complaints while they finish their investigation (expected by May 2025). However, it is important to get your complaint in now to log your place in the queue and protect yourself against any future time limits.

A Warning: Beware of Scammers

Because this is such a high-profile news story, scammers are currently targeting people via text, email, and phone calls.

• Ignore "Cold Calls": If someone contacts you claiming they can get you a car finance refund for a fee, be extremely cautious.

• Avoid "No Win, No Fee" Firms: These companies often take a large cut (30% to 50%) of any money you get back. You can do this yourself for free using the MSE tool.

• Stick to Official Sources: Only use reputable sites like MoneySavingExpert or go directly through the Financial Ombudsman Service.

Summary

If you had a car on finance (PCP or Hire Purchase) before January 2021, it only takes a few minutes to check. Use your credit report to find the lenders, use the MSE template to send your emails, and keep a record of your correspondence. It could result in a payout of over £1,000 depending on the size of your loan.

Source: For more detailed advice visit https://www.moneysavingexpert.com/reclaim/reclaim-car-finance/#tool

Ask Silver Scam Checker

Ask Silver is a simple tool that anyone with a smartphone can use to protect themselves from scams.

All you need to do is upload a screenshot of any text, email or website you’re suspicious about. Using the power of AI, Ask Silver will instantly check on the communication in question and indicate whether it’s safe or a ‘Red Flag’, also suggesting next steps to stay safe.

To use Ask Silver, start by signing up at www.ask-silver.com. It’s available inside WhatsApp, just like any of your other contacts that you can message. Once you sign up, you’ll receive a one-time email with a QR code to scan, which opens the WhatsApp chat. You then simply send through a screenshot of anything you want to check, and you can even report scams to the authorities with one tap at the end of the check.

If Ask Silver doesn’t automatically appear in your WhatsApp contact list, open WhatsApp, then press New chat > Options > Reload contacts.

 Source: https://www.getsafeonline.org/asksilver/

Holiday Scams: Protecting Yourself (As Seen on Channel 5)

The Problem: Holiday Accommodation Scams

These scams often involve fraudulent listings on online platforms. Scammers may:

• Impersonate legitimate businesses: Copying logos and information from real companies.
• Create fake listings: Using stolen photos of properties that don't exist or aren't available for rent.
• Demand upfront payments: Often via methods that are difficult to trace, like bank transfers or cryptocurrency.

How to Use the Tools to Protect Yourself:

1. I-PRAC (International Property Rental Approval Certification):
• Check for I-PRAC certification: If a property or agency claims to be I-PRAC certified, verify this on the I-PRAC website. This provides a level of assurance that the business has undergone some verification. However, remember that no system is foolproof, and scammers might falsely claim certification.
2. CRM (Customer Relationship Management - from the business's perspective):
• This is less directly useful for you as a consumer. However, if you are contacting a larger agency, a lack of organised communication (e.g., slow responses, inconsistent information) might be a red flag. Legitimate businesses typically use CRM systems to manage inquiries effectively.
3. FOS (Financial Ombudsman Service):
• The FOS is a resource for after you've been scammed, if the scam involved a regulated financial service (like a bank transfer facilitated by a UK bank). They can't prevent scams but can help resolve disputes with financial institutions.
4. Google Lens (Reverse Image Search): This is your most powerful tool for proactive verification:
• Screenshot the property photos: Take screenshots of the photos used in the listing.
• Perform reverse image searches: Use Google Lens (as described in my previous response) to search for those images.
• Look for matches:
• Multiple websites with the same photos but different listings: This is a strong indicator of a scam. The same property is being advertised in multiple locations with different contact details, which is highly suspicious.
• Matches to stock photos or unrelated websites: This suggests the photos were stolen and the property doesn't exist as advertised.
• Matches to legitimate property listings on other platforms (e.g., reputable estate agent websites): This could indicate the scammer has copied the listing from a legitimate source.

Putting It All Together (Channel 5 Scenario):

If, as shown on Channel 5, you're looking at a holiday let in the UK:

• Start with Google Lens: Immediately perform reverse image searches on the property photos. This is the quickest way to identify potential red flags.
• Check for I-PRAC: If the listing claims I-PRAC certification, verify it.
• Be wary of payment methods: Avoid paying by bank transfer or cryptocurrency unless you are absolutely certain of the legitimacy of the agency. Credit card payments offer greater protection.
• If scammed, report it: Report the scam to Action Fraud (the UK's national reporting centre for fraud and cybercrime) and contact your bank if any financial transactions were involved. Then, if the scam involved a regulated financial service, you might be able to escalate to the FOS.

By combining these methods, you can significantly reduce your risk of falling victim to holiday accommodation scams. Remember, if something seems too good to be true, it probably is.

Source: https://www.channel5.com/show/holiday-scams-don-t-get-caught-out (as shown on ch5, 19 Jan 2025, 7pm) (Available Until: 19 December 2026)

More information:

Chargeback OR Credit Card s75 refund rights - Which? and Citizen Advice

https://www.atol.org/holiday-fraud/

Scams: Don't Get Caught Out (CH5)

Lock Down Your Digital Life: Free Forever Password Management with Bitwarden and Aegis

Are you tired of juggling countless passwords and worrying about cyber threats? It's time to take control of your online security without breaking the bank. This guide will show you how to create an impenetrable digital fortress using two free, powerful tools: Bitwarden and Aegis OTP.

Why Bitwarden and Aegis?

• Bitwarden: This open-source password manager offers unlimited password storage, secure sharing, and cross-platform compatibility. Best of all, it's completely free!
• Aegis OTP: A simple, effective app that generates six-digit one-time passcodes (OTP) for added security. Also free.

Together, they form a formidable duo that can protect your sensitive information from prying eyes.

How it Works:

1. Create a Strong Bitwarden Master Password: This is the key to your digital kingdom. Make it long, complex, and unique.
2. Store All Your Passwords in Bitwarden: From email to banking, every account deserves a strong, unique password. Let Bitwarden generate and store them securely.
3. Enable Two-Factor Authentication (2FA): For an extra layer of protection, use Aegis to generate OTPs for your accounts that support 2FA.
4. Sync Bitwarden Across Devices: Access your passwords effortlessly on your computer, smartphone, and tablet.

Going Premium: When to Consider Paying

While the free versions of Bitwarden and Aegis are excellent, you might consider upgrading to Bitwarden Premium for these additional benefits:

• Advanced Security Features: Password health reports, breach monitoring, and emergency access.
• Enhanced Convenience: Biometric authentication, one-click password filling, and family sharing.

If you decide to pay for Bitwarden Premium, you no longer need Aegis, as Bitwarden's built-in authenticator provides similar functionality.

Tips for Maximum Security:

• Regular Password Audits: Use Bitwarden's features to identify weak or reused passwords.
• Enable Dark Web Monitoring: Stay informed about potential data breaches.
• Keep Your Software Updated: Ensure both Bitwarden and Aegis have the latest security patches.
• Beware of Phishing Attacks: Be cautious of suspicious emails and links.

By combining the power of Bitwarden and Aegis, you can significantly enhance your online security without spending a dime. Take control of your digital life today and enjoy peace of mind knowing your valuable information is protected.

Keywords: Bitwarden, Aegis OTP, password manager, two-factor authentication, online security, data protection, free tools, cyber security.

(GDPR) Visit https://bitwarden.com/pricing/, https://getaegis.app/ (Android only)

[Bitwarden] How I Manage All My Passwords (for FREE!) (video) 👍

Bitwarden Tutorial | The Full Beginners Guide (video)

Bitwarden 101: How to use the Bitwarden Password Manager (video)

Aegis 2FA App (video) 👍

The Best Authenticator Apps for iPhone and Android

Check if your email address is in a data breach > https://haveibeenpwned.com/