Beware of Asda Gift Card Scam Emails - Cyber and Fraud Centre

Cyber criminals are increasingly exploiting trusted high street brands like Asda to lure unsuspecting victims into phishing scams. Action Fraud, the UK’s national fraud and cybercrime reporting centre, has received over 1,700 reports in just two weeks about fake emails purporting to be from the supermarket giant Asda.

How the Scam Works

The scam emails claim the recipient has won a free gift card or prize from Asda. To claim it, they must complete an online survey by clicking on a link within the email. However, these links actually lead to phishing websites designed to steal personal and financial information from victims.

The emails are crafted to appear legitimate, often using Asda’s branding and logo. A recent example reads “Asda Direct is rewarding you with a gift card! Asda is currently giving away Asda shopping Gift Cards! You could be one of the winners. We are giving away cards valued from £50 to, unbelievable £1000.”

*A scam email impersonating Asda – image which.co.uk*

Tactics Used by Scammers

Phishing remains a prevalent and effective tactic as people tend to trust communications appearing to come from reputable companies. Scammers frequently impersonate major brands to lend credibility to their schemes.

These fraudulent emails are usually sent in bulk from compromised email accounts or botnets. They aim to reach as many potential victims as possible in the hope that some will fall for the ruse. The phishing websites are made to look legitimate but exist solely to harvest sensitive data like login credentials and payment details.

How to Protect Yourself

Be wary of unexpected emails claiming you’ve won a prize, especially if you’re asked to share personal information or click on a link.
Check the sender’s email address carefully as it’s often a slight misspelling of the legitimate brand’s email.
Never click on links or attachments in unsolicited emails from unknown senders.
If you suspect an email may be legitimate, contact the company directly through their official website.
Keep your devices and anti-virus software updated to defend against the latest threats.

If You’re a Victim

If you’ve clicked a phishing link and potentially shared sensitive or private data, take the following steps immediately:

Change any compromised passwords across all your accounts and add 2-step-verification for added security.
Monitor your financial statements closely for unauthorised activity and report it to your bank.
Report the phishing attack to the National Cyber Security Centre by forwarding the email to [email protected].
If you’ve lost money to one of these scams or been the victim of fraud, then report the incident to Police Scotland by calling 101.

Phishing affects thousands yearly, but exercising caution with unsolicited communications can protect you from falling victim. Remain vigilant, think before you click, and spread awareness to help combat these pervasive scams.

20.06.24

Threat Intelligence Alerts