• Scam Warning: Winter Fuel Payment

    From Colin Macleod@user7@newsgrouper.org.invalid to uk.d-i-y on Sun Oct 5 12:49:15 2025
    From Newsgroup: uk.d-i-y

    I am a pensioner in the UK. I just received a text (SMS) purporting to be
    from the Department of Work and Pensions, inviting me to claim for Winter
    Fuel Payment. The link given to claim is safewintergrant.net/uk, not
    anything in .gov.uk . Looking at the page shows a clever copy of the
    .gov.uk style, saying that they need your contact info and debit/credit
    card details, and with obfuscated Javascript driving it. BEWARE!
    --
    Colin Macleod ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ https://cmacleod.me.uk

    FEED FEED FEED FEED FEED FEED FEED FEED
    GAZA GAZA GAZA GAZA GAZA GAZA GAZA GAZA
    NOW! NOW! NOW! NOW! NOW! NOW! NOW! NOW!
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Alan J. Wylie@alan@wylie.me.uk to uk.d-i-y on Sun Oct 5 14:54:00 2025
    From Newsgroup: uk.d-i-y

    Colin Macleod <user7@newsgrouper.org.invalid> writes:

    I am a pensioner in the UK. I just received a text (SMS) purporting to be from the Department of Work and Pensions, inviting me to claim for Winter Fuel Payment. The link given to claim is safewintergrant.net/uk, not anything in .gov.uk . Looking at the page shows a clever copy of the
    .gov.uk style, saying that they need your contact info and debit/credit
    card details, and with obfuscated Javascript driving it. BEWARE!

    Report it here: https://www.ncsc.gov.uk/section/about-this-website/report-scam-website

    And forward the text message to 7726 https://www.gov.uk/report-suspicious-emails-websites-phishing
    --
    Alan J. Wylie https://www.wylie.me.uk/ mailto:<alan@wylie.me.uk>

    Dance like no-one's watching. / Encrypt like everyone is.
    Security is inversely proportional to convenience
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Colin Macleod@user7@newsgrouper.org.invalid to uk.d-i-y on Sun Oct 5 14:08:25 2025
    From Newsgroup: uk.d-i-y

    "Alan J. Wylie" <alan@wylie.me.uk> posted:

    Colin Macleod <user7@newsgrouper.org.invalid> writes:

    I am a pensioner in the UK. I just received a text (SMS) purporting to be from the Department of Work and Pensions, inviting me to claim for Winter Fuel Payment. The link given to claim is safewintergrant.net/uk, not anything in .gov.uk . Looking at the page shows a clever copy of the .gov.uk style, saying that they need your contact info and debit/credit card details, and with obfuscated Javascript driving it. BEWARE!

    Report it here: https://www.ncsc.gov.uk/section/about-this-website/report-scam-website

    And forward the text message to 7726 https://www.gov.uk/report-suspicious-emails-websites-phishing

    Done, thanks :-)
    --
    Colin Macleod ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ https://cmacleod.me.uk

    FEED FEED FEED FEED FEED FEED FEED FEED
    GAZA GAZA GAZA GAZA GAZA GAZA GAZA GAZA
    NOW! NOW! NOW! NOW! NOW! NOW! NOW! NOW!
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Joe@joe@jretrading.com to uk.d-i-y on Sun Oct 5 15:24:13 2025
    From Newsgroup: uk.d-i-y

    On Sun, 05 Oct 2025 14:54:00 +0100
    "Alan J. Wylie" <alan@wylie.me.uk> wrote:

    Colin Macleod <user7@newsgrouper.org.invalid> writes:

    I am a pensioner in the UK. I just received a text (SMS) purporting
    to be from the Department of Work and Pensions, inviting me to
    claim for Winter Fuel Payment. The link given to claim is safewintergrant.net/uk, not anything in .gov.uk . Looking at the
    page shows a clever copy of the .gov.uk style, saying that they
    need your contact info and debit/credit card details, and with
    obfuscated Javascript driving it. BEWARE!

    Report it here: https://www.ncsc.gov.uk/section/about-this-website/report-scam-website

    And forward the text message to 7726 https://www.gov.uk/report-suspicious-emails-websites-phishing


    Just a small addition: your email client will have a means of showing
    you the entire email as sent, which may include clues to the origin of
    the email which you normally wouldn't see. The means will include the
    word 'source', and will often be a 'Message Source' entry under the
    'View' menu. Copy and paste the entire page displayed and send it or
    paste it.

    An email 'Forward' button will not usually forward any attachments,
    which may be very important, and often contain the actual URL where the
    mail will be sent. Any email addresses in headers are certain to be
    forged.

    There is also an email address for reporting this kind of thing:

    report@phishing.gov.uk
    --
    Joe


    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Colin Macleod@user7@newsgrouper.org.invalid to uk.d-i-y on Sun Oct 5 14:36:06 2025
    From Newsgroup: uk.d-i-y

    Joe <joe@jretrading.com> posted:

    On Sun, 05 Oct 2025 14:54:00 +0100
    "Alan J. Wylie" <alan@wylie.me.uk> wrote:

    Colin Macleod <user7@newsgrouper.org.invalid> writes:

    I am a pensioner in the UK. I just received a text (SMS) purporting
    to be from the Department of Work and Pensions, inviting me to
    claim for Winter Fuel Payment. The link given to claim is safewintergrant.net/uk, not anything in .gov.uk . Looking at the
    page shows a clever copy of the .gov.uk style, saying that they
    need your contact info and debit/credit card details, and with
    obfuscated Javascript driving it. BEWARE!

    Report it here: https://www.ncsc.gov.uk/section/about-this-website/report-scam-website

    And forward the text message to 7726 https://www.gov.uk/report-suspicious-emails-websites-phishing


    Just a small addition: your email client will have a means of showing
    you the entire email as sent, which may include clues to the origin of
    the email which you normally wouldn't see. The means will include the
    word 'source', and will often be a 'Message Source' entry under the
    'View' menu. Copy and paste the entire page displayed and send it or
    paste it.

    Unfortunately SMSs have no such metadata. EfOa
    --
    Colin Macleod ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ https://cmacleod.me.uk

    FEED FEED FEED FEED FEED FEED FEED FEED
    GAZA GAZA GAZA GAZA GAZA GAZA GAZA GAZA
    NOW! NOW! NOW! NOW! NOW! NOW! NOW! NOW!
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Nick Finnigan@nix@genie.co.uk to uk.d-i-y on Sun Oct 5 16:40:35 2025
    From Newsgroup: uk.d-i-y

    On 05/10/2025 15:24, Joe wrote:

    Just a small addition: your email client will have a means of showing
    you the entire email as sent, which may include clues to the origin of
    the email which you normally wouldn't see. The means will include the
    word 'source', and will often be a 'Message Source' entry under the
    'View' menu. Copy and paste the entire page displayed and send it or
    paste it.

    Even Outlook? (Which an employer might insist on using, and also insist
    that you check external emails for suspicious signs).

    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Andy Burns@usenet@andyburns.uk to uk.d-i-y on Sun Oct 5 17:15:03 2025
    From Newsgroup: uk.d-i-y

    Nick Finnigan wrote:

    On 05/10/2025 15:24, Joe wrote:

    Just a small addition: your email client will have a means of showing
    you the entire email as sent, which may include clues to the origin of
    the email which you normally wouldn't see. The means will include the
    word 'source', and will often be a 'Message Source' entry under the
    'View' menu. Copy and paste the entire page displayed and send it or
    paste it.

    -aEven Outlook?
    Double click the message, so that it opens in a separate window, file/properties, then select the contents of the internet properties
    field, copy it and paste it wherever ...


    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Nick Odell@nickodell49@yahoo.ca to uk.d-i-y on Sun Oct 5 17:16:54 2025
    From Newsgroup: uk.d-i-y

    On Sun, 5 Oct 2025 16:40:35 +0100, Nick Finnigan <nix@genie.co.uk>
    wrote:

    On 05/10/2025 15:24, Joe wrote:

    Just a small addition: your email client will have a means of showing
    you the entire email as sent, which may include clues to the origin of
    the email which you normally wouldn't see. The means will include the
    word 'source', and will often be a 'Message Source' entry under the
    'View' menu. Copy and paste the entire page displayed and send it or
    paste it.

    Even Outlook? (Which an employer might insist on using, and also insist
    that you check external emails for suspicious signs).

    On Outlook you can mouseover the email address for the true email
    address of the sender and right-click the email body for the source.
    What troubles me is people who do their email on a tablet - maybe it
    is the same for email on the phone as well, I don't know, but people I
    know who email via a tablet claim there's no way to mouseover and that
    looks very dangerous to me.

    Nick
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From David Wade@dave@g4ugm.invalid to uk.d-i-y on Sun Oct 5 18:19:32 2025
    From Newsgroup: uk.d-i-y

    On 05/10/2025 17:40, Nick Finnigan wrote:
    On 05/10/2025 15:24, Joe wrote:

    Just a small addition: your email client will have a means of showing
    you the entire email as sent, which may include clues to the origin of
    the email which you normally wouldn't see. The means will include the
    word 'source', and will often be a 'Message Source' entry under the
    'View' menu. Copy and paste the entire page displayed and send it or
    paste it.

    -aEven Outlook? (Which an employer might insist on using, and also
    insist that you check external emails for suspicious signs).


    Yes, outlook will show you the entire message source. It will also allow
    you to forward it as an attachment, so preserving the message.

    However isn't this -?report a spam e-mail just there so you "feel"
    someone is checking on these things. In fact they are just ignored?

    Dave
    G4UGM
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Joe@joe@jretrading.com to uk.d-i-y on Sun Oct 5 21:13:30 2025
    From Newsgroup: uk.d-i-y

    On Sun, 5 Oct 2025 18:19:32 +0200
    David Wade <dave@g4ugm.invalid> wrote:
    On 05/10/2025 17:40, Nick Finnigan wrote:
    On 05/10/2025 15:24, Joe wrote:

    Just a small addition: your email client will have a means of
    showing you the entire email as sent, which may include clues to
    the origin of the email which you normally wouldn't see. The means
    will include the word 'source', and will often be a 'Message
    Source' entry under the 'View' menu. Copy and paste the entire
    page displayed and send it or paste it.

    -aEven Outlook? (Which an employer might insist on using, and also
    insist that you check external emails for suspicious signs).


    Yes, outlook will show you the entire message source. It will also
    allow you to forward it as an attachment, so preserving the message.

    However isn't this -?report a spam e-mail just there so you "feel"
    someone is checking on these things. In fact they are just ignored?

    You do receive a 'thank you' email, but of course that may be all that
    happens. This *is* the government, after all.
    --
    Joe
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Indy Jess John@bathwatchdog@OMITTHISgooglemail.com to uk.d-i-y on Mon Oct 6 02:12:39 2025
    From Newsgroup: uk.d-i-y

    On 05/10/2025 13:49, Colin Macleod wrote:
    I am a pensioner in the UK. I just received a text (SMS) purporting to be from the Department of Work and Pensions, inviting me to claim for Winter Fuel Payment. The link given to claim is safewintergrant.net/uk, not anything in .gov.uk . Looking at the page shows a clever copy of the
    .gov.uk style, saying that they need your contact info and debit/credit
    card details, and with obfuscated Javascript driving it. BEWARE!

    For the information of anyone who receives a similar communication by
    text or email - Winter Fuel Payment DOES NOT need to be claimed.

    Anything that suggests otherwise is ALWAYS going to be a scam, the
    recipient should NEVER click on any link in such messages.

    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From alan_m@junk@admac.myzen.co.uk to uk.d-i-y on Mon Oct 6 08:24:29 2025
    From Newsgroup: uk.d-i-y

    On 06/10/2025 02:12, Indy Jess John wrote:
    On 05/10/2025 13:49, Colin Macleod wrote:
    I am a pensioner in the UK. I just received a text (SMS) purporting to be
    from the Department of Work and Pensions, inviting me to claim for Winter
    Fuel Payment.-a The link given to claim is safewintergrant.net/uk, not
    anything in .gov.uk .-a Looking at the page shows a clever copy of the
    .gov.uk style, saying that they need your contact info and debit/credit
    card details, and with obfuscated Javascript driving it.-a BEWARE!

    For the information of anyone who receives a similar communication by
    text or email - Winter Fuel Payment DOES NOT need to be claimed.

    Some people need to claim

    https://www.gov.uk/government/publications/winter-fuel-payment-claim-form

    The majority of people do not have to claim.
    --
    mailto : news {at} admac {dot} myzen {dot} co {dot} uk
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From David Wade@dave@g4ugm.invalid to uk.d-i-y on Mon Oct 6 09:31:37 2025
    From Newsgroup: uk.d-i-y

    On 06/10/2025 03:12, Indy Jess John wrote:
    On 05/10/2025 13:49, Colin Macleod wrote:
    I am a pensioner in the UK. I just received a text (SMS) purporting to be
    from the Department of Work and Pensions, inviting me to claim for Winter
    Fuel Payment.-a The link given to claim is safewintergrant.net/uk, not
    anything in .gov.uk .-a Looking at the page shows a clever copy of the
    .gov.uk style, saying that they need your contact info and debit/credit
    card details, and with obfuscated Javascript driving it.-a BEWARE!

    For the information of anyone who receives a similar communication by
    text or email - Winter Fuel Payment DOES NOT need to be claimed.

    Anything that suggests otherwise is ALWAYS going to be a scam, the
    recipient should NEVER click on any link in such messages.


    That is not totally correct. If you have deferred your pension, or if
    you do not receive a qualifying benefit, but are old enough to qualify
    you need to claim. See the following for details:-

    https://www.gov.uk/winter-fuel-payment/how-to-claim

    .. and if your income is higher than -u35k (I think that is correct) you
    may wish to opt out as that may result in you having to fill in a tax return

    Dave
    G4UGM
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Nick Finnigan@nix@genie.co.uk to uk.d-i-y on Mon Oct 6 09:29:32 2025
    From Newsgroup: uk.d-i-y

    On 05/10/2025 17:15, Andy Burns wrote:
    Nick Finnigan wrote:

    On 05/10/2025 15:24, Joe wrote:

    Just a small addition: your email client will have a means of showing
    you the entire email as sent, which may include clues to the origin of
    the email which you normally wouldn't see. The means will include the
    word 'source', and will often be a 'Message Source' entry under the
    'View' menu. Copy and paste the entire page displayed and send it or
    paste it.

    -a-aEven Outlook?
    Double click the message, so that it opens in a separate window, file/properties, then select the contents of the internet properties field, copy it and paste it wherever ...

    "Internet headers" not "internet properties", so not the entire email.

    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Nick Finnigan@nix@genie.co.uk to uk.d-i-y on Mon Oct 6 09:31:17 2025
    From Newsgroup: uk.d-i-y

    On 05/10/2025 17:16, Nick Odell wrote:
    On Sun, 5 Oct 2025 16:40:35 +0100, Nick Finnigan <nix@genie.co.uk>
    wrote:

    On 05/10/2025 15:24, Joe wrote:

    Just a small addition: your email client will have a means of showing
    you the entire email as sent, which may include clues to the origin of
    the email which you normally wouldn't see. The means will include the
    word 'source', and will often be a 'Message Source' entry under the
    'View' menu. Copy and paste the entire page displayed and send it or
    paste it.

    Even Outlook? (Which an employer might insist on using, and also insist
    that you check external emails for suspicious signs).

    On Outlook you can mouseover the email address for the true email
    address of the sender and right-click the email body for the source.

    But that does not give the entire email (missing headers).

    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Nick Finnigan@nix@genie.co.uk to uk.d-i-y on Mon Oct 6 09:41:00 2025
    From Newsgroup: uk.d-i-y

    On 05/10/2025 17:19, David Wade wrote:

    However isn't this -?report a spam e-mail just there so you "feel" someone is checking on these things. In fact they are just ignored?

    One email was recently sent out including "this is not a phishing attempt and does not need reporting" after a previous one on the same topic with a wide distribution looked highly suspicious.
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Indy Jess John@bathwatchdog@OMITTHISgooglemail.com to uk.d-i-y on Mon Oct 6 10:19:02 2025
    From Newsgroup: uk.d-i-y

    On 06/10/2025 08:31, David Wade wrote:
    On 06/10/2025 03:12, Indy Jess John wrote:
    On 05/10/2025 13:49, Colin Macleod wrote:
    I am a pensioner in the UK. I just received a text (SMS) purporting
    to be
    from the Department of Work and Pensions, inviting me to claim for
    Winter
    Fuel Payment.-a The link given to claim is safewintergrant.net/uk, not
    anything in .gov.uk .-a Looking at the page shows a clever copy of the
    .gov.uk style, saying that they need your contact info and debit/credit
    card details, and with obfuscated Javascript driving it.-a BEWARE!

    For the information of anyone who receives a similar communication by
    text or email - Winter Fuel Payment DOES NOT need to be claimed.

    Anything that suggests otherwise is ALWAYS going to be a scam, the
    recipient should NEVER click on any link in such messages.


    That is not totally correct. If you have deferred your pension, or if
    you do not receive a qualifying benefit, but are old enough to qualify
    you need to claim. See the following for details:-

    https://www.gov.uk/winter-fuel-payment/how-to-claim

    .. and if your income is higher than -u35k (I think that is correct) you
    may wish to opt out as that may result in you having to fill in a tax
    return

    Dave
    G4UGM

    Thanks Dave (and alan_m). That wasn't mentioned in any of the news announcements I heard, and it does restrict the claim obligation to a
    very limited number of recipients. However I suppose it provides the
    hook that the scammers bait their messages with.

    Jim

    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From David Wade@dave@g4ugm.invalid to uk.d-i-y on Mon Oct 6 11:20:43 2025
    From Newsgroup: uk.d-i-y

    On 06/10/2025 10:31, Nick Finnigan wrote:
    On 05/10/2025 17:16, Nick Odell wrote:
    On Sun, 5 Oct 2025 16:40:35 +0100, Nick Finnigan <nix@genie.co.uk>
    wrote:

    On 05/10/2025 15:24, Joe wrote:

    Just a small addition: your email client will have a means of showing
    you the entire email as sent, which may include clues to the origin of >>>> the email which you normally wouldn't see. The means will include the
    word 'source', and will often be a 'Message Source' entry under the
    'View' menu. Copy and paste the entire page displayed and send it or
    paste it.

    -a Even Outlook? (Which an employer might insist on using, and also
    insist
    that you check external emails for suspicious signs).

    On Outlook you can mouseover the email address for the true email
    address of the sender and right-click the email body for the source.

    -aBut that does not give the entire email (missing headers).


    No, to get those depends on which outlook. Details here:-

    <https://support.microsoft.com/en-au/office/view-internet-message-headers-in-outlook-cd039382-dc6e-4264-ac74-c048563d212c#>

    Dave
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Sam Plusnet@not@home.com to uk.d-i-y on Mon Oct 6 20:33:04 2025
    From Newsgroup: uk.d-i-y

    On 06/10/2025 09:41, Nick Finnigan wrote:
    On 05/10/2025 17:19, David Wade wrote:

    However isn't this -?report a spam e-mail just there so you "feel"
    someone is checking on these things. In fact they are just ignored?

    -aOne email was recently sent out including "this is not a phishing
    attempt and does not need reporting" after a previous one on the same
    topic with a wide distribution looked highly suspicious.

    Adding those words would make it look twice as suspicious.
    --
    Sam Plusnet
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Alan J. Wylie@alan@wylie.me.uk to uk.d-i-y on Tue Oct 7 13:44:44 2025
    From Newsgroup: uk.d-i-y

    "Alan J. Wylie" <alan@wylie.me.uk> writes:

    Colin Macleod <user7@newsgrouper.org.invalid> writes:

    I am a pensioner in the UK. I just received a text (SMS) purporting to be
    from the Department of Work and Pensions, inviting me to claim for Winter
    Fuel Payment. The link given to claim is safewintergrant.net/uk, not
    anything in .gov.uk . Looking at the page shows a clever copy of the
    .gov.uk style, saying that they need your contact info and debit/credit
    card details, and with obfuscated Javascript driving it. BEWARE!

    Report it here: https://www.ncsc.gov.uk/section/about-this-website/report-scam-website

    And forward the text message to 7726 https://www.gov.uk/report-suspicious-emails-websites-phishing

    The local Police have just sent me an e-mail:

    | Dear resident, Today, Get Safe Online has launched a new scam
    | detection tool on their website. If you are suspicious of a text,
    | email or message and you want to check if it is legit or not before
    | responding, you can upload it to Ask Silver on the Get Safe Online
    | website and whereupon it will return an indication of whether the
    | communication is safe or a rCyred flagrCO for fraud. This can be accessed
    | here:Ask Silver

    https://www.getsafeonline.org/asksilver/

    | Hi! I'm the Silver Scam Checker.
    |
    | I'm here for those times when you visit a website you're not sure
    | about or get an email, text message, or letter that seems
    | suspicious. Just snap a picture or take a screenshot and send it to me
    | here. I'll analyse it and let you know if I spot anything that seems
    | like a red flag.

    "Powered by AI". Sounds awful. What could possibly go wrong?
    --
    Alan J. Wylie https://www.wylie.me.uk/ mailto:<alan@wylie.me.uk>

    Dance like no-one's watching. / Encrypt like everyone is.
    Security is inversely proportional to convenience
    --- Synchronet 3.21a-Linux NewsLink 1.2