When the British actor Lisa Riley was preparing to travel to the US last year, she applied online for an Esta so she would not need a visa. After finding the site through a Google search she filled in her passport, bank and personal details and waited for the confirmation, which normally takes just under an hour.<\/p>\n
When it failed to arrive, she emailed an address from the site where she had paid and got back a message unlike any she had seen before, with a link to a website that displayed a jumble of words and letters.<\/p>\n
It was then she realised she had been scammed. But that was just the start of her problems, which persist to this day. She has been repeatedly targeted by criminals, receiving text messages and calls many times every week.<\/p>\n
Riley was the victim of a fraud where criminals create websites similar to the legitimate one run by US Customs and Border Protection (CBP). After fooling unsuspecting applicants they pocket a fee and use the personal details of victims for later scams.<\/p>\n
Lisa Riley, pictured with other Emmerdale characters, was scammed on an Esta application and her personal details harvested to sell to other criminals. Photograph: ITV\/Shutterstock<\/p>\n
Riley lost \u00a316 \u2013 the cost of an Esta back then \u2013 but says there has been a huge increase in the number of scam calls and texts she has received in the 17 months since the fraud happened.<\/p>\n
Often the person claims to be from her bank with queries about a money transfer. \u201cCalls are once a week, easy \u2013 sometimes twice a week,\u201d she says. \u201cAnd the texts even more often.\u201d<\/p>\n
Research from Nationwide building society suggests that 15% of people have given personal information to something who later turned out not to be genuine, leaving them open to future frauds.<\/p>\n
\u201cCriminals do sadly retarget people after an initial scam,\u201d says Annya Burskys, head of fraud operations at Nationwide. \u201cThey take the personal information they have gained and either sell it on to other scammers or use them to make follow-up bank impersonation calls<\/a>, texts and emails appear more convincing.\u201d<\/p>\n What it looks like<\/p>\n The fake Esta site that stole Riley\u2019s personal details looked very similar to the official one and showed up high in search results, she says.<\/p>\n \u201cThe webpage was absolutely identical so there was nothing that would remotely make me fearful up until [I realised],\u201d she says.<\/p>\n Criminals retarget people after an initial scam, says Annya Burskys, head of fraud operations at Nationwide. Photograph: Michael Kemp\/Alamy<\/p>\n Criminals can use AI to recreate legitimate government sites and will frequently use key words such as \u201cEsta\u201d, in the domain name to try to portray legitimacy.<\/p>\n A spokesperson for the US CBP says some sites may demand action by the applicant quickly, a common tactic by criminals to try to get people to act without thinking something through.<\/p>\n What to do<\/p>\n Only use the official Esta website, which has a .gov address, or the mobile app.<\/p>\n \u201cApplicants should protect their Esta confirmation number and payment details, retain application records, and review financial statements for unauthorised charges,\u201d says the CBP spokesperson.<\/p>\n Nationwide advises customers not to feel pressured to act. \u2018A genuine call or message from your bank will never ask you to move money, never ask you to share codes.\u2019 Photograph: Liubomyr Vorona\/Alamy<\/p>\n \u201cSuspected fraud should be documented and reported promptly to the applicant\u2019s financial institution and appropriate local government reporting channels.\u201d<\/p>\n