What is Domain Squatting and what role does it play in Fraud?

Domain squatting, or cybersquatting, is a growing cyber threat where malicious actors register domain names (websites) that closely resemble well-known sites.

Recently we have seen a number of these pop up attempting to catch members of the public out with a spelling mistake. Malicious threat actors have been creating websites which closely resemble official police sites, a recent example being "bedfordshire.ploice.uk".

These fraudulent websites can trick users into providing sensitive information or downloading harmful software. The consequences can be severe, including identity theft, financial loss, and exposure to malware. These websites can also be used to send emails impersonating the police.

To protect yourself and members of the public from falling victim to domain squatting, here are some tips:

1. Double-Check URLs: Before entering any personal or financial information online, always double-check the website’s URL. Look for subtle misspellings, unusual domain extensions, or anything that seems 'off'. If something doesn’t look right, it could be a fake site.
2. Use Bookmarks: Bookmark your frequently visited websites rather than typing the URL each time. This ensures you’re always going to the correct site and reduces the risk of falling into a squatter’s trap.
3. Look for Security Indicators: Ensure the website you’re visiting uses HTTPS, indicated by a padlock icon in the address bar. While not fool proof, this is a basic sign of a secure website. Try to avoid websites without this protection.
4. Report Suspicious Sites: If you encounter a website that seems to be impersonating your organisation, report it.

Davidsons Forensic Accountants are regularly instructed in fraud and cybercrime matters where individuals lose money. Contact us to discuss your case.