British Gas users on red alert – search your inbox for ‘boiler check’ email

With millions of customers across the UK, it’s not surprising that British Gas has become a firm favourite for cyber crooks looking to attack consumers. Online criminals are known to mimic the energy firm with emails that, in the past, have suggested accounts aren’t up to date, bills haven’t been paid or money is owed.

With many homes wising up to these scams, hackers are now back and using a new technique aimed at stealing personal data from British Gas customers. The latest threat – which has been discovered by Andrew Brown, Software Security Expert at Propel Tech – uses an enticing message that suggests users of the supplier can get a quote or a free visit from an engineer to check their boiler.

The email looks official with logos and font all looking as if it’s been sent by British Gas. “Don’t Wait for a Boiler Crisis – Upgrade Now,” the message exclaims.

Those unlucky enough to be fooled could then find they hand their details to scammers who will try and steal money via fake phone calls.

Explaining more about the scam, Brown said: “Do not be tempted to click the link in the email offering to book a visit with a British Gas engineer, as it will take you to a portal where you input your details, not so that British Gas can send out an engineer, but so that scammers can contact you via phone and attempt to con you out of your bank details.”

Brown also says that if you receive this email you can hover your mouse over the address to see where it really came from. If fake, the message won’t have come from a British Gas address.

British Gas also offers advice about dangerous emails that claim to be from the firm. “If you’re in doubt over any email claiming to be from us, don’t click any links,” the company states on its website.

You should also be alert if you get a message that begins with ‘Dear customer’ or ‘Hello’ and then your email address instead of your name. “If we email you about your account, we’ll include your customer reference number in the email. We’ll rarely ask you to update or confirm your personal details,” British Gas added.

“Aside from our welcome email which will include your contract or agreement, we don’t add attachments to our emails.”

Here’s a list of the internal email addresses British Gas uses, if you get an email and it’s not from an address listed below it’s likely to be a scam.

@britishgas.co.uk, @cd.britishgas.co.uk or @q.britishgas.co.uk, @mail.britishgas.co.uk, @centrica.co.uk, @britishgasevolve.co.uk