Fraudulent redirection of mail

Andrew Potter made this Freedom of Information request to Royal Mail Group Limited

The request was partially successful.

From: Andrew Potter

8 June 2009

Dear Sir or Madam,

On 30 April 2009 I wrote to Wendy Cowlishaw, FOI Coordinator and I
have not received an acknowledgement or a response within the
required timescale.

I reproduce my letter below.

Yours faithfully,

Andrew Potter

Ms Wendy Cowlishaw
Royal Mail freedom of Information Co-ordinator
Dearne House
Cortonwood Drive
Brampton
Barnsley
S73 0UF

Dear Ms Cowlishaw,

Your reference 1-994367733 Ms Anita Byrne

I wish to see any correspondence relating to my complaint about the
way in which a fraudulent attempt to redirect the mail of myself
and that of my wife was handled. I attach a copy of the letter I
wrote to Mr Crozier and the response from Ms Byrne which I do not
believe addresses a key issue. I find some amusement in the fact
that Ms Byrne’s letter dated 25 March was lost in the post unless
it was redirected?

The key issue is that the Redirecting mail to a private address
application form states “We will refuse your application unless you
produce valid ID for each different surname”. You will see from the
copy of the form that the application is made in my name and my
wife’s yet there is only one name on the document checking section
and only two supporting documents. I therefore suspect that Royal
Mail has failed in its duty of care and that the correspondence
relating to this issue will clarify this since a thorough
investigation will explain why the redirect was set up without all
the documentation required.

I also have concerns about the card verification process when an
earlier attempt had taken place over the internet. I do not believe
the fraudster can have used a card registered to my address as I
have had no statements and therefore I can only assume that the
card was registered to the fraudulent address. There is no point in
Royal mail claiming to “take fraud prevention very seriously” if
this is allowed to happen. Only internet applications should be
accepted if the card is registered to the old address. If people
have already moved they should have to make an application at a
Post Office.

I accept that the envelope sent to notify of a redirect is readily
identifiable but if we had been on holiday, for example, the
redirect would have been in place on our return and significant
damage would probably already been suffered.

I am amazed that Royal Mail does not give their staff the right to
question the validity of a signature but accept that it would be
difficult if it matched the signature on the supporting document.

I also accept that there is a balance between cost and security but
it would cost little for Royal Mail to make it a condition for the
customer to provide an original and copy of the proof of identity
provided and the copy could then be attached to the application
form. This would enhance Royal Mails credentials with regard to
fraud prevention since details of such applications could be passed
to relevant bodies. For example, in my case the fraudster has
obtained a Jobcentre account in my name.

I look forward to the receipt of the relevant documents and will be
interested to know what Royal Mail intend to do if it is confirmed
that the mail redirect was established without the required proof
of identity having been provided.

I enclose copies of relevant documents to enable you to verify my
identity.

Link to this

Royal Mail Group Limited

9 June 2009

Dear Mr Potter

Thank you for your request for information received on 8th June 2009, which
we are considering under the Freedom of Information Act. Under the Act you
should expect a reply from us to be sent by 6th July 2009, which is twenty
working days from receipt of your request.

If for any reason we are unable to provide you with a full response within
that time, we will contact you explaining the reasons for this and giving a
revised date by which we will reply.

If in the mean time you have any questions or would like to contact us
about your request, please contact us by telephone 01252 806513 or
alternatively email or write to us at the address below. Please be assured
that we are giving this our attention and will get back to you shortly.

Yours sincerely

On behalf of Colin Young
[Royal Mail Group request email]
Freedom of Information Unit
PO Box 341, ALDERSHOT, GU11 1WW

Royal Mail is a trading name of Royal Mail Group Ltd. Registered in England
and Wales.
Registered number 4138203. Registered office at 148 Old Street, LONDON EC1V
9HQ

show quoted sections

Link to this

From: Andrew Potter

9 June 2009

Dear Mr Young,

Are you saying that Royal Mail never received the letter sent to
Wendy Cowlishaw on 30 April by 1st Class mail?

If so that is very interesting since this is the second time a
piece of mail relating to this issue has been lost in the post.

Yours sincerely,

Andrew Potter

Link to this

From: Andrew Potter

7 July 2009

Dear Sir or Madam,

You should have responded to my FOI request by yesterday (6 July
2009) but have failed to do so and neither have you advised me of a
revised date.

You are therefore in breach of your legal obligation.

Please advise me whether you have any intention of replying.

Yours faithfully,

Andrew Potter

Link to this

Royal Mail Group Limited

7 July 2009


Attachment attachment.txt
0K Download View as HTML


Dear Mr Potter,

Thank you for your email asking for an update on your Freedom of
Information Request.

I can confirm that a hard-copy reply was sent yesterday, within the
required time period.

Yours sincerely

John Cere
[1][Royal Mail Group request email]
Freedom of Information Unit
PO Box 341, ALDERSHOT, GU11 1WW

Royal Mail is a trading name of Royal Mail Group Ltd. Registered in
England and Wales.
Registered number 4138203. Registered office at 148 Old Street, LONDON
EC1V 9HQ

References

Visible links
1. mailto:[Royal Mail Group request email]

Link to this

From: Andrew Potter

7 July 2009

Dear Mr Cere,

Thank you.

Since I never received a response to my request asking you to
confirm whether or not my original letter to Mrs Cowlishaw dated 30
April 2009 was ever received I am forced to conclude that it was
lost in the post. This was in addition to the letter sent to me by
Ms Byrne dated 25 March 2009 which I did not receive.

On the basis that two pieces of correspondence relating to this
issue have been lost in the post please publish your response on
this page having first removed any details relating to my address.

Perhaps your response will help other people who are suffering from
identity fraud.

Yours faithfully,

Andrew Potter

Link to this

From: Andrew Potter

7 July 2009

Dear Mr Cere,

Thank you.

Since I did not get a response to my request for confirmation as to
whether or not you received my letter to Mrs Cowlishaw dated 30
April 2009 I have been forced to conclude it was lost in the post.

This was in addition to the letter sent by Ms Byrne dated 25 March
2009 which I did not receive.

On the basis that two pieces of correspondence relating to this
issue have now been lost please publish your response on this site
having removed details of my address.

Perhaps your response will help other victims of identity fraud.

Yours sincerely,

Andrew Potter

Link to this

From: Andrew Potter

10 July 2009

Dear Sir or Madam,

I am unhappy with the lack of information provided in response to
my FOI request and have sent the following message to The Head of
Information Compliance.

Dear Sirs,

I wish to express my dissatisfaction about the way in which Royal
Mail have dealt with my FOI request for details of your
investigation into the way in which mail redirects were set up for
my wife and myself which exposed us to identity fraud.

On 30 April 2009 I wrote to Wendy Cowlishaw referring to a letter
sent to me from Anita Byrne dealing with my concerns. I wanted to
see correspondence relating to Ms Byrne’s investigations because I
believe Royal Mail failed in it’s duty of care in setting up a mail
redirect without the correct documentation relating to proof of
identity. I assume this letter was lost in the post but Royal Mail
has not had the courtesy to respond to my question about whether
this letter was received.

In responding to my FOI request Royal Mail has not provided any
information relating to the investigations and instead has provided
documents which I already have, some of which are copies of
documents I sent to Royal Mail which have my writing on them. Sadly
you have not had the courtesy to explain why you have not provided
the documents requested.

Please provide copies of the documents relating to the
investigations carried out by Anita Byrne to enable me to establish
whether Royal Mail had followed the correct procedure in
establishing a redirect for two people with only two pieces of
proof of identity.

I also want details of the debit/credit cards used for the web
applications on 23 January 2009 and the amount debited to enable me
to trace the fraudulent transaction.

If you have any doubt about what I am asking for please contact me.

I have wasted enough money in postage sending you copies of past
correspondence so I trust you will be able to find it from your own
records.

Yours faithfully,

Andrew Potter

Link to this

Royal Mail Group Limited

13 July 2009


Attachment FOI090706 Potter FullVersionRedacted.pdf
1.1M Download View as HTML

Attachment attachment.txt
0K Download View as HTML


Copy of Reply sent 06/07/2009

Dear Mr Potter

Freedom of Information Request

I am writing in response to your email dated 8^th June 2009 requesting
copies of correspondence relating to previous redirection applications
made against your address.

Your request for information has now been considered under the terms of
the Freedom of Information Act and I am pleased to attach the relevant
information.

I hope this information meets your requirements. However, if for any
reason you are not satisfied with this response, you do have the right to
request a review. If you wish to do so please set out in writing your
grounds of appeal and send to the Head of Information Compliance, Royal
Mail Group, Company Secretary's Office, 100 Victoria Embankment, LONDON,
EC4Y 0HQ. An internal panel will then review the decision, and you will be
advised of the outcome.

If, having requested an internal review by Royal Mail, you are still not
satisfied with our response you also have a right of appeal to the
Information Commissioner at:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 01625 545 700
www.informationcommissioner.gov.uk

Yours sincerely

John Cere
Freedom of Information Case Officer
[1][Royal Mail Group request email]

References

Visible links
1. mailto:[Royal Mail Group request email]

Link to this

From: Andrew Potter

13 July 2009

Dear Mr Cere,

I can only think that you find it amusing to ignore what I am
asking for and continue to supply me with information I already
have.

Yours sincerely,

Andrew Potter

Link to this

Josh Walker left an annotation (13 July 2009)

Royal Mail have redacted information from their response (such as Mr Potter's address). However, they have not been diligent enough in their redactions.

A CBC is clearly visible, which, once decoded, reveals that Mr Potter's address is:

{a number between 1 and 20 inclusive (but not 19)} Oakley Rise, Wilstead, Bedford, MK45 3FD

Link to this

Andrew Potter left an annotation (14 July 2009)

Thanks Josh

I will take this up with Royal Mail. You will see from the correspondence that I have been unhappy with the way in which Royal Mail have failed to provide me with information relating to the investigations (if any) they made into the way in which a number of mail redirects were set up. I think that RM's process controls are flawed and inadequate. The result of this that fraudsters can set up redirects of mail too easily allowing them to steal an individuals identity an obtain credit cards in that individuals name.

I expect you knew that anyway!

Regards

Andrew

Link to this

Things to do with this request

Anyone:
Royal Mail Group Limited only: