Advice regarding SMS and caller ID spoofing

Richard De Vere made this Rhyddid Gwybodaeth request to City of London Police

Automatic anti-spam measures are in place for this older request. Please let us know if a further response is expected or if you are having trouble responding.

Roedd y cais yn llwyddiannus.

Richard De Vere

Dear City of London Police,

As you may be aware, calls and sms messages can be spoofed https://en.m.wikipedia.org/wiki/Caller_I... . Criminals exploit this to target people and commit fraud.

Have City of London Police informed the major banking institutions they work with of this issue?

Please can you provide: chat transcripts, emails and all written communication pertaining to these discussions, if any and share information about the warnings the banking sector may have received.

Yours faithfully,

Richard De Vere

*** Thank you for your email. Please accept this message as acknowledgement that
we have received your email ***

 

COVID-19 UPDATE

UPDATE - Due to the recent government guidance the Information Access Team will
be working from home. Whilst we have access to emails and telephone calls we
appologise if the current situations leads to delays.

 

The City of London Police use a case management system for all disclosure
requests including Freedom of Information. Your case will be logged and an
acknowledgement email including reference number will be sent from this
system. (if you have applied for an FOI on line you will receive a
seperate URN but we will allocate you a new URN when we acknowledge your
request from our system, we will still keep record of you first URN).

 

Freedom of Information

 

If you email relates to Freedom of Information your request will be
considered in accordance with the provisions of the Freedom of Information
Act 2000.  You will receive a response within the statutory timescale of
20 working days as defined by the Act, subject to the information not
being exempt or containing a reference to a third party.  In some
circumstances we may be unable to achieve this deadline.  If this is
likely you will be informed and given a revised time-scale at the earliest
opportunity.

 

We normally provide information free of charge but there may be occasions
when it would be appropriate to charge a fee where our costs are
excessive.  In such cases we will advise you prior to processing your
request.

 

In some cases it may be necessary to transfer your request either in full
or in part to another public authority in order to answer you request as
comprehensively as possible.  Again, you will be informed if this is the
case.

 

Please see our previously released FOIs on our disclosure log;

 

[1]https://www.cityoflondon.police.uk/foi-a...

 

Data Protection

 

If your email relates to advice or a request for information relating to
Family or Civil Court Proceedings, Third Party Data requests, Insurance
requests or advice that falls in line with the Act we will consider your
request under the Data Protection Act 2018. You will receive a response
within an estimated 30 days.

 

Insurance companies part of the Association of British Insurers need to
supply the request on the appropriate appendix form, client’s signature
consent and fee. Please see our website for further details;

 

[2]https://www.cityoflondon.police.uk/about...

 

In some cases we may require payment or further information in order for
us to complete the request. In this case we will contact you and advise
before proceeding with the request.

 

Request for Personal Information (Subject Access)

 

If your request is for personal information under the Rights of Access of
the Data Protection Act 2018 then we will deal with your request in line
with the Act and you will receive your response within 30 working days.
Subject to any redactions of third party data or data that you are
otherwise not entitled to.

 

Please be aware that all requests for personal data must be made in
writing with as much detail as possible in order for us to be able to help
us comply with your request.

Requests must also be accompanied with proof of identification and
address.

 

You can find more information and request form on our website:

 

[3]https://www.cityoflondon.police.uk/about...

 

PNC/DBS

If you require a check to be made against your conviction history (PNC
check) this check is carried out by National Police Chiefs'
Council Criminal Records Office (ACRO). This check may also be referred to
as Police Certificates, Certificates of Good Behaviour, PNC Disclosures or
PNC prints.

The City of London Police are unable to process this type of Subject
Access Request and such requests must be sent directly to ACRO.

[4]http://www.acro.police.uk/subject_access...

Employment

The City of London Police does not provide disclosures for employment
vetting services. If you require a disclosure for UK employment purposes,
please contact Disclosure Scotland on 08706 096 006. Disclosure Scotland
is a government approved agency that provides suitable reports for
employers showing any relevant convictions.

Request for Information Advice

 

All other requests or advice including internal matters will be
acknowledged and we aim to respond to your email within 3 working days.

 

The City of London Police gathers and holds personal information which it
uses for a policing purpose. This includes: Protecting life and property;
Preserving order; Preventing the commission of offences; Bringing
offenders to justice; Any duty or responsibility of the police arising
from common or statute law.

 

Please see our Privacy Notice -
[5]https://www.cityoflondon.police.uk/about...

 

 

Please consider the environment before printing my email

dangos adrannau a ddyfynnir

References

Visible links
1. https://www.cityoflondon.police.uk/foi-a...
2. https://www.cityoflondon.police.uk/about...
3. https://www.cityoflondon.police.uk/about...
4. http://www.acro.police.uk/subject_access...
5. https://www.cityoflondon.police.uk/about...

Ivan Chardakov,

1 Atodiad

Dear Mr De Vere,

I am writing in response to your request for information, received 4th
May.

Yours sincerely,

Information Access Team

City of London Police

Richard De Vere

Dear City of London Police,

Thank you for your quick reply and I do acknowledge barriers would be present, especially regarding ongoing crimes and sharing intelligence.

If I could rephrase the question asked slightly and drop the additional requests I made, the FOI should be easier to answer and avoid me asking for a formal review.

My original question asked:
"Have City of London Police informed the major banking institutions they work with of this issue?
Please can you provide: chat transcripts, emails and all written communication pertaining to these discussions, if any and share information about the warnings the banking sector may have received."

Amended Question:
Have the City of London Police informed banking institutions directly or via UK Finance that SMS communication is vulnerable to attacks such as sender ID spoofing? A yes or No type answer would suffice.

Yours faithfully,

Richard De Vere

Ivan Chardakov,

Hi Richard,

Thank you for your email.

I have consulted with the relevant stakeholders in CoLP's Economic Crime Directorate (ECD) and I can confirm that, yes, the City of London Police have informed banking institutions that SMS communication is vulnerable to attacks including sender ID spoofing.

I have treated this as an amended FOI request rather than an Internal Review as per the subject of your email. If you would like a formal Internal Review of my original decision, please confirm this.

I hope this is helpful.

Kind regards,

Ivan

dangos adrannau a ddyfynnir

Richard De Vere

Dear Ivan Chardakov,

Thank you for taking the time to answer my question. I’m happy with that.

Yours sincerely,

Richard De Vere