British Gas warns customers of new email scam targeting personal data

British Gas has become a firm favourite for cyber criminals looking to steal data with millions of customers already with the company - and more joining.

However online criminals are known to mimic large companies - such as the energy firm - with emails that have suggested accounts aren't up to date. The email can also state that bills haven't been paid or money is owed - but this isn't the truth.

Whilst many of us are already vigilant, hackers are wising up on how they can trick us, and are now back using a new technique aimed at stealing personal data from British Gas customers. The latest threat - which has been discovered by Andrew Brown, Software Security Expert at Propel Tech - uses an enticing message that suggests users of the supplier can get a quote or a free visit from an engineer to check their boiler.

The email looks official with logos and font all looking as if it's been sent by British Gas. The message even says: "Don't Wait for a Boiler Crisis - Upgrade Now". This means those unlucky enough to be fooled could find themselves handing their details to scammers who will try and steal money via fake phone calls.

Explaining more about the scam, Brown said: "Do not be tempted to click the link in the email offering to book a visit with a British Gas engineer, as it will take you to a portal where you input your details, not so that British Gas can send out an engineer, but so that scammers can contact you via phone and attempt to con you out of your bank details."

Brown also mentions that by hovering your mouse over the sender's address, you can verify the email's origin. If it's a fraudulent email, the address will not match that of British Gas.

British Gas provides guidance on identifying fraudulent emails purporting to be from the company. "If you're uncertain about an email that appears to be from us, refrain from clicking on any links," advises the firm on its website.

You should also be alert if you get a message that begins with 'Dear customer' or 'Hello' and then your email address instead of your name. British Gas warn: "If we email you about your account, we'll include your customer reference number in the email. We'll rarely ask you to update or confirm your personal details."

They add: "Aside from our welcome email which will include your contract or agreement, we don't add attachments to our emails."

The company has provided a list of the internal email addresses they use. If you receive an email and it's NOT from one of the following addresses, it's likely a scam:

• @britishgas.co.uk

• @cd.britishgas.co.uk

• @q.britishgas.co.uk

• @mail.britishgas.co.uk, @centrica.co.uk

• @britishgasevolve.co.uk