I’ve had two fake police phone calls in my life. The first: In 2001, while hosting the servers for friendsrenunited.co.uk an officer wanted the personal details of the founders, so I took his details, looked up his stations phone number independently and phoned back, only to be told no officer of that name works at that station. Then, yesterday around 7pm, I missed a phone call from a Detective James Hunt from a valid Kent police number: 01622 690690 Call screening got these details:
“Hello, good evening. Apologies for the latent unannounced call. My name is Detective Constable James Hunt of Medway Police Station in Kent, uh contacting Mr Mike Hardcastle.” I put the number in my contacts so I would see if they called back. I just got a phone call to my mobile from the same number, so I answered it. This time the caller said they were DC Nigel Atkinson, Badge Number: HR55019, email: nigel.atkinson@kentpolice.gov.uk I queried the domain because all police in the UK use .police.uk he said I didn’t understand, so I gave him the extremely abridged version of my career stating “I founded the commercial Internet in 1989 and I have previously run a TLD”, he understood the significance of this and he assured me the domain was correct. I entered it into a web browser and nothing returned, so I entered into WHOIS and it is a valid, but inactive domain. He then went on to explain that they had arrested somebody at Heathrow Airport today who had 14 passports one of which was mine. I asked how come I got a phone call about this yesterday. He was shocked and made multiple incorrect assumptions about this until I clarified that I had call screening and DC James Hunt had phoned me at a similar time yesterday. He then changed his story to say that the person had been arrested yesterday and was calling me today. At this point, I told him that I was 99% certain that this was a scam call and he had 30 seconds to tell me why he was phoning. He continued to talk as if reading from a script. As I counted down, he asked if I was about to hang up the phone on a police officer. I replied, no I’m hanging up the phone on a scammer. What surprised me was that they had my mobile number and name (they called me Mike, not Michael, which is who the phone is registered to if they had obtained the number from the cellular operator), so clearly there has been a data breach. I am reminded of the recent Revolut data breach, so I asked ChatGPT to research it and it turns out it is. I share ChatGPT’s findings for reference:

Replies (39)

Want to listen instead of read the screen? I'll turn it into audio for the thread once the 500 sats bounty is reached. Total can be from one zap or many.
This is foundational due diligence. Verify all authoritative requests out-of-band. This call-and-response pattern is the baseline for resisting social engineering, a threat vector that scales with centralized data aggregation.
If they phone again, which @MBE suggests is likely, I'm going to listen to the full con. Because they have successfully obtained seed phrases from several victims and I want to understand the technique for the ludicrous concept that the police want crypto from you 😂
A.A.Ron's avatar
A.A.Ron 2 weeks ago
I had one a couple years ago where they wanted me a pay a fine over the phone, because officers were on their way to arrest me if they didn't. I asked how many guys, what are they driving and what kind of body armor do they have. Then I said "their blood is on your hands" and hung up.
Scammers can change their caller ID, so a call can appear to come from a government body even when it does not. The number on your screen is an assertion, not a fact, which makes the Kent number shown on your phone weak evidence on its own.
Satsman Says's avatar
Satsman Says 1 week ago
This used to be legal 17 years ago. There was an app I’d use to call my friends from the (won’t say which colour house’s number) all the time. Was always great. Then the laws changed and we can’t do that anymore. But the tech still exists. It hasn’t gon anywhere.
Lots of them. Data suppliers / brokers, trading brokers, holding banks, crypto exchanges, merchant services suppliers.
He probably meant provider. One reason KYC sucks is because firms outsource this to 3rd party providers. You know, companies that specialise around KYC and "data protection". If you ever had to deal with complicance officers, it's a fucking clown show.
I see. I was just asking because I had an account with them and as it happens I closed it not long before that breach. I heard that anyone affected had been contacted and since I haven't I was just wondering. As for scam calls. Didn't take 'em long to adopt AI for their scamming. I think it's only going to get worse.
What I don't understand is how the police is so incredibly bad at tracing these scams. When you think about it, it is downright pathetic that police is warning people about scam calls about police instead of making sure scammers are in jail for life or just shot in the face by scammed old people whose life savings they stole. Life savings for life. Instead... police is warning other people about scams ... HAPPENING.. as if this wasn't their exact job.
The funny thing is, I could easily contact the scammers, but if I phone back on the cloned caller ID, I get the real police who tell you they are busy and to phone the generic 101 number, which then tells you that you are in a queue and may have to phone back 😂
↑