Scammers are poised to exploit the recent cyber attack on Marks & Spencer to trick customers out of their money, consumer watchdog Which? has warned. The high street retailer was forced to suspend online orders in April after hackers targeted its systems.
As M&S continues to recover from the attack, the company expects its online operations to be running "fully" within four weeks. Which? cautioned that criminals frequently capitalise on current events to make their fraudulent schemes appear more credible.
Verification advice for customers
The consumer group advised anyone receiving emails from brands they have accounts with to verify authenticity by logging into their account through a trusted website they have used before. This approach helps avoid clicking on potentially malicious links in suspicious emails.
Lisa Webb, a consumer law expert at Which?, said: "It's only a matter of time before scammers start using the M&S cyber attacks as a way to part people from their hard-earned cash." She noted that whilst M&S has sent legitimate gift cards to some customers, fraudsters are also circulating fake emails offering afternoon tea hampers in exchange for completing surveys.
Warning signs to watch
Webb advised customers to check email addresses carefully, ensuring they end with 'marksandspencer.com' before clicking any links. If doubt remains, she recommended contacting M&S directly to verify the email's legitimacy.
"If you think the email is a scam, don't click on anything and forward it to [email protected] before deleting it," Webb said. She emphasised that anyone who has already provided card details should contact their bank immediately using the number on the back of their card.
(PA/London) Note: This article has been edited with the help of Artificial Intelligence.