Bogus Indian tech support companies like Apturo are cold-calling individuals in English-speaking countries claiming to represent Microsoft and to know that their victims computers are infected with viruses and other problems which they fix remotely for an extortionate fee. This is a fast growing scam.
THIS SCAM was brought to our attention by one of our readers whose 80-year old mother was scammed out of a total of £509.46 for removing viruses from her computer, viruses that the caller claimed to be able to detect remotely at the very start of the call, before he had remote access to her machine.
Here is his account of her experience, an experience that any Google search will show is becoming increasingly common.
* * *
Back in October 2011, my 80-year-old mother received a cold-call from what sounded like a charming Indian gentleman who claimed to be a Microsoft representative who had detected that my mother's computer had a virus problem which he would remove for a fee. My mother trusted what he said because she believed his story about being a representative of Microsoft, and naively followed his instructions to give the cold-caller remote access to her computer to fix the "problem". He went through some processes remotely and then claimed he had removed the virus but had found other viruses, which he subsequently removed. He also said her system was running slow and advised her to get it fixed. He asked her for payment details so that she would be protected in the future, and she foolishly handed over her RBS (Royal Bank of Scotland) credit card details, once again, believing his assertion that he was from Microsoft.
(I personally regularly check her computer to make sure her security software are up-to-date and working properly, and I also conduct regular virus scans on her machine, so it is unlikely her computer was so badly effected. And anyway, he claimed to know about the infections before even having remote access!)
A week later, she received emails from a company called SWREG Inc (sent from firstname.lastname@example.org), outlining six consecutive charges made on her RBS MasterCard. These subsequently showed up on her credit card statement as follows:
|17 Oct 2011||DRI SWREG Inc.||cardquery.com||£8.22|
|17 Oct 2011||DRI SWREG Inc.||cardquery.com||£86.40|
|17 Oct 2011||DRI SWREG Inc.||cardquery.com||£10.50|
|17 Oct 2011||DRI SWREG Inc.||cardquery.com||£171.60|
|17 Oct 2011||DRI SWREG Inc.||cardquery.com||£10.74|
|17 Oct 2011||DRI SWREG Inc.||cardquery.com||£222.00|
She rang me in a panic because she didn't know who SWREG Inc. was and was certainly not aware of authorizing so many charges and for such high amounts.
I urged her to contact the issuing bank of her MasterCard — RBS — and get the charges reversed, which she subsequently did. RBS refunded her £509.46 and she breathed a sigh of relief thinking that that that was the end of the matter. Meanwhile I emailed SWREG on the 25th October 2011:
Thank you for informing my mother of her recent order. Please note this order was cancelled with the credit card company immediately after the sales call as per the distant selling regulations in the UK by my instruction, and the amount has not been charged to the credit card. The service was mis-sold.
Please do not contact my mother again and if you wish to continue correspondence, please deal only with me.
In the meantime, RBS obviously queried SWREG about the charges, and SWREG (surprise surprise) came back to RBS claiming that the charges were indeed legitimate (all six of them) and they give proof of the receipt charges (quite how that can be proof is beyond me). As a consequence, RBS suddenly put back the charges totaling £509.46 onto my mother's credit card on the 30 Jan 2012, and she was basically forced to pay.
I was naturally not happy about RBS's decision to side with SWREG because my parents had never had a late payment in the many decades they had been with this bank. This was when I started a full investigation on the charges and who actually made them.
I first checked my mother's computer and doing detailed virus scans and spyware scans. I could not find anything on the computer, no software had been installed as far as I could see and i could find no trace of what the cold-caller had done a few months earlier. This worried me as others who had fallen for this scam were urging complete reinstallation of the operating system. This is something I am dreading but something which I will have to do at some point in the near future.
Then I checked out the emails/paperwork sent by the credit card company as proof of charge "legitimacy", and I soon realized that SWREG was just the credit card payment company for the actual scammer which was an Indian company called APTURO, which operates from www.apturo.net and www.apturo.com.
Apturo was actually the company behind the scam
I first thought that the scamming company was DRI (Digital River Inc) SWREG because they handle the whole payment process including the claims that the charges were legitimate. But on closer inspection of the paperwork, they turned out to be just the credit card charging company, a company that any Google search seems to suggest have a mixed online reputation, taking payments for some questionable businesses.
So the actual company behind this fraud was not DRI SWREG Inc, but an India-based entity called Apturo. A whois search on its hosted domains, apturo.net and aputro.com, provides no information as they are hiding behind private registration provided by www.privacyprotect.org, something that immediately sets off alarm bells when one is dealing with a commercial organisation.
ASIDE: Privacyprotect.org is well known online for hiding the domain registration details of many online scammers, which any Google search will reveal. Privacyprotect.org itself hides behind a PO Box in Australia. A search online seems to inconclusively link this domain anonymizing service with Directi Internet Solutions Pvt. Ltd., an India-based domain registration company, see legal document: http://www.scribd.com/doc/69157731/Who-owns-privacyprotect-org-Answer-Directi-Internet-Solutions-Pvt-Ltd)
The Apturo website itself is extremely dubious. For example, their disclaimer at http://www.apturo.net/disclaimer.php reads (screen capture 10 Mar 2012):
"The information you find here on apturo.net is not guaranteed to be 100% correct, but the site does strive to bring the most factual information it can find.
The photos and information contained on this site are considered to be in the public domain, as they were found in various places on the Internet. This site in no way wishes to infringe on anyone's copyright. If anyone has found anything that they feel infringes on their rights, we request that they should email us and we guarantee the item will be removed or altered to fit accordingly immediately.
By this, we mean that if anyone wishes for the item to be removed, that is completely fine with us, and we will do so immediately. Please be as detailed as possible when sending email, as to the picture number, the reasons why copyright has been violated, etc. we promise to be quick and efficient in resolving any copyright matter."
So they are basically admitting that their website is a collection of images and information from "various places on the internet", images and information that they admit to copying from elsewhere. I have never seen this sort of disclaimer on any commercial website, and it is another factor showing the dodgy nature of this organisation. They probably need such a disclaimer because they show logos of well-known computer and internet companies on their front page, companies such as Hewlett-Packard, IBM, D-Link, Kaspersky Anti-Virus and Guardian Antivirus, companies that that I cannot find any evidence that they have any connection with. (I will be contacting these companies to prove this point.)
Apturo's terms and conditions (http://www.apturo.net/termscondition.php) are also extremely dubious because they basically green-light credit card charges without receipts (screen capture 10 Mar 2012):
Here are some excerpts:
You authorize the issuer of the credit card to pay any amounts described herein without requiring a signed receipt, and you agree that these charges are to be accepted as authorization to the issuer of the credit card to pay any amounts described herein without requiring a signed receipt, and you agree that these charges are to be accepted as authorization to the issuer of the credit card to pay all such amounts. You authorize Apturo and/or any other company who bills products or services, or acts as billing agent for Apturo to continue to attempt to charge and/or place holds with respect to all sums described herein, or any portion thereof, to your credit card until such amounts are paid in full.
You may not create hyperlinks to any portion of the Apturo Portal, nor any Materials or Software posted therein.
This Agreement and the rights and obligations of the parties under this Agreement and any disputes arising out of or in connection with this Agreement shall be governed in all respects by the laws of the India without regard to conflicts of laws principles that would require the application of the laws of any other jurisdiction.
Note that the emails sent to my mother on the 24th October 2011, a week after the cold-call, were not actually receipts, but were termed "reminders". At no point did she get any official receipt from Apturo for the charges that were made, only an email from SWREG outlining the charges made by Apturo using their payment gateway service.
Also notice the refund policy states:
For subscription based plans, a full refund will be given to the customer within seven days without asking any reason.For subscription based plans, a full refund will be issued if Apturo has not been able to resolve even a single issue for you within the first 15 days of the subscription. If there are one or more resolved issues, the fees for the Subscription Service will not be refundable.
As they send the "reminders" (by email) a full week after the cold-call, they lowering the chance that someone is going to request a refund within the initial 7-day period.
However, the most damning indication for the unsound nature of Apturo is the fact that they are well-known scammers, and my mother was not the first (nor will she be the last) to fall for this scam. Here are some authoritative reviews of the Apturo and similar scam services (just seven examples amongst many that you will find with a Google search on "Apturo scam" and "tech support scams"):
- The following link and quote is from a Scottish community website write up by Angela Haggerty on a notice released by Strathclyde Police against these types of computer fraud, and you will see on the comment underneath the article that Apturo is explicitly cited as one such rogue company.
HUNDREDS of pounds have been lost by residents in the Argyll & Bute area due to a computer scam, Strathclyde Police said.
The scam, which s1Bute first reported in April, involved phone calls to landline telephones from individuals claiming to be from a Microsoft Windows support group. Strathclyde Police said callers had also claimed to be from other companies.
Residents on the Isle of Bute had been targeted, although the scam is now reported to be more widespread.
Community Safety Sergeant Mark Wilson said: "Over the last weekend, Strathclyde Police has received several reports of a fraud being carried out across the whole Argyll & Bute area.
"This takes the format of the public receiving a cold telephone call from an individual claiming to represent Microsoft - or other company such as AOL - and that the individual's computer, or partner/husband/wife, has reported a fault and that they require remote access to solve the problem."
Remote access gives a potential fraudster direct access to a victim's computer, and all of the information on it. This can be done by giving the caller simple details about the computer system.
"After access is given it is explained that the relevant upgrades will cost money at which point bank details or credit card details are obtained and monies taken." Sergeant Wilson added.
The police advised that anyone receiving a suspicious call should hang up immediately. "The people making the calls are very plausible, and we have received reports from every area of Argyll & Bute, and although the majority have taken the appropriate action, there have been several members of the community who have lost several hundreds of pounds."
Sergeant Wilson offered advice to those who suspect they may have fallen victim to the scam: "Contact your bank or credit card company immediately and report the incident. Verify at this time if you need to change any security details, as you may have given away more information to the fraudster than you think.
"Contact your police office to report the incident. If you do this, please keep any e-mails or information you may have."
- Below is a snapshot of an official Microsoft forum (Microsoft Answers) that specifically names Apturo as a scamming company. You will see that Microsoft MVP Ken Blake specifically says that "It is a scam, and one that's becoming more and more common lately.
http://answers.microsoft.com/en-us/windows/forum/windows_other-security/companys-keep-calling-me-saying-they-are-from/bd530102-7520-456f-8efc-b1212e05c36a?msgId=c45b23b1-6001-48a6-a5c1-93bd4a6204ae. Microsoft itself warn people of these sorts of scans saying, "If you receive an unsolicited call from someone claiming to be from Microsoft Tech Support, hang up. We do not make these kinds of calls." You can read Microsoft's advice on these sorts of scams here: www.microsoft.com/en-gb/security/online-privacy/msname.aspx.
- Here is another review site on Apturo and their scamming ways:
You will see that a lot of people have had problems with this company offering bogus services.
- Computer Active, a UK computer magazine, have managed to record a conversation with tech support scammers running an identical fraud: http://www.youtube.com/watch?v=41vbCFXqRy8 — see below. (Apturo is actually a search term that leads to this video.)
- Symantec, the security company, also recorded a conversation with an identical technical support phone scam company to Apturo called Online PC Doctors: http://youtu.be/WhV6rIgyQ-s (see below). This clearly illustrates how these types of scammers escalate the charges by finding more and more nonexistent problems. If someone is particularly gullible (like my mother), they end up extorting multiple charges for the bogus services that they offer. It is particularly interesting that Symantec state that they are not aware of any legitimate tech support companies that cold-call for business.
- Here is a page from ActionFraud for reporting computer crimes like this in the UK, and this sort of scam is already well-known to them: http://www.actionfraud.org.uk/fraud-az-microsoft-frauds. If you are a victim of this scam, please ring ActionFraud and report Apturo.
- And here we have a review of a fraud which is identical in detail to that which was perpetrated on my mother, except a different organisation was the perpetrator. I include it here to show the prevalence of this scam. If you have not heard of it yet, you will certainly hear of it in the future as more and more people fall for scams like this one. See: www.channelpro.co.uk/advice/6135/unstoppable-tech-support-scam
- Here we have a detailed webpage from back in 2009 that outlines just how prevalent these sorts of tech support scams are, and how many different Indian companies are involved: http://www.digitaltoast.co.uk/supportonclick-systemrecure-scam. There are some good links on this page, including a link to an article by Charles Arthur, technology editor of the Guardian newspaper, who wrote in 2010 about a police crackdown on websites offering fake computer support: http://www.guardian.co.uk/technology/2010/jul/19/police-crackdown-phone-scam-computer
- Another person investigating this type of scam is James Wiseman which you can read at: http://www.jameswiseman.com/blog/tag/windows-support-telephone-scam/
- And finally this is another article by technology editor Charles Arthur in the Guardian newspaper that gives an interesting overview of these Indian technical support scams, wondering how the scammers get hold of contact details: http://www.guardian.co.uk/technology/blog/2010/jul/20/phone-calls-india-scams
These are just ten examples of the many that you will find online regarding the Apturo and similar scams. There are actually a host of different companies (all seem to be in Indian), that are perpetrating this scam and variants of this scam. A search online will show that they are an increasing problem in English-speaking countries.
Review and Conclusion
With overseas cold-call telephone scammers, it is very difficult to provide absolute proof of the fraud because one usually does not have enough notice to record the call (although some have managed to record calls — see Youtube clips above). And if the scammers do agree to show call-recording proof of card authorisation, they will only select that tiny part of the call where credit card payment is given, not the part where they are misrepresenting themselves as Microsoft and making ridiculous assertions about knowing that there is a problem with a computer that they have no connection with (before using the remote access software to fix it).
For this reason, it is important to give credit card companies a lot of information as each piece on its own could be considered circumstantial or just a single negative review. But put all the evidence together, and you the sheer number and caliber of negative reviews clearly point to bogus tech support companies like Apturo perpetrating a very lucrative scam.
Here is a very brief review of the information provided:
- This "virus elimination" cold-call scam is well-known in this country and around the world. Trading Standards are well aware of them and they have become a very big problem.
- Apturo is named on multiple internet sites as an entity perpetrating this scam. The shear weight and number of complaints is undeniable, and collectively these reviews cannot be easily dismissed.
- UK police have warned about this scam, as have computer magazines and Symantec. Again the name Apturo is often linked to these warnings.
- Online web searches seem to show that SWREG (owned by Digital River Inc.) has a reputation for taking credit card payments for some dubious organisations (as well as legitimate organisations of course).
- Apturo hides behind anonymity, but is actually an organisation being run out of India.
- Apturo uses blue-chip company logos on their website with a laughable disclaimer for their use. There is no evidence that they have any official link to these companies, and use the logos on their website to bolster their reputation during cold-calls.
- The Apturo cold-caller claimed to be a representative of Microsoft, a standard claim for these types of scam calls. This is misrepresentation.
- An official Microsoft forum has specifically named Apturo as perpetrating this scam.
- The Apturo cold-caller claimed my mother's computer was infected by a dangerous virus before he was even granted remote access by her to "fix" the problem. The problem was invented to try to justify an expensive "fix".
- Apturo charged an extortionate amount of £509.46 for their "services" — the price of a new computer. My mother was not only mis-sold but deceived into paying this extortionate fee for a problem that didn't exist.
- Apturo made SIX consecutive credit card payments all in one day for a total of £509.46, and yet these multiple payments in quick succession did not seem to have set off any alarm bells with RBS card fraud department.
- Apturo provided no receipts or any proof for "services" rendered. All they did was send, 7 days after the cold-call, email "reminders" of "services" rendered a week earlier.
As a general rule, as Symantec say in the video above, anyone who cold-calls customers for technical support is very likely trying to scam you out of money. In fact, NEVER sign up to ANYTHING from a cold-call, no matter how good it might sound. Apturo are just one company out of many (mostly operating out of India) that are running this sort of technical support scam.
* * *
The gentleman who sent us the above review has sent all the documented information showing Apturo was scamming his mother to RBS credit card fraud department on the 10th March 2012, which is basically the same information he sent us which we have reproduced above, and a month later received a letter from RBS dated 11 April 2012 apologizing for their mistake and crediting his mother (again!) the £509.46 she lost. This was a full SIX MONTHS after the initial fraud was perpetrated, but we are happy to see that RBS did the right thing in the end by refunding the money.
There are probably many victims of this fraud who have just not had the time to present to their credit card companies all the evidence, and this is why we are reproducing everything here. If you fall for this or a similar scam, send a printout of this webpage to your credit card company. Together, we can stop companies like Apturo offering technical support as a cover for extortion, misrepresentation and fraud, and dissuade companies such as SWREG Digital River from giving payment facilities to companies such as Apturo.