NatWest "Vishing" Callback Fraud: £734,000 of Client Money and a Suspended Practising Certificate

What happened

In late April 2015, a sole-practitioner solicitor in Surrey received a call purporting to be from her bank and warning that client funds were at risk. The criminals used a bank-security pretext to persuade her to transfer client money to accounts described as safe. Reporting described the transferred amount as £734,000 in detailed coverage and £750,000 in its opening description. The solicitor alerted police and NatWest; contemporaneous reporting described partial recovery, suspension from working, bankruptcy, and the risk of losing her home. It also reported that clients were made whole through the Solicitors Compensation Scheme. The source does not establish the caller's alias, the exact callback mechanism, or a telecom response to this case.

How it worked

The scheme used a bank-impersonation pretext to warn that client funds were at risk and persuade the solicitor to transfer £734,000 to accounts presented as safe. The source does not establish why the transfers were divided into particular tranches.

The lure and the tell

The lure used a bank-security pretext: the caller said that funds were at risk and directed the solicitor toward accounts presented as safe. The central warning sign is that a genuine bank does not ask a customer to move money to a different account to protect it from fraud.

Outcome

She became suspicious after the transfers and alerted police and NatWest, which BBC reported had recovered nearly £222,000 of the £734,000 at that time; the rest had already been withdrawn. The SRA suspended her practising certificate, her insurer refused the claim, and BBC reported bankruptcy and the risk of losing her home. BBC also reported that clients were covered through the Solicitors Compensation Scheme. Later certificate conditions should be stated only with a current SRA record.

Why it matters

The case illustrates how vishing can weaponize trusted security advice: a caller can direct a victim to call the number on a card, while a landline call-clearing delay undermines that apparent verification. Contemporaneous reporting described partial recovery, bankruptcy, and client compensation through the Solicitors Compensation Scheme. The later regulatory status requires a current SRA record.

Defenses

Never call back a bank-security caller on the same landline immediately. Instead, use an independently sourced number from a card, statement, or official website, and consider a different phone. For firms holding client money, require dual authorization and a cooling-off period for urgent transfers to new or previously unused accounts. Train staff that legitimate banks do not ask customers to move money to a different account to protect it. The SRA told BBC Money Box in 2015 that three to four solicitor practices a week were receiving similar calls.