A total of £207.8m was lost to bank transfer fraud in the first half of 2020, in line with the same period last year, despite most banks having signed up to a code aimed at protecting people from these types of scams.
Latest figures from banking association UK Finance, show the number of people getting their money back from bank transfer scams has risen following the introduction of the Authorised Push Payment Scams Voluntary Code in May 2019.
Finance providers were able to return £73.1m of bank transfer fraud losses to victims in the first half of this year, up 86% compared with the same period in 2019. Of this, £47.9m was reimbursed under the Code.
However, £73.1m still only represents just over a third of money lost.
Here, Which? looks at the data in more detail, explains how bank transfer fraud works and what you can do if you've fallen victim to a bank transfer scam.
A bank transfer scam, technically referred to as authorised push payment (APP) fraud, occurs when someone is tricked into sending money to a criminal's bank account.
For example, a scammer pretends to be from your bank's fraud team and warns that you need to move your money to a safe account, but it's actually an account the fraudster controls.
If your bank or building society is signed up to the voluntary Code it should reimburse you if you've fallen victim to an APP scam and aren't 'to blame', as the Code puts it.
Banks signed up to the Code also need to take steps to protect you including:
The Code only applies to transfers between UK accounts. Overseas accounts aren't covered.
Since the Code was introduced, the proportion of money being returned to victims by signatory banks has actually fallen.
In the second half of 2019, 41% of money lost was reimbursed.
In the first half of 2020, that figure fell to 38%.
Both numbers are too low, given that the Payment Services Regulator stated back in August that 'repatriation or reimbursement should occur in the vast majority of APP scam cases assessed under the Code'.
Reimbursement levels were higher for more sophisticated scams in which criminals impersonate other organisations to target their victims. Some 54% of losses were reimbursed for bank and police impersonation scams.
Cases involving losses of more than £10,000 were more likely to lead to reimbursement then cases involving smaller amounts of money.
These figures do not include all money returned to APP fraud victims in all cases, for example in some instances where the customer was found at fault under the Code, but the bank was able to trace and return the original stolen funds.
There's clearly a long-term challenge to ensure consumers are reimbursed and protected from such scams in the first place.
And those are just the challenges faced by customers of signatory banks.
Customers of other banks, which currently aren't required to sign up, have even less protection. The exception is TSB, which since April 2019 says it has reimbursed 100% of 'innocent' victims through its Fraud Refund Guarantee.
The Code's voluntary basis simply isn't working and Which? believes all banks should have to sign up.
The government should also tackle the root cause of many of these scams by adding fraud carried out through online platforms to its regulation of online harms.
If you think you've been scammed, contact your bank and the receiving bank immediately.
The banks may be able stop the transaction going ahead, or recover the money from the fraudster's account.
If that fails, and your bank is a signatory to the Code, you should request to be reimbursed.
And if either your bank or the fraudsters bank is a signatory, you should make formal complaints if you believe either have not carried out their obligations under the code.