iSpoof
A subscription website letting users make calls that displayed any caller ID they chose — most often the victim's own bank — and intercept one-time passcodes.
Fraud-as-a-service: ~59,000 users made ~10 million spoofed calls in a year, costing UK victims at least £43M and £100M+ worldwide (Met estimate).
Tejay Fletcher launched iSpoof on 30 November 2020 and sold, for bitcoin, the ability to phone people while displaying the number of their bank, tax office or police force; the service also recorded calls and captured one-time passcodes. About 59,000 criminals used it to make some 10 million calls, and the Met estimated UK losses at £43 million with £100 million or more worldwide. The Met, Europol and US and Dutch police took the site down on 8 November 2022 and arrested Fletcher and 141 others. He was sentenced to 13 years 4 months in May 2023.
Site and servers seized; ~£3.2M in bitcoin subscriptions traced. Fletcher pleaded guilty (April 2023) and was sentenced to 13 years 4 months at Southwark Crown Court (18–19 May 2023); users have been prosecuted in the UK, Netherlands and elsewhere.