LC Security
LC Security · Scam call intelligence

We answer the calls
scammers make.

Follow one scam call, start to finish.

Scroll
The problem

The scam happens
before the payment.

THE PERSUASION
The call
FIRST RING
The payment
MINUTES LATER
The bank can't see this.
The bank only sees this.
Why it matters
£1m

stolen through fraud in the UK in 2024.

UK Finance, Annual Fraud Report 2025
0%

of frauds against people are ever reported.

The rest goes unheard.

ONS, Nature of fraud and computer misuse, year ending March 2025
How it works

One call. Seven steps.

Each one, broken down below.

Step 01 The numbers

It starts with a phone number.

Old numbers scammers still call.

Leaked call list
    Sold and traded between scam operations
    Step 02 The persona

    Every number gets
    its own persona.

    +44 7••• ••• 214

    Patricia, 78

    Retired primary teacherChatty, a little hard of hearingEnglishBank impersonation calls
    +36 21 ••• ••49

    István, 61

    Runs a two-person electrical firmNervous of anything officialHungarianFake tax office and invoice calls
    +1 656 ••• ••25

    Robert, 74

    Retired heating contractorLoves a long storyUS EnglishTech support and refund calls
    Example personas
    Step 03 The call

    They dial.

    Step 03 The call

    Our AI picks up.

    Step 03 The call

    Inbound only.

    We never place a callNo real customer's callNo money moved
    Scam call centreAuto dialler · today's list
    Illustrative. Numbers masked.
    9:41
    0:00
    Incoming call
    +44 20•• ••• 559
    Patricia’s phone
    Remind Me
    Message
    Decline
    Accept
    Patricia
    0:00
    Live transcript
    Our AI, answering in character
    Step 04 The conversation

    It keeps them talking.

    On the line0:00
    Answers in characterThe person they hoped to reach.
    Lets them leadThey run the full script.
    Complies, slowlySo they explain every step.
    Asks the simple questionWhere exactly? In whose name?
    Never quite ableAlways willing. Gives nothing real.

    Illustrative call from LC's own scenario library. Details masked.

    That was the first 3 minutes.The call ran 38 minutes, until he gave up.
    9:41
    0:00
    Patricia0:00
    Live transcript
    Incoming call · caller ID shows a London bank line
    CallerGood afternoon, this is the fraud team at your bank. We have stopped a suspicious payment on your account.
    Our AIOh dear. I didn't make any payment. What happens now?
    CallerStay calm. But do not discuss this with anyone at your branch. We think staff there are involved.
    Our AIGoodness. All right. So I mustn't ring them, then?
    CallerYou will get a text with a code. That is just our verification code. Read it to me.
    Our AILet me find my phone… four, seven… no, sorry, that's the time. What am I looking for again?
    CallerNow go to secure-help-•••.com so I can see your screen.
    CallerWe must move your balance to a safe account. Put "rent" as the reference.
    Our AII've got a pen now. Where exactly does it go? And whose name is the account in?
    CallerAccount ••••4821, sort code 04-••-••. And ignore the warning screen, it always shows for internal transfers.
    Our AIFour, eight, two… was the last one a one or a seven? My son usually does this bit, so go slowly and I'll write it all down.
    CallerIf anyone else calls, hang up. Ring me on 07••• ••• 093 and ask for "David".
    Indicators 0
    Brand impersonatedRetail bank, fraud team
    Remote access linksecure-help-•••.com
    Mule bank account••••4821 · 04-••-••
    Callback number07••• ••• 093
    Alias used"David"
    Playbook 0
    IsolationKeep away from branch staff
    Passcode trickCode renamed "verification"
    Payment cover storySafe account, reference "rent"
    Warning coachingTold to dismiss the bank's alert
    IllustrativeIndicators 0Playbook 0
    Step 05 The record

    A call is messy.

    Step 05 The record

    So it becomes one clear record.

    Step 05 The record

    Ranked by urgency.

    Transcribe
    Extract
    Redact
    Score
    Link
    cl-0442Illustrative
    Pretends to beYour bank
    WantsYour money moved
    UsesAccountNumberLink
    Personal dataRedacted
    Act now
    Bank accountCrypto walletRemote access link
    Watch
    Phone numberEmail
    Context
    BrandScript line
    Step 06 The intelligence

    Two kinds of intelligence.

    One call

    What they use

    Phone numbers
    Links
    Bank accounts
    Crypto wallets
    Emails
    Brands impersonated

    How they do it

    Fake alarm
    Tell no one
    Exact orders
    Beat security
    Money moves
    Only visible on the call.
    Why the bank misses it

    The scammer gives the answers.
    The bank sees a pass.

    Branch

    On the callDon't tell your branch.
    Bank sees✓✗No concerns raised
    SCAMMED

    Payment reference

    On the callPut "rent".
    Bank sees✓✗Reference: rent
    SCAMMED

    Passcode

    On the callRead me the code.
    Bank sees✓✗Correct code entered
    SCAMMED

    Warning screen

    On the callIgnore the warning.
    Bank sees✓✗Warning accepted
    SCAMMED

    We hear who gave the answers.

    Step 07 Delivered

    Straight to the people
    who stop the money.

    LC Security
    One record per call

    Phone networks

    Block the number

    Fraud software

    Flag the payment

    Banks

    Stop the transfer
    The assembly line

    A scam call goes in. Intelligence comes out.

    LINES Patricia, 78 +44 7••• 214 ONE PER LINE SCAMMER LIVE INDICATORS PLAYBOOK 94 01Number bankRecycled lines we own 02PersonaOne per line 03Inbound callThe scammer dials us 04ConversationKeeps them talking 05ExtractorIndicators and playbook 06Clean and scoreOne clear record 07DispatchInto buyers' systems Next call · same line · repeat
    LC Security

    Scammers explain everything on the call.
    We hear them out.

    Request a briefing