• Our new ticketing site is now live! Using either this or the original site (both powered by TrainSplit) helps support the running of the forum with every ticket purchase! Find out more and ask any questions/give us feedback in this thread!

The best way to reply to this possible phishing scenario by TOCs

General Zod

Member
Joined
5 Jan 2008
Messages
576
I'm a while away from being able to apply for a SNR railcard but my mother has one. If i were to regularly buy discounted tickets for her via my online account could this activity trigger an AI enabled red flag resulting in an investigation ? If so what would be the best way to tackle the nefarious and Machiavellian TOC ?
 
Sponsor Post - registered members do not see these adverts; click here to register, or click here to log in
R

RailUK Forums

AlterEgo

Verified Rep - Wingin' It! Paul Lucas
Joined
30 Dec 2008
Messages
24,286
Location
LBK
Use another account or don’t reply to the fishing (not phishing) email.
 

transportphoto

Established Member
Associate Staff
Jobs & Careers
Quizmaster
Joined
21 Jan 2010
Messages
5,176
If it does, a simple explanation that you are buying the tickets on behalf of a railcard holder should suffice.

We typically only see investigations triggered as a result of at least one in person encounter with revenue protection.
 

AlterEgo

Verified Rep - Wingin' It! Paul Lucas
Joined
30 Dec 2008
Messages
24,286
Location
LBK
If it does, a simple explanation that you are buying the tickets on behalf of a railcard holder should suffice.

We typically only see investigations triggered as a result of at least one in person encounter with revenue protection.
WMR are sending out speculative emails without a stop, as have other companies before after being alerted by Trainline. Don’t use a Trainline powered site either; all the low wattage evaders use that site and I’m sure I read the company effectively had to agree to do these speculative audits to show they are making efforts to “reduce fraud”.
 

Tetchytyke

Veteran Member
Joined
12 Sep 2013
Messages
14,882
Location
Isle of Man
We typically only see investigations triggered as a result of at least one in person encounter with revenue protection.
Not always.

Greater Anglia and WMR/LNR are just trawling their way through the data for anything that might potentially look a bit odd. GA's main focus at the minute is people buying tickets using an app when on board the train, their fishing emails are completely based on the data held by the retailer (i.e. Trainline).

It's why GA's emails are so vague; they don't actually know if you've committed an offence, they just hope you'll panic, respond, and drop yourself in it.

If i were to regularly buy discounted tickets for her via my online account could this activity trigger an AI enabled red flag resulting in an investigation ? If so what would be the best way to tackle the nefarious and Machiavellian TOC ?
Very possibly.

Two solutions:
1. Set up a separate account in your mum's name and use that to purchase her tickets; or
2. Just ignore any emails.
 

duffield

Established Member
Joined
31 Jul 2013
Messages
2,220
Location
East Midlands
Another very strong vote for a separate dedicated account, with a dedicated email address. Keeps everything nice and clean, and means there is no real chance of it getting flagged for investigation in a fishing expedition and, perhaps more importantly, no chance of you accidentally applying the senior railcard discount to your own tickets.

Quite number of the problems reported here involve to some degree people buying railcard tickets for other people mixed in with their own purchases.
 

BlueLeanie

Member
Joined
21 Jul 2023
Messages
491
Location
Haddenham
Another very strong vote for a separate dedicated account, with a dedicated email address. Keeps everything nice and clean, and means there is no real chance of it getting flagged for investigation in a fishing expedition and, perhaps more importantly, no chance of you accidentally applying the senior railcard discount to your own tickets.

Quite number of the problems reported here involve to some degree people buying railcard tickets for other people mixed in with their own purchases.

There isn't a problem here. An individual is purchasing a ticket for a more vulnerable family member.

It's not the duty of the honest customer to inconvenience themselves and create workarounds for their perception of a rail company's future analysis.
 

duffield

Established Member
Joined
31 Jul 2013
Messages
2,220
Location
East Midlands
There isn't a problem here. An individual is purchasing a ticket for a more vulnerable family member.

It's not the duty of the honest customer to inconvenience themselves and create workarounds for their perception of a rail company's future analysis.
It's not their *duty*, true. But it will potentially save them a lot of hassle. And in the case (which appears to happen) where, in a hurry, they accidentally buy a ticket for themselves with the senior railcard and don't notice, they will actually save themselves from accidentally committing a criminal offence.

Also it's a very minor inconvenience. Most of us have many online accounts already, one more is hardly significant, and it has the minor benefit that if you need to check either your travel history or that of your relative for any reason (not related to railway investigations), it's quite clear what journeys are yours and which are theirs. It also makes it simpler if it's important to keep payments in order (maybe the relative refunds their travel somehow to the buyer) and it makes it easy to transfer the purchasing of their tickets to another relative or carer if this becomes necessary.

I stand by my advice.
 

Hadders

Veteran Member
Associate Staff
Senior Fares Advisor
Joined
27 Apr 2011
Messages
16,138
I don't think it's necessary to have a separate account.

If the train company were to get in touch then it is very easy to explain what has happened. I've purchased tickets for different people and applied various railcards including Disabled, F&F and Senior) as well as tickets with my own Network Railcard, Annual Gold Card and Two Together Railcards.

I dread to think what a TOC phisning exercise would make of my ticket purchases :lol:
 

Hadders

Veteran Member
Associate Staff
Senior Fares Advisor
Joined
27 Apr 2011
Messages
16,138
Or give her the money to buy the tickets herself
I suspect @General Zod is buying the tickets as they are more familiar with purchasing rail tickets than their mum. I bet mum is then reimbursing @General Zod .

That's how these sort of things tend to work with my mum!
 

eoff

Member
Joined
15 Aug 2020
Messages
594
Location
East Lothian
(had a quick look at ticket transfers...)
The strange thing here is that you can transfer tickets (allowed by NRCOT) but not if a person is identified by means of a ticket/railcard (not sure how) and there is no wording to indicate it is OK for that ticket/railcard to identify the person who is gong to recieve the ticket.
 

Hadders

Veteran Member
Associate Staff
Senior Fares Advisor
Joined
27 Apr 2011
Messages
16,138
(had a quick look at ticket transfers...)
The strange thing here is that you can transfer tickets (allowed by NRCOT) but not if a person is identified by means of a ticket/railcard (not sure how) and there is no wording to indicate it is OK for that ticket/railcard to identify the person who is gong to recieve the ticket.
It is perfectly allowable to purchase a ticket for someone else.

If you’re purchasing a discounted ticket for someone else (eg railcard discounted) then they must possess the appropriate railcard.
 

eoff

Member
Joined
15 Aug 2020
Messages
594
Location
East Lothian
It is perfectly allowable to purchase a ticket for someone else.

If you’re purchasing a discounted ticket for someone else (eg railcard discounted) then they must possess the appropriate railcard.
i know that.

But the NRCOT...

5. Transfer of Tickets
5.1 A Ticket may be transferred by the person who bought that Ticket to another person, but only if:
5.1.1 the Ticket has not been made out in the passenger's name (which includes where the passenger is identified by a designated Railcard, photocard or other identifying means); and


precLudes transfering a ticket to a named person or where they are identified.
I know this is stupid but that is what is written.
 

saismee

Member
Joined
20 Oct 2023
Messages
312
Location
UK
I've purchased tickets for different people and applied various railcards including Disabled, F&F and Senior) as well as tickets with my own Network Railcard, Annual Gold Card and Two Together Railcards.
I would assume it really depends on the journeys and how complex the data analysis is. If you take a consistent journey, and then sometimes buy two tickets with two different railcards, surely that is obviously two travelling together, likely a vulnerable person if one has a senior railcard.

A second account sounds like an unnecessary amount of hassle, you aren't obligated to reply to their emails, you aren't doing anything wrong! They can "suspect" all they want, since they'll have no evidence of wrong-doing (because there isn't any)!

As others have said, just be sure to use the correct railcard when purchasing. I have almost bought a ticket using a senior railcard after searching prices for my mum. That would not be ideal if stopped by revenue protection.
i know that.

But the NRCOT...

5. Transfer of Tickets
5.1 A Ticket may be transferred by the person who bought that Ticket to another person, but only if:
5.1.1 the Ticket has not been made out in the passenger's name (which includes where the passenger is identified by a designated Railcard, photocard or other identifying means); and

precLudes transfering a ticket to a named person or where they are identified.
I know this is stupid but that is what is written.
I don't believe this covers e-tickets bought with railcards. The ticket is not actually marked with a name, and cannot be referenced against the railcard. Day rangers and similar tickets are marked by name, and this rule applies to them.
 

AlterEgo

Verified Rep - Wingin' It! Paul Lucas
Joined
30 Dec 2008
Messages
24,286
Location
LBK
i know that.

But the NRCOT...



precLudes transfering a ticket to a named person or where they are identified.
I know this is stupid but that is what is written.
But tickets aren’t “made out in the passenger’s name”. What sort of tickets bear the passenger’s name that you’re thinking about here?
 

sh24

Member
Joined
28 Sep 2023
Messages
610
Location
London
But tickets aren’t “made out in the passenger’s name”. What sort of tickets bear the passenger’s name that you’re thinking about here?

I've been asked for my name when buying day ranger tickets in the West Midlands. Pretty sure it's then printed onto the ticket.
 

saismee

Member
Joined
20 Oct 2023
Messages
312
Location
UK
I've been asked for my name when buying day ranger tickets in the West Midlands. Pretty sure it's then printed onto the ticket.
It is, but this would need to be bought in-person and not via an app. The other person would need to be present while these types of tickets are printed. Day rangers would be too easy to copy and re-distribute, so this is to prevent that (although identification is uncommon). The wording used on the NRCoT are a little ambiguous because it states:
which includes where the passenger is identified by a designated Railcard
but this presumably (and reasonably) refers to when the passenger uses a railcard as proof that their identity matches the name on the ticket.
 

eoff

Member
Joined
15 Aug 2020
Messages
594
Location
East Lothian
It is, but this would need to be bought in-person and not via an app. The other person would need to be present while these types of tickets are printed. Day rangers would be too easy to copy and re-distribute, so this is to prevent that (although identification is uncommon). The wording used on the NRCoT are a little ambiguous because it states:
"which includes where the passenger is identified by a designated Railcard"

but this presumably (and reasonably) refers to when the passenger uses a railcard as proof that their identity matches the name on the ticket.
Exactly, so the scenario would be a ticket purchase requiring a railcard purchased for someone else who is 'identified' at the point they use the ticket. All fine, but not allowed by the NRCOT wording. Note the (not sure how) in my earlier post, because I'm assuming you can purchase the ticket without the railcard or with a different one from the one that would be used by the passenger.
 
Last edited:

BlueLeanie

Member
Joined
21 Jul 2023
Messages
491
Location
Haddenham
There's no way that it's the intention of the NRCoT to forbid people from buying a ticket on behalf of a vulnerable person.
 

tspaul26

Established Member
Joined
9 Jun 2016
Messages
1,826
precLudes transfering a ticket to a named person or where they are identified.
I know this is stupid but that is what is written.
With respect, it does not say this. It prohibits the transfer of a ticket made out in the passenger’s name to a person who is not that passenger.
Exactly, so the scenario would be a ticket purchase requiring a railcard purchased for someone else who is 'identified' at the point they use the ticket. All fine, but not allowed by the NRCOT wording.
This is incorrect: where a railcard discounted ticket is purchased on behalf of someone else then there is in law no transfer at all between the purchaser and the passenger. This is because of the operation of the general law of agency.
There's no way that it's the intention of the NRCoT to forbid people from buying a ticket on behalf of a vulnerable person.
It is not and does not.
 

Tetchytyke

Veteran Member
Joined
12 Sep 2013
Messages
14,882
Location
Isle of Man
But tickets aren’t “made out in the passenger’s name”. What sort of tickets bear the passenger’s name that you’re thinking about here?
Season tickets are (well, to be exact, they’re tied to a Photocard which is in a passenger’s name).

At least they’ve stopped printing the purchaser’s name on the orange stripe at the bottom of ‘normal’ tickets.
 

Haywain

Veteran Member
Joined
3 Feb 2013
Messages
20,095
What sort of tickets bear the passenger’s name that you’re thinking about here?
Season tickets are issued to a specific person, identified by the photocard.

There's no way that it's the intention of the NRCoT to forbid people from buying a ticket on behalf of a vulnerable person.
Buying a ticket for another person has never been prohibited.
 

AlterEgo

Verified Rep - Wingin' It! Paul Lucas
Joined
30 Dec 2008
Messages
24,286
Location
LBK
Season tickets are (well, to be exact, they’re tied to a Photocard which is in a passenger’s name).

At least they’ve stopped printing the purchaser’s name on the orange stripe at the bottom of ‘normal’ tickets.
Perhaps I am being pedantic but the ticket isn’t made out in the passenger’s name. The Photocard is.
 

The exile

Established Member
Joined
31 Mar 2010
Messages
4,816
Location
Somerset
But tickets aren’t “made out in the passenger’s name”. What sort of tickets bear the passenger’s name that you’re thinking about here?
Day or longer period ones should be (in my experience, day ones usually aren’t). My current months Freedom Teavelpass is , for the first time, endorsed with both my name and photo card number. (Had one or the other before and frequently neither - never both).
 

swing

Member
Joined
25 Oct 2023
Messages
29
Location
North Herts
What sort of tickets bear the passenger’s name that you’re thinking about here?
I've bought an eTicket directly from a TOC before now, and when running the Aztec code through an online eTicket decoder noticed that the eTicket included my surname as the ticket holder name.
 

AlterEgo

Verified Rep - Wingin' It! Paul Lucas
Joined
30 Dec 2008
Messages
24,286
Location
LBK
I've bought an eTicket directly from a TOC before now, and when running the Aztec code through an online eTicket decoder noticed that the eTicket included my surname as the ticket holder name.
That does not mean the ticket is "made out in your name" or that you have to substantiate your identity. Even CCST TOD tickets have my name on them *as the purchaser*, but they aren't made out in my name.
 

swing

Member
Joined
25 Oct 2023
Messages
29
Location
North Herts
That does not mean the ticket is "made out in your name" or that you have to substantiate your identity. Even CCST TOD tickets have my name on them *as the purchaser*, but they aren't made out in my name.
Whilst I agree it shouldn't mean that, I think the decoder showed the surname field as "Traveller Name" (I'll have to see if I can dig out the eTicket again), which implied it was specific
 

Top