The Police Service of Northern Ireland has issued a public warning confirming that fraudsters have successfully spoofed the PSNI’s official switchboard phone number to impersonate police officers in calls to members of the public. Victims are being told they are under investigation for financial crime or money laundering, then pressured to purchase gift cards and surrender the card numbers and PINs to the fictitious officers.
How the Fraud Operates
The campaign follows a social engineering script designed to generate urgency and compliance. A caller reaches a resident of Northern Ireland, and the number displayed on the victim’s phone matches the PSNI’s genuine published switchboard number. When victims check the number — a natural protective step — they find it is legitimate. That verification, rather than providing safety, reinforces the fraudster’s credibility.
The Gift Card Payment Trap
Once the false legitimacy is established, the caller introduces a fabricated investigation into the victim’s finances. The victim is told that to resolve the matter or avoid arrest, they must immediately purchase gift cards and provide the codes. Gift cards are the preferred payment mechanism in this class of fraud because the transactions are fast, difficult to reverse, and nearly impossible to trace after the codes are redeemed.
The PSNI has confirmed this script is in active use. Real police officers do not instruct members of the public to purchase gift cards as part of any investigation.
Why Caller ID Verification Fails Here
Caller ID spoofing via VoIP remains technically straightforward in the United Kingdom. The STIR/SHAKEN authentication framework — which binds calling numbers to verified originating carriers — has not been fully deployed across UK telecommunications infrastructure for VoIP-originated calls. Telecom regulators have identified this gap but mandatory implementation has not yet been enforced. Until it is, any caller can present an arbitrary number on a recipient’s display, including the published switchboard number of a national police service.
A Systematic Campaign Against Institutional Trust
The PSNI warning is not an isolated incident. A broader pattern of spoofing campaigns targeting high-trust UK institutions has emerged, with HMRC, the NHS, and major banks all having issued their own warnings about their official numbers being used in fraud campaigns. The consistent thread is that criminal operators are deliberately selecting institutional identities — police, tax authorities, health services, financial institutions — because those identities carry the strongest social compliance pressure.
STIR/SHAKEN and the Authentication Gap
The technical vector underpinning all of these campaigns is the same: the incomplete deployment of call authentication standards in UK telephony. STIR/SHAKEN, which has been more aggressively mandated in the United States, creates a cryptographic attestation that a calling number belongs to the carrier presenting the call. Without that attestation being verified end-to-end on UK VoIP infrastructure, there is no technical barrier to number spoofing at scale. Fraudsters operating this way face low cost, low technical barrier, and high success rates because the fraud exploits trust in a verification mechanism — caller ID — that is simply not reliable.
Protecting Against Police Impersonation Calls
Awareness of the attack model is the most effective protection currently available to residents. If a caller claiming to be a police officer requests any form of immediate payment — including gift cards, wire transfers, or cryptocurrency — the call should be treated as fraudulent regardless of what number is displayed.
Any person who receives such a call should hang up, wait several minutes to clear the line, and then dial the PSNI directly using the number obtained independently from a published directory or official website. The delay matters: in some attacks, fraudsters keep the line open so that a victim who immediately redials appears to reach the same number but is still speaking to the fraud operator.
The gift card payment demand is the definitive indicator in this campaign. No legitimate law enforcement body in Northern Ireland requests gift card payments from members of the public under investigation.
