Update - Push Payment Fraud Alert - donation of a Yamaha Baby Grand Piano

3 February 2026

The KCC Counter Fraud Team have been made aware of a fraud incident made against one of the schools within the county.

A partner LA initially circulated this Push Payment Fraud Alert in 2024; however, a further incident has now been reported as recent as January 2026. On this occasion, fraudster(s) contacted a school by email, alleging the piano they wished to donate belonged to their late wife. The details within the email are:

Name: John Corwin

Email: corwinjohn1@gmail.com

The following email addresses have previously been used in the fraud:

It is believed the fraudsters will continue to contact schools and we therefore request this information is shared with local education establishments to raise awareness and ensure they remain vigilant.

Push Payment Fraud Alert issued 12 July 2024:

We have received a further report that a school has been a victim of the Push Payment fraud outlined in our previous alert issued 28 June 2024. The details relating to the fraud have been provided below.

Original email sender name: Elizabeth Jack

Original email address of sender: elizabetjack4@gmail.com

Delivery company name: EasyLink Global Logistics

Delivery company email address: helpmovingmaincf@gmail.com

Account holder name: Julia Brown

Bank name: Barclays Bank plc

Sort code: 20-21-78

Account number: 20050512

Note the email address for EasyLink Global Logistics does not appear to be an email address that would be associated with a commercial organisation. On this occasion, a payment of £450 was made for delivery of the piano.

Push Payment Fraud Alert issued 28 June 2024

We have received a report of Push Payment Fraud, where fraudsters (often impersonating individuals in a position of vulnerability or authority) use social engineering to convince victims to send money. The money is then transferred to a mule account or accounts, where it is extremely challenging to recover.

On this occasion a school received an email from a fraudster impersonating a widow, seeking to donate her deceased husband’s piano. The school accepted the donation and agreed to pay the delivery fee. A further email was received from the purported delivery company attaching an invoice for advance payment. The details are below.

Original email sender name: Janice Lawson

Original email address of sender: janicelawsonstrocks@gmail.com

Delivery company name: Pickfords Movement and Storage

Delivery company email address: pickfordmovement.jpmovingstrage@proton.me

Account holder name:Edesiri Onogho Jebi

Bank name:Revolut Ltd

Sort code: 042909

Account number: 53070607

Please note the fraudster’s use of delivery service name, Pickfords, as it is a legitimate, well-known and recognised removal and storage company. The email address of the legitimate company is also different and ends @pickfords.com.

The school did not make payment and we advise all members to exercise caution if a donation is offered, particularly if it includes a request for advanced payment of delivery charges.

Actions

Ensure you don’t share your passwords, do not use an easily guessed password as fraudsters will do open-source checks to find out information such as social media.

Do not click on links from an unexpected email, even if its from a sender you know.  If in doubt check with the sender by phone or teams first.

Links such as https://sites.google.com to review documents should be treated with suspicion, especially if your school does not normally use this facility.

Whenever you get an email asking for any bank account payment details to be changed, be that staff, contractors, suppliers always check with the contact details you already have with that person or company.

If you notice that a received invoice is different or the payment details are not the same as those on record, check again with the sender that the information is correct.

A phone call is best as if the subjects email or online accounts have been targeted the fraudster may be monitoring them.

Also use a phone number you already have on record and not one that is contained within the email requesting the change, the fraudster will control any phone number they email to you.

Criminals are experts at impersonating people, businesses and the police. They spend hours researching your business for their scams, hoping you will let your guard down for just a moment.

You can also carry out Confirmation of Payee check before making an online payment, if required. Natwest have their Bankline platform, reach out to Schools Finance team or The Education People for assistance.

Remember

Stop: If you receive a request to make an urgent payment, change supplier bank details or provide financial information, take a moment to stop and think.

Challenge: Could it be fake? Verify all payments and supplier details directly with the company or individual on a known phone number or in person first.

Protect: Contact your business’ bank immediately if you think you’ve been scammed and report it to Action Fraud online or by calling 0300 123 2040.

Advice can be found on the Take Five website: