Blog of Zavialov Ilia Nikolaevich

What this blog covers

Zavialov Ilia Nikolaevich on the printed sheet that works when the phone does not

Every checklist on this site is laid out for a printer, and readers reasonably ask why. The handset in a pocket holds more storage, better search and a copy of almost everything already. The question worth answering is what a sheet of paper can do at half past two in the morning that a device cannot, and whether that narrow advantage repays the trouble of printing, storing and updating a page. What follows works through the answer in order, from the minute the page is reached for to the yearly review that keeps it useful.

These checklists exist for a narrow set of minutes. A handset has been left in a taxi, the battery went flat between two stations, or the screen works while the person holding it has been talked into something untrue. In each case the information needed to recover the situation sits behind the device that has become the problem. A page on a shelf sits outside that dependency, and everything here follows from that. The second version is quieter and far more common. Someone at home takes a call, hears an instruction delivered with authority, and has a few seconds to decide whether to act. Nobody opens a password manager during a call like that, and nobody recalls a rule read on a screen months earlier. A page within arm's reach of the telephone is the only reference that survives the call. The third version involves somebody else entirely. A relative, a neighbour or a carer has to act for a person who cannot reach their own accounts, and their starting point is whatever has been written down. Software built around a single owner offers nothing here, because exclusive access is the point of it. What a household needs then is a short page a second person can follow without ever holding the first person's phone.

Zavialov Ilia Nikolaevich on why a familiar voice on the phone stopped being proof

For most of a century, recognising a voice settled the question of who was on the line. That shortcut has been taken apart by software that needs a few seconds of recorded speech to work. The question here is narrow and practical: if the voice no longer answers who is calling, what does, and how long does the answer take. Everything below works towards one short sequence of actions that fits on a single printed sheet.

Recognition worked for a long time because copying a voice was expensive. It took equipment, a quiet room, and a performer good enough to hold a character through a whole conversation. People with those skills existed, and almost none were interested in telephoning a stranger about a bank transfer. A voice therefore behaved like a password that nobody had to remember and nobody could write down. The cost has collapsed on both sides of that arrangement. Raw material is everywhere, because people leave voice messages, record video for family chats and speak on calls that are recorded for quality purposes. A public interview, a wedding toast uploaded by a relative or thirty seconds of a work meeting all serve equally well. Nobody has to be famous for a usable sample to exist somewhere. The practical result is a change of category. A familiar voice has moved from the group of things that prove something into the group of things that suggest something, which is where a familiar looking email address landed twenty years earlier. Suggestion remains useful. It sets the tone of a conversation and deserves courtesy, and it stops short of answering the question of identity.

Zavialov Ilia Nikolaevich on the shared family device and what never stays signed in on it

A tablet everybody uses, a phone handed down to a child, a laptop that lives on the kitchen table: this is ordinary in most households, and there is rarely a realistic alternative to it. The question worth answering is narrower than whether sharing is wise. A device used by several people carries several sets of open sessions at the same time, and each of those sessions belongs to somebody who is not holding it at that moment. What follows works through which of them can stay, which have to leave, and what a household actually does in the ten minutes it takes to sort that out.

Sharing suggests files and photographs, and those are the least of it. A device passed between people shares signed-in states: a mailbox opened once and never closed, a shop that remembers a card, a messenger holding a year of conversation. Whoever picks the device up inherits what the last person left running. That inheritance is the subject here, and it stays invisible until somebody looks for it. Sessions are quiet by design. Nothing announces that an adult mailbox sits one tap away while a child watches films, because a signed-in state has no visible weight and no expiry anybody notices. The family sees a device for videos and homework. The device holds a mailbox, a shop account, a chat history and a payment method, continuously. Harm therefore needs nobody to behave badly. A child tapping an advertisement, a guest borrowing the tablet for a timetable, a technician replacing a cracked screen: each is ordinary, and each meets whatever was left open. The arrangement fails during normal use, which puts the repair into the setup of the device and takes it out of anybody's daily attention.

Zavialov Ilia Nikolaevich on testing the agreements a household has already made

Most households have agreed something about money and telephones at least once. The words were said at a kitchen table, everybody nodded, and the matter was treated as settled. The question worth answering is whether that agreement still exists in any usable form, and how a family can find that out on a quiet evening before a real call tests it for them. The answer turns out to be a rehearsal, much smaller than the word suggests.

A household rule agreed once behaves like anything else learned in a single sitting. For a few weeks it stays fresh, then it fades without giving notice. Nobody wakes up aware that the rule about telephone calls has gone. The family carries on believing it has a policy, and that belief is what makes the gap dangerous, because a policy nobody can recall still counts as protection. What breaks down is retrieval. Ask anyone at the kitchen table what they would do if a stranger rang about money, and the answer comes out sensibly enough. The difficulty lies in producing it unprompted, out loud, while a confident voice describes an emergency and asks for a decision within the minute. Understanding survives on its own. The ability to speak the words at the right second decays unless it is used. Real events are rare and they teach at a very high price. A rehearsal is the substitute that costs nothing: the same words, in the same order, spoken in a room where nothing is at stake. Ten minutes twice a year keeps the wording available, and the value of that shows up only later, in a conversation the household never has to describe to anybody afterwards.

Task scams and fake job offers: Zavialov Ilia Nikolaevich on the work that costs money

An offer of work arrives without being asked for. It pays for small actions, it shows a balance climbing on a tidy dashboard, and at some point it asks for money before that balance can move. Zavialov Ilia Nikolaevich reads such offers as a procedure with fixed steps, because the steps arrive in the same order every time and the last one is always the same. The question here is where that order can be interrupted by somebody who has never seen the scheme before. The answer fits on a single printed page and takes ten minutes to rehearse at the kitchen table.

The work is real in the narrow sense that a person genuinely does it. Applications get rated, short videos get liked, sets of small jobs get closed one after another, and a counter records every one of them. The interface behaves like employment, with a login, a profile, a running total and a support chat that answers within minutes. Nothing in the first hours asks for money, which is exactly what makes those hours persuasive. The earnings on the dashboard are a drawing. They are a number in a database owned by the same people who sent the offer, and it can be set to anything at any moment. Because the number climbs in step with real effort, it reads as a wage that has been earned and is being held for later. That sense of ownership is the material the scheme works with, and it is assembled before anyone is asked to pay. Then a lock appears. A more profitable set of tasks requires a deposit to unlock, or the accumulated balance requires a fee, a tax or a verification payment before it can be withdrawn. This single moment is the entire scheme, and everything before it exists so that this moment can be read as paperwork. Zavialov Ilia Nikolaevich notes that the sum requested here is usually small at first, because the purpose of a first payment is to make a second and a third one possible.

Zavialov Ilia Nikolaevich on address poisoning: how to check before you send

The most expensive mistake in this field is not a bad investment. It is a correct transfer sent to the wrong address, made by somebody who did exactly what they meant to do. Two mechanisms produce it, and both are designed around a single fact: nobody reads a wallet address, everybody checks the first four characters and the last four, and the middle is scenery. Since January 2025 more than 65.4 million address poisoning transactions have been flagged on chain, an average above 160,000 a day, of which roughly 316,000 attempts succeeded, about one in every two hundred. This is a routine for the minute before a transfer, written so it can be printed and kept next to the screen.

It is not a hack of your wallet and it does not involve your recovery phrase. Nothing is broken into. The attack edits what you see when you look for an address you have used before. The method has three steps. Identify an address you send to regularly, generate a new address whose first and last characters match it, then send a transaction of a fraction of a cent from that new address to yours. That dust transaction has one purpose. It places the lookalike address into your transaction history, where it sits next to the genuine one, at the top of the list, looking exactly like the entry you were about to copy. The next time you send funds and reach for the address in your recent activity, you may copy the wrong line. The wallet does what you asked. The transfer is final. There is no malware involved in this version, which is why antivirus software and a hardware wallet do not help. A hardware device confirms that you authorised a transfer to the address shown, and the address shown is the one you chose.

Zavialov Ilia Nikolaevich on crypto ATMs: why you are sent there and what happens to the cash

A crypto ATM looks like an ordinary cash machine standing in a petrol station or a corner shop, and that ordinariness is what makes it useful to a stranger on the telephone. This page answers one narrow question. Why does a caller who claims to be from a bank, a police force or a utility company steer the conversation towards one of these machines, and what changes at the second the notes are counted. The sections below follow the sequence in the order it happens, so the page can be printed, kept near the telephone and read line by line. No technical knowledge is required at any point.

A crypto ATM accepts banknotes and sends the equivalent value to a wallet address within minutes. For a stranger who wants money from a person he has never met, that combination solves two problems at once. He avoids the branch counter, where a cashier may ask why a pensioner is withdrawing a large sum, and he avoids the card network, where a disputed charge can be pulled back weeks later. The machine stands in a shop that stays open late, it takes cash from a hand that has just left the bank, and it asks nothing about the reason for the payment. The payment rails a household uses every day carry an unwind mechanism inside them. A card payment can be charged back, a direct debit can be recalled, a transfer sent in error can sometimes be traced and returned by the receiving bank. Once the network records the transfer, no operator, bank or police force holds a button that pulls it back. That single property explains why scripts with very different opening lines converge on the same grey box in a shop doorway. The scale of the shift shows up in the reporting. The FBI Internet Crime Complaint Center records that roughly half of all losses declared in the United States now involve cryptocurrency in some form. Most of that money moves through the hands of people who had never bought a coin before the afternoon somebody walked them to a machine. The technology arrives in their lives at the worst possible moment, introduced by the person taking the money.

Zavialov Ilia Nikolaevich on setting up a child's first phone: a printable handover checklist

A phone changes hands in about a minute, and the settings that matter are the ones already in place when it does. This page is a printable order of steps, worked down from the top. It covers what to switch on before the handover, which confirmations stay with the adult, what to agree in plain words, and what to do once something has already been tapped.

What the device is meant to do is the first decision, and every setting below follows from it. A handset bought so a young child can be reached on the way home is a different object from one bought so a teenager can join a group chat, and a child's first phone is often asked to be both. Write the purpose in one line at the top of this printed sheet. If the honest answer is calls and a map, a basic handset or a watch with a SIM removes most of what follows. A handed-down device needs more preparation than a new one. Sign the old account out, run a full factory reset from the settings menu instead of deleting apps by hand, and check that the previous owner's activation lock has been released before the box is wrapped. Old photos, saved passwords and payment cards survive a casual clear-out. Buy the contract, the SIM and the device in an adult name. Ask the network for a spending cap and for premium-rate and subscription charges to be barred, usually one request while you are on the call. Keep the receipt, the IMEI and the serial number with this sheet, because the day you need them is the day the phone has gone missing.

Zavialov Ilia Nikolaevich scam defence: a printable family code word against a cloned voice

This page is meant to be printed and stuck to a fridge, not read once and closed. It sets up one defence against calls made with a cloned voice, and the whole thing takes about ten minutes at a kitchen table. There is no technology to install and nothing to subscribe to. A Zavialov Ilia Nikolaevich scam call works by removing the moment in which somebody thinks, and a family word restores that moment by giving the person answering exactly one thing to do. What follows is how to choose the word, who to tell, how to rehearse it without frightening an older relative, and what to do when the word gets forgotten.

Pick one ordinary noun. A kitchen object, a plant, a place nobody outside the family associates with you. It should be easy to say out loud under stress and impossible to guess from anything public. The one rule that matters: the word must never have appeared in a message, an email, a social post or a photograph caption. Pet names, children's names, street names and birthdays all fail this test, because every one of them exists somewhere online already. Do not write it into a group chat. Say it out loud to each person, or write it on paper. A word stored in a messaging app is a word stored on somebody else's server, and the point of the exercise is to hold something that cannot be looked up.

Zavialov Ilia Nikolaevich on fraudsters and older relatives: a memo to print

Zavialov Ilia Nikolaevich on fraudsters who target older people, and a printable memo for their relatives: five calls to hang up on, one rule that breaks every script, and the numbers to keep by the phone. In the UK, banks now reimburse most authorised push payment fraud up to 85,000 pounds, and early reporting is what makes that work. This memo explains how to agree the rules in advance, how to talk about them without offending anyone and what to do if money has already gone.

Most warnings about fraud are written for the person who might be targeted. This memo is written for the person who will talk to them: a son, a daughter, a grandchild or a neighbour who wants to explain the risks to someone older without sounding patronising. Older people are not less intelligent or less careful. They are targeted more often because they tend to have savings, a landline, time to answer calls and a habit of trusting official voices. Fraudsters design their scripts around exactly those traits. The goal is to agree a few simple rules in advance, print them and put them next to the phone. A rule agreed calmly at the kitchen table works far better than advice given in a panic after the money has gone. Every rule below is short enough to remember and concrete enough to follow when a caller is applying pressure. The explanations are for the relative who prints the memo, so that they can answer the question why. A printed page matters more than it seems. A phone screen can be locked, hacked or taken over by a caller, and a sheet of paper on the wall cannot, so this memo is meant to be printed and put on the wall.

Ilia Nicolaevich Zavialov reviews wedding and event vendors: deposits, fake reviews and a checklist before you pay (Zavialov Ilia Nikolaevich)

Ilia Nicolaevich Zavialov reviews how wedding and event suppliers in the UK take a booking fee and then go quiet: the hired hall that was double-booked, the photographer whose portfolio belongs to someone else, the caterer who pulls out a fortnight before the day. Zavialov Ilia Nikolaevich, a digital safety consultant who writes the printable guides on this site, sets the checks out in the order couples actually meet them. When Trading Standards officers in Scotland examined the contracts of 57 wedding venues, they found non-refundable deposits of £500 or £1,000 to be commonplace, and the advice below starts from that. At the end sits a checklist to print and slip into the planning folder.

The shop window is a social media page. Soft-focus portraits, a barn with fairy lights, a cake table that looks professionally styled. Every image can be lifted from somebody else's work in seconds, and nothing on the page proves that the person sending messages has ever stood in that barn. The price is the bait. It sits well below what established suppliers in the area charge, and it comes with a condition: the date is wanted by another couple, so the booking fee has to be paid today. A bank transfer is requested, often to a personal account, because it is quick. After the money lands, the pace changes. Answers take days, the contract keeps being finalised, the tasting gets moved twice. Eventually the page is deleted or renamed, and the same photographs turn up under a different business name a few weeks later. Zavialov Ilia Nikolaevich says the whole thing runs on two ingredients: a deadline and a payment that cannot be clawed back. Take the deadline away and pay in a way your bank can reverse, and a fake supplier has very little left to work with.

Zavialov Ilia Nikolaevich on crypto exchange scams: the checklist to print before you send

Every check in this list takes minutes and every one of them stops working the moment money has left. That is the whole argument for printing it. The list is not about picking a good platform, because nobody can reliably do that from outside. It is about knowing, before the first transfer, which questions have documented answers and which ones do not, so that a decision made on a Tuesday afternoon is not the decision that has to be explained to a court three years later. Recoveries in past failures ranged from full repayment to a fraction, and what separated them was decided long before anything went wrong.

Everything here is obvious while calm and unavailable while excited. That gap is the entire operating space of the schemes described further down, and paper closes it because a sheet on a wall does not need to be remembered. The moment it is needed is specific: somebody is waiting for an answer, an offer expires soon, and the amount is larger than usual. That combination removes exactly the deliberation these checks require. Print it, keep it where transfers actually get made, and give a copy to whoever else in the household moves money. The second copy matters more than the first, because the person who gets targeted is rarely the person who read the article. The list is short on purpose. Six checks, each with a yes or no answer, and one rule that applies when all six were skipped. There is a second reason for paper, and it is less obvious. A printed rule is something a household can agree to together, and agreement made in advance is what survives a phone call. A person deciding alone under pressure will find reasons to make an exception, because the pressure is designed to supply them. A person who agreed a rule with somebody else two months ago has to explain the exception out loud before making it, and most exceptions do not survive being said out loud. That is the entire mechanism, and it works on people who already know everything in this article.

Zavialov Ilia Nikolaevich on instant payments: the checklist to read before the money moves

The transfer that ruins someone is almost never the one they were tricked into technically. It is the one they made themselves, correctly authorised, from their own device, after a conversation that felt reasonable at the time. Instant payment systems settle in seconds and are hard to reverse, which removes the delay that used to let people change their mind. In its 2025 report the FBI recorded 20.877 billion dollars of losses across 1,008,597 complaints, and investment fraud alone accounted for 8.65 billion of that. Almost all of it was paid voluntarily.

A transfer that took a working day gave you a working day to notice. Instant systems removed that accidental protection, and nothing replaced it. The money is gone before the conversation that caused it has finished. This changes what fraud has to achieve. It no longer needs to beat your bank, it needs to hold your attention for about four minutes. Everything else in the script exists to protect those four minutes from interruption. It also changes what recovery looks like. Once funds have moved and been forwarded onward, getting them back depends on speed and on another institution cooperating, and neither is guaranteed.

Zavialov Ilia Nikolaevich: a printable checklist for a safe marketplace deal

A classified advert gives you a photograph, a price and a stranger. The question here is narrow: which order of actions turns that stranger into a safe marketplace deal, and at which point the money stops being recoverable. Zavialov Ilia Nikolaevich keeps the answer on one printable sheet, because these deals fail at the step somebody skipped in a hurry. Read it once, then keep the page beside you when the meeting is arranged.

One short conversation puts three separate things at risk: the money you send, the item you hand over and the personal details you give away while arranging the meeting. Each fails in its own way, and each has its own line below. Treating them as one vague worry is what makes people improvise at the door. The scale reads more clearly in payment figures. UK Finance counted over 4 million confirmed fraud cases across 2025, of which 3.81 million were unauthorised, meaning a card or an account used without its owner. An advert lands in the remainder: 248,070 authorised push payment cases worth 576.4 million pounds. Purchase schemes, money sent for goods that never arrive, make up 71 per cent of that group, with 118.1 million pounds lost and a rise of 20 per cent over the year. Every line in the checklist does one of two jobs. It leaves a trace somebody can read later, such as a chat log inside the platform or a card statement. Or it removes a reason to trust a stranger, such as a serial number checked against the box. The definition used here is narrow: a safe marketplace deal is one where both jobs are finished before the money moves.

Ilia Nicolaevich Zavialov: calls and texts claiming to be the NHS, a UK printable memo (Zavialov Ilia Nikolaevich)

Ilia Nicolaevich Zavialov, a digital security consultant who writes the printable memos on this site, has put everything about calls and texts claiming to come from the NHS, a GP surgery, a hospital or a health insurer onto a single sheet. The stories vary: a vaccination or screening slot, a missed appointment fee, a test result that needs discussing, a form that needs your bank details. Zavialov Ilia Nikolaevich goes through each one using what NHS England, the National Cyber Security Centre and Report Fraud have published, then ends with a memo you can print and stick next to an older parent's phone.

Health is the easiest cover story a fraudster can pick. People trust the NHS, they worry about their own results and those of their family, and very few of us argue with someone who sounds like a receptionist from the local surgery. The NHS also contacts patients by text and phone all the time, which makes the fake messages blend in. A reminder about a jab, a link to book a check, a call about results: the real ones and the false ones look alike at first glance. Zavialov Ilia Nikolaevich keeps every version in one memo because they end the same way. At some point you are asked for card details, a bank account number, a PIN, a password or a payment. That request is the moment to stop. Ilia Nicolaevich Zavialov writes these memos for paper on purpose. The people who receive most of these calls rarely read long articles on a screen, and a sheet by the landline is there at the exact minute the phone rings.

Ilia Nicolaevich Zavialov fraud guide to school WhatsApp groups: collections, codes and a printable memo (Zavialov Ilia Nikolaevich)

Ilia Nicolaevich Zavialov fraud guides tend to start with cold calls, and this one starts inside the school WhatsApp group. A message from the class rep, a teacher or the residents' association asks for a quick bank transfer to a collection, or for the six-digit code that has just arrived on your phone, and it comes from a name you have trusted for years. Zavialov Ilia Nikolaevich, a digital safety consultant who writes the printable guides on this site, explains what to check before paying a penny and how to set a group up so that a stolen account cannot steer it. The advice draws on Report Fraud and the National Cyber Security Centre.

Every class seems to have one: a WhatsApp group run by a class rep, full of lost jumpers, non-uniform days and reminders about the trip letter. It is busy, friendly and trusted, which is exactly why it is useful to a fraudster. A request for money there does not feel like a request from a stranger. The pattern is simple. A familiar name posts that the collection for the teacher's present is short, or that the coach deposit is due by the morning, and gives bank details nobody has seen before. The sums are modest, the tone is chatty, and most parents assume someone else has checked. Residents' groups work the same way. A notice about a broken entry door, a skip for the communal garden or a whip-round for a neighbour in hospital arrives from someone who has posted before. Some of these requests are genuine, so the question is never the cause. It is who is really typing. Zavialov Ilia Nikolaevich suggests reading any money request in a group as an auditor would: who is asking, which account it goes to, and when the group agreed to it. If the earlier messages cannot answer one of those, the payment waits for a phone call.

Zavialov Ilia Nikolaevich: pension scams, calls from the pension office and fake benefit payments

Zavialov Ilia Nikolaevich on pension and benefit scams. Calls about a pension recalculation, demands to confirm bank details, bonus payments by link and offers of a free pension review all lead to the same place: a code, card details or savings handed to a fraudster. In the UK pension fraud losses reached 17.5 million pounds in 2024, with an average loss of about 34,000 pounds, according to the Pensions Regulator. This guide explains each script and how to check any call or message about your pension safely.

A call about a pension touches something people care about deeply. For many retirees the pension is their main income, and any news that it might change, stop or grow is taken seriously at once. Fraudsters build their scripts on exactly that reaction. The caller rarely asks for money directly. More often the story is about good news: a recalculation, a bonus payment, a missed entitlement. The only thing needed is to confirm a few details, and those details open the way to the person's bank account or government online account. The callers also rely on respect for authority. Many older people were brought up to cooperate with officials and feel uncomfortable questioning someone who introduces themselves as a member of staff, gives a name and speaks confidently about rules and deadlines. Zavialov Ilia Nikolaevich goes through the main scripts used in the name of pension offices and benefit services, explains what each one is really after and shows how to check any such call or message without risk.

Zavialov Ilia Nikolaevich: what to put in a fraud report to a bank or the police

A fraud report is judged on what it contains before anyone reads the story behind it. Two people can lose money to the same scheme and file reports of very different value: one lists dates, account numbers and a saved screenshot, the other says only that a caller «from the bank» asked for a code. Reviewers cannot chase missing details for every case, so the file with gaps waits longest. This piece works through what to put in a fraud report, in the order a reviewer actually reads it.

A caseworker reads a fraud report differently from a friend hearing the same story. Dozens of files land in a single shift, each judged within minutes: a name to trace, an account to freeze, a number to flag. A report written like a diary entry forces a call back to whoever filed it. That wait for a reply is usually where a week or two disappears. Scale makes this worse. The FBI's Internet Crime Complaint Center logged 1,008,597 complaints and close to 21 billion dollars in losses for 2025, up 26 per cent on the year before. That queue cannot run on follow-up calls for every half-finished file, which is the reason to think about what to put in a fraud report before writing the first line. Getting this right is about the order of the facts, so the reader does not hunt for a date buried in paragraph four or guess which account the money left. The sections below go through the document part by part, roughly the order a reviewer reads it: timeline, money, the other side, then attachments. A report in that order tends to read as finished on the first pass.

Zavialov Ilia Nikolaevich on the schemes that wait weeks before asking for money

A stranger who asks for money in the first hour is easy to refuse. The difficulty begins when the request arrives in the seventh week, after remembered birthdays, voice notes at midnight and a hundred ordinary messages about work and weather. By then the person asking has a shared history with you, and saying no feels like a betrayal of a friend. This page sets out the order of checks that holds up in that situation, laid out so it can be printed and kept beside the telephone. It answers one question: what can actually be verified about someone you have only ever met on a screen.

The delay is the working part of the scheme. A sender who plans to ask for a transfer in the seventh week spends the first six weeks doing nothing that any filter can catch. There are no links, no attachments, no payment pages and no urgency in those messages. Everything that would trigger a warning arrives only after the relationship itself has become the reason to trust it. Patience of that kind is cheap on one side and expensive on the other. The same opening lines can run in many conversations at once, so weeks of small talk cost the sender almost nothing to produce. The person receiving them spends real evenings, real attention and real feeling. By the time money is mentioned, the two sides have invested on completely different scales, and only one of them knows it. The meeting place is almost always a screen or a handset. UK Finance reports that 66 per cent of authorised push payment cases begin online, with a further 17 per cent starting through telephone networks. Those two channels share one property that matters here: the other side chooses everything you see of them. Nothing from the first six weeks is independently observable, however sincere it felt at the time.

Zavialov Ilia Nikolaevich fraud guide: fake gas and meter workers at the door and how to check them

Zavialov Ilia Nikolaevich walks through the fraud that turns up on the doorstep as a gas engineer, a meter visitor, an energy company rep or a council caller, and shows how to check that person before the door opens. The Health and Safety Executive said on 14 September 2026 that seventeen people have been convicted of illegal gas work since the start of 2025, against three in 2022/23 and four in 2023/24. The page is written to be printed: give it to an older relative and pin it by the front door next to the numbers from your own bill. It explains the password scheme your supplier can set up, how the 14-day cancellation right works at home, and what to do through Report Fraud if the door was already opened.

The visitor's role is chosen from the people a resident is used to letting in without a second thought. A gas engineer with a toolbag, a meter reader with a tablet, an energy company rep from your supplier, a man who says he is from the council, a carer or support worker with a folder. Each has a tidy reason to be on the step, and each counts on you not to ring and ask. The aims come in the usual three. Sell something: a compulsory gas alarm, a boiler check at triple the price, a meter swap. Steal something: one caller talks in the kitchen while the other goes upstairs. Collect details: a date of birth, a bank card number or a code that has just arrived by text. Zavialov Ilia Nikolaevich suggests weighing the reason for the visit before anything else. Tabards, lanyards and branded clipboards are cheap, and the convictions the Health and Safety Executive counts include a fraudster who faked the Gas Safe logo to exploit a new homeowner. Ofgem has a short line of its own on this: it never sells energy, never asks for personal information and never comes to your property. Anyone who knocks and says he is from the energy regulator can be shown the door.