A fraudster who impersonated Royal Mail to send scam text messages to mobile phone users has been sentenced to three years and eight months in prison. Mohammed Faiyaz Iqbal, 43, was convicted in one of the first cases in the UK involving the use of an "SMS blaster," a device designed to bypass telecommunications network security and send messages in bulk.
Iqbal targeted nearby phone users with messages that appeared to be from legitimate organizations, including Royal Mail. A typical message read, "Sorry we missed you as no one was home to sign your parcel." It then directed recipients to a fraudulent website to rearrange delivery and suggested payment might be required. These messages aimed to trick victims into revealing personal and payment details.
The SMS blaster allowed Iqbal to send texts en masse without needing to obtain individual phone numbers, potentially reaching hundreds of people simultaneously in close proximity. The technology acted as a rogue mobile antenna, circumventing standard anti-spam protections.
Authorities became aware of the scam on May 24, 2024, when detectives noticed a high volume of fraudulent text messages originating from the Trafford Centre in Manchester. They stopped Iqbal in his van and conducted a search.
Inside the van, officers discovered multiple mobile phones and the SMS blaster system concealed within purpose-built wooden compartments in the rear. The equipment, which included power sources, Wi-Fi components, and aerials, was active and being used in conjunction with mobile phone applications. Officers searching his van at the Trafford Centre in Manchester found the technology hidden within wooden panels.
Subsequent examination of Iqbal's mobile phones revealed 7,859 compromised payment card details. Further investigations at his home address uncovered additional compromised banking materials and three counterfeit UK driving licenses, which were allegedly used to create impersonation bank accounts for laundering criminal proceeds.
Iqbal pleaded guilty to one count of fraud by false representation, one count of possession of articles for use in fraud, one count of acquiring and possessing criminal property, one count of possession of false identity documents, and one count of unauthorized use of wireless telegraphy apparatus. The investigation and successful prosecution involved collaboration between City of London Police, mobile network operators, the National Cyber Security Centre, and Ofcom.