Phishing scams reuse fake ESTA sites to target past victims for months
Scammers used a fake US ESTA website to steal personal details from British actor Lisa Riley, who paid £16 for the application.

In Brief
- •Scammers used a fake US ESTA website to steal personal details from British actor Lisa Riley, who paid £16 for the application.
- •Riley has been receiving repeated scam calls and texts for 17 months, often claiming to be from her bank.
- •Nationwide Building Society research shows 15% of people have given personal info to non‑genuine sites, exposing them to future fraud.
- •Criminals may sell or reuse stolen data for follow‑up impersonation scams, sometimes using AI to replicate legitimate sites.
- •US Customs and Border Protection warns applicants to use only the official .gov ESTA site and to report suspected fraud to banks and Report Fraud.
Why It Matters
The persistence of phishing attacks that recycle stolen personal data highlights a growing threat to individuals who have already fallen victim to online fraud. When attackers continue to target the same victims months after the initial breach, the risk of financial loss and identity theft escalates. For the broader economy, such repeated scams strain banking systems and erode public trust in digital services, underscoring the need for stronger verification protocols and consumer education.
Key Details
- Cost Paid for ESTA
- £16
- Duration of Scam Calls
- 17 months
- Percentage of People Affected by Fake Sites
- 15%
- Frequency of Scam Calls
- up to twice a week
- Official ESTA Domain
- .gov
Original Reporting & Sources
VNews is an independent briefing product. Original reporting remains credited to the following publishers:
This brief was synthesized automatically using attributed third-party reporting. VNews is a digital news publication produced under the VContent Group brand and operated by Francis Vincent Sunday in Ghana, independent from the publishers cited above. Read our AI Transparency Policy and Editorial & Corrections Policy.