Rail Operators in North Yorkshire Issue Warning About Fraudulent Social Media Accounts

Railway operators Northern and London North Eastern Railway (LNER) have issued urgent warnings to passengers about scam social media accounts that attempt to steal personal information, particularly during travel disruptions.

The fraudsters target frustrated travelers by offering to resolve travel issues or process refunds, then requesting sensitive personal information through direct messages. These scam operations have become increasingly sophisticated, often creating convincing impersonations of official railway accounts.

Northern, which operates local rail services throughout North Yorkshire and the North of England, alerted customers via its official Twitter (X) account @northernassist about the growing threat. “We are seeing a number of fake accounts being created and asking for personal details such as telephone numbers, and invitations to WhatsApp or to download apps,” the company warned.

The operator emphasized that @northernassist is their only official account for customer service across the North of England region. They urged passengers to verify account authenticity before sharing any information and to report suspicious accounts directly to them.

“We are reporting these fake accounts once found. But ask that if you do see any you either report them or let us know,” Northern stated in their advisory. The company also directed customers to their official website for legitimate contact information and additional cybersecurity guidance.

Meanwhile, LNER, which operates high-speed services on the East Coast Main Line connecting London, York, Newcastle and Edinburgh, issued a similar warning to its passengers. “Please do not share your personal details with any account other than our official @LNER account,” the company cautioned, adding that passengers should verify authenticity by looking for the gold verification checkmark next to their name on social media platforms.

This type of scam represents a growing trend in the transportation sector, where fraudsters exploit service disruptions—such as delays, cancellations, or industrial action—to target vulnerable passengers seeking assistance or compensation. Cybersecurity experts note that railway customers are particularly susceptible during these moments of frustration when they’re actively seeking help.

Rail industry observers point out that these scams have evolved beyond simple phishing attempts. Modern railway scammers often create convincing customer service personas, sometimes maintaining conversations over extended periods to build trust before requesting personal information, payment details, or encouraging victims to download malicious applications.

The UK rail industry has faced numerous disruptions in recent years due to infrastructure upgrades, weather events, and industrial action, creating ample opportunities for scammers to target passengers. Both Northern and LNER serve critical transportation corridors in North Yorkshire, with York functioning as a major hub for both operators.

Cybersecurity specialists recommend that passengers always initiate contact through official channels listed on the operators’ verified websites rather than responding to unsolicited messages. They also advise checking for verification symbols, examining account history, and being wary of accounts with limited posting history or suspicious handles that slightly vary from official accounts.

The rail operators have clarified that their legitimate customer service teams will never request sensitive personal information through social media direct messages, nor will they ask customers to download third-party applications or move conversations to messaging platforms like WhatsApp.

Passengers who believe they’ve encountered fraudulent accounts are encouraged to report them directly to the platform and to the genuine railway operator accounts to help prevent others from falling victim to the same scams.