However, in this reporting 12 months, in its place of spamming the company’s connected mailboxes, the spammers exploited minimal levels of web site security, bypassed any reCAPTCHA tests and registered numerous accounts with valid e-mail info. Upon calling, they would be questioned by the phony aid workforce to hand over particulars including their whole name and banking facts.