In fairness to her - this wasn't a drive by attack. She was in the process of applying for the benefit that the site claimed to be part of. To my mind this is e

In fairness to her - this wasn't a drive by attack. She was in the process of applying for the benefit that the site claimed to be part of. To my mind this is either a complex technical attack, or more likely perhaps, an inside job. The money from a single victim wouldn't justify creating the website IMHO so I suspect they have a long list of 'warm leads' which makes it a hell of a lot more convincing. She did spot that it was fake a few minutes after inputting her details and we then blocked all her cards. So all they got out of it was some semi-private details (name, address etc).