Latest scams

Keeping you up to date about the latest types of scam.

We also regularly post warnings about common scams on our social media channels Facebook, Instagram and Twitter Opens an overlay [Will show a security message first].

November 2024: Black Friday and Cyber Monday - Online shopping scams

Look out for online shopping scams this month, as Black Friday deals clog up your inbox, scammers are able to create fake retailer websites and browser links that mimic our favourite stores.

These scams can allow criminals to collect financial details and use credit cards fraudulently. They may also be able to access personal details and passwords.

What to look out for: 

• an online offer looks too good to be true
• when you enter your details or reach the checkout, there is no padlock in the website address bar (a padlock is a sign that your connection is secure and the information shared is encrypted BUT it does not necessarily mean the website is genuine)
• the retailer insists on immediate payment, or payment by bank transfer
• you can’t find any contact details or shipping policies on the website.

How to protect yourself:

• only buy from retailers and brands you know and trust
• avoid clicking on links from social media adverts – type the website name directly into the address bar
• look for a padlock symbol in the address bar for a secure connection
• always update your computer/phone/tablet operating software and install anti-virus software from a reputable company
• pay with a credit card or payment option that gives you some protection
• always ‘log off’ or ‘sign out’ of online banking or shopping accounts.

November 2024: Parking charges scam

Fake parking charges scams are on the rise, with the Driver and Vehicle Standards Agency (DVSA) warning to watch out for texts claiming you need to pay them a ‘parking penalty charge’.

How to spot the signs

The text might:

• say you’ll be banned from driving
• threaten court if you don’t pay on time
• warn you’ll be charged more if you don’t reply
• contain a link to enter your licence plate number.

You’ll also likely get follow up ‘reminders’ the next day with further threats.

How to stay safe

If you’re contacted and think it might be a text scam:

• don’t reply
• don’t click on any links
• don’t open any attachments.

Instead you should report it to the National Cyber Security Centre.

If you’ve responded to a scam text or been tricked into sharing personal details with a scammer, you can take immediate steps to protect yourself.

If you’ve lost money or shared personal details when replying to a text, report it to Action Fraud Opens an overlay [Will show a security message first] Opens an overlay [Will show a security message first] online or over the phone on 0300 123 2040 (England, Wales or Northern Ireland) (101 in Scotland). 

October 2024: SIM swap fraud

What’s SIM swap fraud?

SIM swapping is where a scammer takes control of your mobile number by convincing your network provider to transfer your service to a SIM they own.

It starts with a scammer gathering personal details about you, using phishing, smishing, social engineering, previous data breaches or reading your social media posts. Using the information, the scammer then pretends to be you and is able to pass any security checks from your network provider.

Finally the scammer tells your network provider to route your number to their SIM card, giving them access to your incoming calls and texts. This means they’ll also get any one-time passcodes, giving them access to your financial and social media accounts.

How to spot a SIM swap scam

• your phone is no longer connecting
• you can’t make calls or send texts
• you’re notified of activity that wasn’t you
• you’re unable to access your accounts
• you notice transactions you didn’t make.

If you think your SIM card has been swapped you need to call your network provider immediately. You also need to let your bank know as soon as possible, so they can help secure your accounts.

You should also report it to Action Fraud Opens an overlay [Will show a security message first] Opens an overlay [Will show a security message first]. 

How to stay safe

• check what additional security your network provider offers
• don’t overshare online, especially on social media
• be aware of email (phishing) and text scams (smishing)
• turn on 2-step verification on your accounts
• use a strong password with a mixture of characters and symbols
• don’t use the same password for everything
• keep your device’s software up to date.

October 2024: PIN re-entry scams

Eating out? Don’t get bit in the pocket

Here’s everything you need to know about PIN re-entry scams

What’s a PIN re-entry scam?

If you’re out and about at restaurants, airports and tourist hotspots, watch out for a new scam targeting distracted diners and travellers. The PIN re-entry scam involves a typical-looking point-of-sale (POS) machine and is especially effective with low-cost items, making it easier to go unnoticed.

How does it start?

You want to pay for something relatively inexpensive with your debit card, like a sandwich or a drink. The scammer (often posing as an employee) hands you a device to pay and asks you to enter your PIN. You enter it, assuming it’s a normal transaction, but the scammer tells you the transaction’s failed and asks you to try your PIN again.

How does it end?

When the scammer hands you the device back, it isn’t on the PIN entry screen. It’s asking for a transaction amount. So when you enter your PIN again (say it’s 1234) you actually enter £1234.00.

By entering your PIN a second time you’re confirming a fraudulent transaction for a much larger amount.

How to avoid PIN re-entry scams

• always check the transaction amount before entering your PIN
• confirm the amount you’re paying is what you’re expecting
• if a transaction ‘fails’ always ask for a receipt to confirm this
• be cautious if you’re rushed or asked to make a payment somewhere crowded
• contact your bank or credit card company immediately if you suspect you’ve been defrauded.

If you think you’ve been a victim of fraud, call the number on the back of your first direct card immediately. You should also report it to Action Fraud Opens an overlay [Will show a security message first]. 

September 2024: Conference call scams

This particular impersonation scam involves a 'conference call' between you, your bank and the scammer.

If that sounds a little complicated, here's how they do it:

Step 1 - Fraudsters contact you claiming to be from first direct bank saying you have fraud on your account and need to be verified. They are trying to trick you into letting them take over your banking app so they can set up a payment or apply for a loan online before calling us.

Step 2 - The fraudster transfers you to the Contact Centre, while staying on a conference call with you.

Step 3 - You are then verified by our Contact Centre, either by giving your one-time password or by voice ID. This is the part the scammer needs you for - to give the information they don't have access to.

Step 4 - Once verification is complete, the fraudster mutes or cuts you off and continues the call, pretending to be you.

Step 5 - The fraudster then asks to authorise a payment that has flagged for a check. They also have full access to your account and can make whatever payments they like.

How to stay safe

• We'll rarely contact you out of the blue - so simply getting a call from us that you weren't expecting should ring alarm
• Remember, well never: ask you for your PINs, passwords or Secure Key Codes, get you to send us cash, cards or cheques, or transfer money into a different account
• If the person you're speaking to asks for personal details and keeps putting you on hold, hang up straight away
• Make sure you're actually speaking to us by ending the conversation and contacting us again through an official channel...
• ...but remember, scammers can keep your phone line open even after you’ve hung up on them - so if you do end the call, wait at least 15 minutes before ringing back, or use a different phone

Remember, anyone can get scammed

Over 19 million in the UK fell victim to scams last year, losing around £1700 on average. It really could happen to you, especially if you're in a hurry, your guard is down or you're being put under pressure.

So be careful, and stay safe.

August 2024: Holiday scams

The booking scam

Social media is full of last-minute holiday deals at this time of year, so you need to be careful who you book with. If you’ve spotted a deal you like but the travel company only accepts payment by bank transfer, chances are it could be a scam.

Scammers often impersonate travel companies, creating fake adverts, emails and websites, which can look very convincing. Some websites may even be clones of real travel companies.

By paying for a holiday by bank transfer, it makes it much harder for you to get your money back.

The cancellation scam

If you’ve booked a holiday with a reputable company, you still need to be wary of cancellation scams. This is where scammers use a fake flight or hotel booking cancellation as a way to trick holidaymakers.

They may send emails posing as your travel company and ask you to claim a refund by going to a fake website. Or they may pretend to be from your hotel and ask you to cancel and rebook with them directly to ‘save money or fees’.

You may also get a call from a ‘refund agent’. These scammers may promise a quick refund if you hand over your bank details, sometimes asking for upfront payments disguised as fees.

How to stay safe

• be careful of deals that come directly to you
• always research the travel company
• check if the travel company is protected by ABTA or ATOL by searching the ABTA website Opens an overlay [Will show a security message first] or by entering the name and reference number on the ATOL database Opens an overlay [Will show a security message first].

July 2024: Call divert scam

The handy phone feature turned scammer tool.

Firstly, what’s call divert?

If you know the score, skip to the next section. If not… Call divert is a feature through your phone company, which diverts calls to almost any phone. You may be charged a fee for the service.

• dial *21 to divert calls
• *61 to divert any missed calls
• *62 to divert calls when your phone is off
• *67 to divert calls when your phone is engaged.

However, scammers are turning this useful tool into a trick. 

How does a call divert scam work?

Scammers may call or text pretending to be from your bank and urge you to confirm information by dialling a code. This will be a call diversion code followed by a phone number and #.

For example, you may be asked to dial *21+447XXXXXXXXX#.

Dialling these numbers won’t confirm any information with us. Instead this will get your phone company to divert your calls to the number after the *21, which will be the scammer’s number. They’ll then be able to answer all your calls. 

Have you dialled a code?

If you think you’ve been a victim of a call divert scam, call ##002# to cancel your active call diversions. You’ll receive a notification when it’s been successfully cancelled.

You can also contact us any time, day or night, using the number on the back of your first direct debit card. And you can get in touch with your phone company too.

How to stay safe

• watch out for unexpected messages that ask you to dial a code
• be wary of any message encouraging you to take action out of the blue
• remember no bank will ask for your PIN, password, or One-Time Passcode.

June 2024: Impersonation scams

From your bank to your utility company and even the emergency services, scammers know the organisations you’re likely to trust. And, using all sorts of persuasion tactics and approaches, they take advantage of that – tricking you out of your account information to steal your money.

How to stay safe

• scammers will try to put you under pressure, making things seem urgent or even dangerous to convince you to act. But don’t panic. Take a breath and try to assess the situation calmly before doing anything
• make sure that you’re speaking to the company you think you are by ending the conversation and contacting them again through an official channel
• remember we’ll never: ask you for your PINs, passwords or Secure Key Codes, get you to send us cash, cards or cheques, or transfer money into a different account
• avoid logging into any accounts using public WiFi connections or on public devices
• never let anyone gain remote access to your phone or computer
• if something doesn’t feel right, stop interacting straight away
• if you’re not sure it’s us calling, hang up and call us back on the number displayed on the back of your first direct card.

June 2024: Phone scams

Ring, ring! Someone’s calling – but it might not be who you think it is. Phone scams, sometimes called “vishing”, are when criminals contact you directly, pretending to be your bank or another company you trust to gain access to your account. They’ve got all sorts of tricks up their sleeve to convince you into giving away your details – so here’s what to look out for. 

How to stay safe

• we’ll rarely contact you out of the blue – so simply getting a call from us that you weren’t expecting should ring alarm bells
• remember we’ll never: ask you for your PINs, passwords or Secure Key Codes, get you to send us cash, cards or cheques, or transfer money into a different account
• if the person you’re speaking to asks for personal details, gets aggressive, tries to rush you or starts putting you under pressure, hang up straight away
• make sure that you’re speaking to the company you think you are by ending the conversation and contacting them again through an official channel…
• …but remember, scammers can keep your phone line open even after you’ve hung up on them – so if you do end the call, wait at least 15 minutes before ringing the company back, or use a different phone
• consider registering with the Telephone Preference Service (TPS), which will stop legitimate companies making unsolicited sales and marketing calls to your number – so you’ll know if you do get a call, it’s almost definitely a scam
• if you’re not sure it’s us calling, hang up and call us back on the number displayed on the back of your first direct card.

May 2024: Ticket scams

Going to a gig, festival or sports event is great fun – but becoming a victim of ticket fraud isn’t. That’s why you should only buy tickets from official vendors, the box office, or reputable reseller sites.

Scammers typically pose as a seller and post their ‘tickets for sale’ on social media or an online marketplace. They'll tell you they’ll post or email the tickets after you’ve transferred the money into their bank account. But when nothing arrives and you try to contact them, they’ve completely disappeared.

This happens to thousands of music, sports, and other fans every year, who get tricked into buying fake or non-existent tickets.

How to stay safe

• only buy tickets from the venue’s box office, official vendors, or reputable reseller sites
• don’t open links or attachments on social media, texts, or emails offering tickets, as they could send you to fraudulent or malware sites
• avoid paying for tickets via bank transfer
• check a seller’s privacy and returns policies
• keep receipts until after the event.

April 2024: Clickbait scams

You won’t believe this shocking trick scammers are using to steal your personal information!

How clickbait scams work

Want to find out more? Of course you do. Fraudsters know just how to get your attention and intrigue you into clicking links in ads, emails, messages and comments on social media. But once you take the bait, you could find yourself on a website designed to hijack your account or steal your information. It could happen to anyone – so make sure it doesn’t happen to you.

What to look out for

Scammers will try to hook you in with words like “shocking”, “secret”, “exclusive” and so on. Be wary of anything promising to give you inside information, sensational news or private access.

As well as attention-grabbing posts, clickbait scams can take the form of browser notifications, antivirus updates, surveys, quizzes, ‘miracle cures’ or even messages from tech support companies.

If someone you know is sending strange messages or making unusual posts containing links or directions to other websites, it’s possible they may have been hacked. Be wary of any downloads, attachments or links they might send.

How to stay safe from clickbait

Hover your cursor over a link and look in the bottom left corner or ‘destination bar’ to see where it’s really going to take you – and use common sense if the link doesn’t look right.

Don’t click on links in emails from addresses you don’t recognise, or that you weren’t expecting – and definitely don’t download attachments from senders you don’t know and trust.

Be wary of links that look like login pages for social media sites. If you’re already logged in, or the page doesn’t look like the one you recognise, close the tab.

As always, if something seems too good to be true – remember that it probably is.

If you think you’ve been a victim

Call the number on the back of your card if you think you’ve been a victim of fraud.

March 2024: End of tax year scams

As the end of the tax year approaches (5 April), it might not be the tax man who comes knocking.

Scammers are posing as HMRC and sending convincing emails and texts. They may try to trick you into handing over your account or card details, by claiming you’ve received a tax rebate. Or they may send you fake bank details to get you to send your tax payments to them instead of HMRC.

These scams can be hard to spot if you’re expecting to hear from HMRC.

How to stay safe

The best way to stay safe is to not let your guard down. If you get an email or text from HMRC stop and think: Could it be a scam? And remember, HMRC will never ask you to share confidential information like passwords, one-time passcodes (OTPs), or your PIN. You should also never share your HMRC login details.

If you think you’ve received a tax scam:

• don’t reply
• don’t click on any links
• don't open any attachments.

If you need to contact HMRC, only use phone numbers, links or web addresses from official websites or letters.

March 2024: Gold purchasing scams

If someone asks you to buy gold and hand it to them for safekeeping, it’s a scam.

Fraudsters are tricking people into buying gold, other precious metals or jewellery then physically handing it over to criminals.

They may pose as police, bank employees or other government officials (or all of these together) to make you believe your money is not safe in the bank. 

What to look out for

The exact details of each scam can vary. They may involve more than one scammer posing as different organisations. They may tell you:

• You have been a victim of fraud within the bank and shouldn’t trust them
• You are helping a police investigation
• Your money is counterfeit
• You need to buy gold or jewellery to stay safe

Scammers will make you believe they are helping you to trick you into giving them gold. They might ask you to buy it from a reputable supplier.

The police and government agencies will NEVER ask you to buy gold. Anyone who does this is trying to trick you.

How to stay safe

Stop and think. If you are asked to buy gold to stay safe, it is a scam. Legitimate fraud investigations will not ask you to do this.

If someone contacts you or asks you to buy or hand over gold or jewellery, hang up immediately.

If you think you’ve been a victim of fraud, call the number on the back of your card.

February 2024: Romance scams

Met a new partner or friend online? Are they unable to meet in person? If they ask you to send them money, it could be a fraudster using a fake identity to scam you.

How romance scams work

Criminals set up fake profiles on dating sites or social media, and build ‘relationships’ with victims who think they’re talking to a real person. They build trust, often over months of chatting and even phone calls. There’s usually a believable reason they can’t meet in person. Then they play on your emotions to trick you into sending them money. It’s easy to be fooled.

Spot the signs of romance scams

A scammer you’ve only met online might ask you for money and say things like:

• They are abroad and need money for travel to visit you
• They have a sick relative who needs medical care
• They have a business problem and need a loan to tide them over
• They’re waiting for an inheritance but need funds to access their money

If someone you’re talking to online asks for money, stop and think. Check in with family or friends you know in person for a second opinion.

How to stay safe

Never send money to someone you haven’t met in person. They might not be who they say they are.

What to do if you think you’ve been a victim

Call us using the number on the back of your card if you think you’ve been the victim of a romance scam.

January 2024: Hotel booking scams

Scams involving hotel bookings are on the rise. If you’re paying for hotels or holidays, take extra care when making payments to protect yourself from fraud.

What to look out for

Some hotels and major booking platforms have recently been compromised by scammers.

• Fraudsters send messages or links requesting payments which may come directly from your booking app or platform.
• These messages often contain accurate booking information, like your hotel name or holiday dates. This makes it hard to spot it’s a scam.
• They might say there’s a problem with your card, or that your booking was cancelled and you need to pay again.

Clicking payment links in messages like these allows scammers to take your payment instead of the hotel.

How to protect yourself

Stop and double check before making hotel or holiday payments. Call your hotel directly if you receive an unexpected request for payment, even if this comes through an official booking platform or app.

If you think you’ve been a victim

Call the number on the back of your card immediately if you think you’ve been a victim of fraud.

May 2023: Cryptocurrency scams

Cryptocurrency – a digital asset used in place of regular currency, is becoming more and more popular. If you want to trade professionally, you'll need to use a cryptocurrency exchange that requires you to verify your ID and open an account or ‘wallet’.

Fraudsters have realised people are looking to invest in cryptocurrency and as this way of trading money is not regulated, it’s difficult to make sure you’re sending your money to a genuine cryptocurrency account. 

What to watch out for

• If someone asks you to give your bank a false reason for an investment payment, don't. Fraudsters know these payments may attract more scrutiny and will try to avoid it. 
• Fraudsters may also ask you to download software to access your devices and move money without your knowledge.
• Fraudsters may impersonate famous people on social media or messaging groups, to make their offer look real and more appealing.
• The most high value cases even give a return in the short term, to convince victims to invest more. Then, after they send larger payments, they suffer even greater losses.
• If your account is suddenly closed and they refuse to transfer your funds, or ask for more money before they can transfer funds, report them immediately.

Top tips to keep your money safe

• Beware of ads on social media using celebrities or public figures to promote cryptocurrency investments.
• A glossy website and reviews from ‘high net worth’ investors are no guarantee an offer is genuine.
• Never allow anyone to set up a cryptocurrency wallet, upload ID documents or manage investments for you.
• Make sure the wallet is in your name and only you have access to it.
• Never download software that gives somebody access to help you invest or make payments.
• If in doubt, do some research using well-known, reputable sources before making a payment.
• Report any suspicious activity. It builds awareness of fraud and helps everybody.

Think you’ve seen something suspicious?

To report a scam or fraudulent activity, get in touch on our usual number, the one on the back of your first direct card.

March 2023: Ghost broking – selling fake car insurance

With 1 March being one of the dates new car registrations are released, it’s a time of year a lot of people need to update their car insurance.

This means fraudsters have another opportunity to scam us. Ghost broking is where a scammer sets up a fake website and sells a fraudulent car insurance policy – people don’t know the policy is fake unless they need to make a claim, and then it’s too late. Not being properly insured can get you six points on your driving license, a fine, or worse, a criminal record.

The best way to make sure you don’t end up being sold fake car insurance is to search for the best prices on reputable websites and well known comparison sites, and always check the ratings of any companies as well as making sure they have a phone number that works and checking their company address, and you can do your own checks as well:

• To check a broker, visit the British Insurance Brokers' Association (BIBA). 
• To check a direct insurer, make sure they're a member of Motor Insurers' Bureau (MIB). 
• Whether broker or insurer, check they're registered with the Financial Conduct Authority (FCA). If they're not, it’s best not to buy your insurance from them.

November 2022: Remote access takover

This type of fraud starts with an unexpected phone call from someone claiming to be from a well-known company. They may say:

• there's been an issue with a refund
• they're trying to solve technical problems with your computer or Wi-Fi
• you've fallen victim to fraud

The criminal will then tell you to download software or a mobile application to fix things.

They'll ask you to log on to online or mobile banking and share your screen using the remote access software you've downloaded. The fraudster can then take full control of the online or mobile banking session and use your details to steal your money.

No genuine company will ever call you out of the blue to ask for remote access to your devices.

Never give out any the following over the phone:

• your personal details
• payment details
• online or mobile banking credentials

If you're not sure, always call the company back on a trusted number that you know to be correct.

Find out more about remote access takeover scams.

November 2022: Delivery scams

Criminals are sending fake text messages and emails claiming to be from a delivery company.

They say they tried to deliver a parcel to you and ask you to click on a link to find out more or rearrange delivery.

Don't click on any links or give any information, especially personal or financial details.

If you think the message may be genuine, open a separate window and visit the company's website using an address that you know is safe. Once there, you can enter your tracking number to see if the message was genuine.

If you think the message isn't genuine, delete it.

Never give any information if you're contacted unexpectedly by email, phone or text. Contact the company separately using a phone number you trust.

Contact us using the number on the back of your card if you've fallen victim to this scam.

September 2022: Digital wallet scams

Watch out for unexpected messages about your digital wallet, especially if you haven't used it recently. 

Fraudsters are impersonating banks by sending texts saying there’s a problem with your digital wallet, or it's been suspended or blocked. They'll ask you to enter your personal details via a link, which they'll use to access your accounts.

Always question messages with links asking for personal and financial details. They might want you to share things such as your name, address, card details, sort code and account number.

What you should do:

• don’t reply, open any links or enter any details
• report messages by forwarding them free to 7726
• check your account using the wallet app on your device

If you think you've been scammed, call the number on the back of your first direct card immediately.

August 2022: Council tax and energy rebate scams

Criminals are claiming to be getting in touch about the government’s plan to tackle the cost of living crisis.

They pretend to be from the government or UK energy regulator Ofgem. 

They're sending mails and texts that contain links to websites, asking you to give personal and financial details to claim funds.

Council tax rebates are paid directly to your bank account and any discounts to energy bills will be made automatically by your energy supplier. There's no need to apply.

Ignore any suspicious contacts made asking for personal and financial details and report any such activity directly to Action Fraud Opens an overlay [Will show a security message first].

If you've fallen victim to this type of scam, you should also contact us directly using the number on the back of your credit or debit card.

You can also visit Ofgem Opens an overlay [Will show a security message first] and GOV.UK  Opens an overlay [Will show a security message first]directly to find out more.

You may also find useful