How to Spot UK Scams: Texts, Emails and Calls Explained

Last checked: 19 October 2026. Phone numbers, email addresses and steps below come from the official Report Fraud, National Cyber Security Centre (NCSC), Citizens Advice, Payment Systems Regulator, Stop Scams UK and Google Help pages on that date. Services do change, so if something looks different, go by the official site.

A text says a parcel couldn't be delivered. An email says your account is locked. A polite caller says they're from your bank and there's a "problem". If any of that has made your stomach drop, you are in very good company. Scams land on all of us, and they're getting more convincing every year.

The good news is that you don't need to be a tech expert to beat them. A handful of warning signs, one golden rule and a few free UK reporting services go a long way. This guide walks you through all three, in plain English, with no scaremongering.

What is a scam (and what is "phishing")?

Report Fraud, the UK's national reporting centre, puts it simply: fraud is when someone tricks you into giving them money or information. It can happen in person, over the phone or online.

Phishing is the name for the online version. Criminals send fake emails, texts or messages as "bait", hoping you'll click a link, open an attachment or type in your details. The link often leads to a fake website that looks like the real thing, built to steal passwords or bank details.

Scammers commonly pretend to be:

your bank, or the bank's "fraud team"
a delivery company, about a parcel
a government department, such as the tax office
a well-known shop, phone company or streaming service
a friend or family member who has "lost their phone"

Why it's worth learning the signs

Report Fraud says it is there for the 4.6 million people affected by cyber crime and fraud every year. The NCSC is refreshingly honest about why: it used to be easier to spot scams thanks to bad spelling or odd-looking emails, but "scams are getting smarter and some even fool the experts".

So falling for one isn't a sign you're daft. Scammers are professionals who rely on catching people when they're busy, tired or worried. A few habits take away most of their advantage.

Step by step: spot, check and report a scam

Step 1: Look for the five warning signs

The NCSC lists tell-tale signs that a message or call may be a scam. Scams often feature one or more of these:

Authority. It claims to be from someone official, such as your bank, doctor, a solicitor or a government department.
Urgency. You're told to act "within 24 hours" or "immediately", often with a threat of fines or other trouble.
Emotion. It's designed to make you panic, feel fearful, hopeful or simply curious.
Scarcity. It offers something in short supply, such as tickets, money or a "cure", so you rush.
Current events. It piggybacks on the news or the time of year, such as tax deadlines.

The NCSC also warns that criminals increasingly put QR codes inside phishing emails. QR codes on a pub menu are usually fine, but be wary of scanning one that arrives in an email.

Step 2: Stop, and check it the safe way

This is the golden rule. If you have any doubt, stop and contact the organisation yourself, using details you already trust, not the ones in the message.

Don't click the link or ring the number in the message.
Find the organisation's details from their official website (type it in yourself), or from a paper statement or the back of your bank card.
Contact them and ask whether the message is genuine.
If it's a phone call, simply hang up. A real bank won't mind.

The NCSC is clear that your bank, or any other official source, will never ask you to supply personal information by email, or call and ask you to confirm your bank account details.

Step 3: Got a suspicious call about money? Ring 159

159 is a short phone number run through Stop Scams UK. If you get an unexpected call about a financial matter, hang up and dial 159. Stop Scams UK says it connects customers of more than 99% of UK retail bank current accounts safely and directly with their bank, and that, unlike many ordinary long numbers, 159 cannot be spoofed (faked to look like it's coming from someone else).

Step 4: Report scam texts to 7726 (free)

Most UK phone providers are part of a scheme that lets you forward suspicious texts to 7726 for free. Your provider can then investigate and block or ban the sender. The NCSC's steps are:

On an iPhone:

Make a note of the number that sent the message.
Press and hold the message bubble, then tap More.
Select the message, tap the arrow at the bottom right, enter 7726 and send.

On an Android phone:

Make a note of the number that sent the message.
Open the conversation, then press and hold the message bubble.
Tap the three dots at the top right, tap Forward, enter 7726 and send.

If you use the Google Messages app on Android, you can also block and report the sender to Google: touch and hold the conversation, then tap Block, then Report spam, then OK. The conversation moves to your "Spam and blocked" folder.

Step 5: Report scam emails to the NCSC

Forward any email you're unsure about to report@phishing.gov.uk. This is the NCSC's free Suspicious Email Reporting Service. You don't need to be certain it's a scam, as they'll check it for you, and you don't need to forward things already sitting in your spam or junk folder.

If you use Gmail on a computer, you can also tell Google:

Open the suspicious message.
Next to Reply, click More (the three dots).
Click Report phishing.

Step 6: Report fake websites

If you've landed on a website that you think is trying to scam you, report it using the NCSC's Report a suspicious website form on ncsc.gov.uk. The NCSC says it will investigate.

Step 7: If you've lost money or shared details, act fast

First, take a breath. Then:

Call your bank straight away, using 159 or the number on the back of your card.
Report it to Report Fraud online at reportfraud.police.uk or by phone on 0300 123 2040. This covers England, Wales and Northern Ireland. Citizens Advice says the phone line is open Monday to Friday, 8am to 8pm, and that you'll get a crime reference number, which can help when dealing with your bank. (The old Action Fraud web address now takes you to Report Fraud.)
In Scotland, Report Fraud says to report it to Police Scotland on 101.
Citizens Advice says to call the police on 101 straight away if the scammer is in your area or you sent them money in the last 24 hours, and 999 if you feel threatened or unsafe.
If you typed a password into a fake site, change it on the real site, and switch on 2-Step Verification if you haven't already.

Can I get my money back?

Often, yes, if you were tricked into sending a UK bank transfer. This is called Authorised Push Payment (APP) fraud. According to the Payment Systems Regulator, for payments made on or after 7 October 2024 over Faster Payments or CHAPS:

reimbursement is mandatory for individuals, microenterprises and charities, and it covers types such as impersonation and romance scams;
you should report it to your bank as soon as possible, and within 13 months of the payment;
the maximum claim is £85,000;
firms may apply an optional excess of up to £100, but not for vulnerable customers;
you won't be reimbursed if you were complicit or "grossly negligent", which the regulator calls "a high bar".

Card, cash and cheque payments have their own separate protections, and credit unions, municipal banks and national savings banks aren't part of these arrangements. Your bank will explain how their claim process works.

Handy tips

Pause before you pay. The Payment Systems Regulator suggests talking it over with someone you trust before sending money if you're unsure.
Pay attention to bank warnings, including the name check (Confirmation of Payee) when you set up a new payee.
Don't trust the caller ID. Numbers can be faked, which is exactly why 159 exists.
"Hi Mum, I've lost my phone" messages? Ring the person on the number you already have before doing anything.
Keep a family "check with me first" rule for any unexpected request for money.

Common problems

My email to report@phishing.gov.uk bounced back

The NCSC says this doesn't mean the service is broken. If the email had only one link, the error usually means it's already been recognised as spam. If it had several links, try sending them separately or use the website reporting form instead.

Forwarding to 7726 didn't work

The NCSC suggests contacting your phone provider to find out how they want scam texts reported. You can also send the NCSC a screenshot of the text at report@phishing.gov.uk.

The message used my name and looked completely real

That's normal for modern scams. Google's Gmail help notes that scammers often use social media and publicly available information to make messages more convincing. Go back to the golden rule: check it yourself, using details you trust.

I feel embarrassed and don't want to tell anyone

Please do tell someone. Citizens Advice says scammers are clever and scams can happen to anyone. Reporting helps stop the same criminals catching the next person.

Staying safe: the essentials

Never share passwords, PINs or one-time security codes with anyone who contacts you, however official they sound.
Google's Gmail help says that if you're signed in, emails from Google won't ask you to enter the password for that account. If a link asks for it, close the page and go to the site directly.
Switch on 2-Step Verification for your important accounts.
Use a password manager so each account has its own strong password.
Keep your phone and computer updated.

Frequently asked questions

Does it cost anything to report a scam?

Forwarding a text to 7726 is free with most providers, and reporting emails to report@phishing.gov.uk is free. Calls to Report Fraud's 0300 number may cost depending on your phone plan, so check with your provider if you're unsure.

Will my bank ever call and ask me to confirm my account details?

No. The NCSC says your bank will never call and ask you to confirm your bank account details. If a caller does, hang up and ring 159 or the number on the back of your card.

Who do I report to if I live in Scotland?

Report Fraud asks people in Scotland to report to Police Scotland on 101. You can still forward scam texts to 7726 and scam emails to report@phishing.gov.uk.

Final thoughts

You don't have to spot every scam on sight. You just need the habit of stopping when something feels urgent, checking it yourself using details you already trust, and reporting it. Pop 159, 7726 and report@phishing.gov.uk somewhere handy, and share this with anyone you think might need it.

If you've got a question, leave a comment below, but please never post personal details, account information or the scam message's links in a comment.

Stay safe out there — Paul

Search This Blog

Tech Ramblings of a 50 Something