The latest scam alerts from Which?

Find out about the latest scams trending this month. Come across a scam? Let us know by using our scam sharer tool.

For weekly updates on the scams you need to be aware of, sign up to our free scam alerts service.

7 August

Fake Evri messages

Which? has seen several fake Evri text messages circulating.

The messages claim there is incomplete or incorrect address information for your delivery and instruct you to follow a dodgy link to provide these details. 

It also claims that the details must be provided within 24 hours.

Do not click on the link. Forward suspicious messages to 7726 and then delete them.

Dodgy websites can be reported to the National Cyber Security Centre. 

5 August

NatWest impersonation emails

Action Fraud, the UK's fraud reporting centre, says it has received 151 reports of scam emails claiming to be from NatWest over a two-week period.

These dodgy emails claim that the contact number associated with your bank account has changed, and urge you to follow a malicious link to 'cancel the request'. Don't click any links in these kinds of messages.

You can report scam emails by forwarding them to report@phishing.gov.uk.

1 August

Microsoft customer support impersonation email

This email purporting to be from Microsoft customer services claims that the tech company has received '62 complaints about your email account from Google Drive.'

It goes on to say that your account has been spreading malware and viruses via spam emails sent from your email address.

It includes a link to 'run and scan for viruses.' However, this leads to a malicious site that will either download malware to your device or take you to a phishing website.

You can report scam emails by forwarding them to report@phishing.gov.uk.

Suspicious websites can be reported to the National Cyber Security Centre.

31 July

Dodgy Alton Towers giveaways

These dodgy Facebook posts claim to offer free tickets and gift cards for the theme park Alton Towers.

They ask users to like the page and follow a link to be in with a chance of getting the prizes.

The link takes you to Rewards Giant, a company we've previously reported on.

Suspicious websites can be reported to the National Cyber Security Centre.

You can report pages, posts and people on Facebook by selecting the three dots in the top right corner and selecting 'report.'

Personal alarm scam calls

Nottingham On Call, a service which provides personal alarms for elderly and vulnerable people, has warned that it is being impersonated in dodgy phone calls. 

The callers claim to be getting in touch with customers about having their 'lifeline' equipment swapped. We've previously reported on similar scams.

Nottingham On Call has warned customers not to let anyone into their homes who claim they're visiting to swap their equipment. 

If you receive a suspicious call, you can inform Nottingham On Call on 0115 746 9777. 

30 July

Dodgy Tesco voucher

This dodgy website impersonating Tesco attempts to entice victims with the promise of a free voucher. 

The link in the email leads you to a website from 'Rewards Giant'. This is a dubious 'rewards' company which regularly claims to offer free vouchers for popular retailers.

We have previously reported on this company and how shoppers have struggled to obtain the promised gift cards.

Suspicious websites can be reported to the National Cyber Security Centre.

24 July

Global IT outage scams

The National Cyber Security Centre has warned of an increase in phishing attempts referencing the global IT outage.

Phishing is when a scammer targets you using an email containing malicious links. 

Opportunistic scammers typically take advantage of big events, like the global IT outage, to con their victims.

You can report scam emails by forwarding them to report@phishing.gov.uk, websites can be reported to the National Cyber Security Centre.

Scam texts can be reported by forwarding them to 7726.

23 July

Lloyds Bank impersonation email

An email imitating Lloyds Bank claims that you need to complete an 'account verification process' and attempts to get you to click on a malicious link.

The email states that this is due to the bank 'implementing new login authentication procedures.'

You can report scam emails by forwarding them to report@phishing.gov.uk, websites can be reported to the National Cyber Security Centre.

Evri scam email

An email impersonating delivery company Evri tells you that your delivery has been delayed.

It goes on to say that your 'package has been held due to an unpaid invoice' and leads to a phishing site where you're asked to pay to 'resume delivery.'

Scam emails can be reported by forwarding them to report@phishing.gov.uk and websites can be reported to the National Cyber Security Centre.

22 July

Wetherspoons Facebook scam

A Facebook page impersonating Wetherspoons claims to offer a free meal for two.

The fake promotion is shared in a post which asks users to like and comment to receieve the offer.

In the comments, the fake Wetherspoons page shares a link which sends you to a website to gather your financial and personal details.

You can report scam posts and pages by selecting the three dots in the top right corner and pressing 'report.'

Websites can be reported to the National Cyber Security Centre.

HMRC tax rebate email

An email telling you that you're eligible for a tax refund is a scam impersonating HMRC.

The email includes a 'UK Gateway' logo and a link to a malicious website which will ask for your personal and financial information.

You can report scam emails by forwarding them to report@phishing.gov.uk, websites can be reported to the National Cyber Security Centre.

11 July

Transport for West Midlands impersonation scam

Transport for West Midlands has issued a warning about dodgy Facebook posts offering a 'Swift pay as you go' card. 

The posts claim that the cards provide free public transport for a year. If you click on a link, you'll be taken to a malicious phishing websites that will attempt to obtain your personal and financial information.

To report posts on Facebook, select the three dots in the top right corner and press 'report.'

Websites can be reported to the National Cyber Security Centre.

10 July

Counterfeit money warning

An Instagram account offering counterfeit money claims its products are printed to 'pass all security tests.'

The account includes a link to follow for 'further information.' 

Printing cash is illegal and any money you part with will most likely give you nothing in return, the scammer could also use your personal details to scam you again.

Which? previously uncovered over a dozen scam pages claiming to sell fake money.

To report scam posts and accounts on Instagram, select the three dots on the right and press 'report.'

5 July

Scam housing repair calls

We've received a growing number of reports of scammers calling homeowners and tenants claiming to be from a 'housing disrepair team'.

These calls, which come from a variety of numbers, may make bogus offers of financial help to solve damp or mould problems.

If you receive a scam call on an iPhone, you can report it to your provider by texting the word ‘call’ followed by the phone number to 7726.

If you have an Android phone, text the word ‘call’ to 7726. You’ll then receive a message asking you for the scam number.

2 July

Amazon phishing email

A scam email impersonating Amazon tells you that your payment method is 'no longer valid' and your Prime Membership is about to renew.

It goes on to provide a link to a malicious website under the guise of updating this information.

This is where scammers will attempt to steal your personal and financial data.

You can report scam emails by forwarding them to report@phishing.gov.uk, websites can be reported to the National Cyber Security Centre.

27 June

Three text scam

A scam text impersonating the mobile network Three claims there are 'points' in your account that expire in three working days.

It provides a link to 'redeem the points for available rewards'. This leads to a malicious phishing site which attempts to steal your personal details.

Scam texts can be reported by forwarding them to 7726.

You can report emails by forwarding them to report@phishing.gov.uk.

26 June

Halifax impersonation email

A scam email impersonating Halifax tells you that the bank has tried to get in contact with you but couldn't, and needs you to update your information.

It then includes a link labelled 'Update Now' which will take you to a phishing website.

You can report scam emails by forwarding them to report@phishing.gov.uk.

24 June

Bosch drill kit scam emails

Action Fraud has received 616 reports in a two week period of scam emails offering a free Bosch drill set.

The emails include links to dodgy sites which ask you to fill in a survey and give away your personal and financial information.

You can report scam emails by forwarding them to report@phishing.gov.uk.

Dodgy websites can be reported to the National Cyber Security Centre.

19 June

Waspi warns of fraudulent websites

The Women Against State Pension Age (Waspi) campaign group has warned of a surge in targeted online scams asking for your personal details.

Various dodgy websites advertise that women affected by state pension delays can claim up to £2,950. 

There has been no government announcement of a compensation scheme for Waspi women.

If you've entered your details into one of these fake sites, call your bank immediately using the number on the back of your bank card and report it to Action Fraud, or call the police on 101 if you’re in Scotland.

18 June

Beware of Asda scam emails

Action Fraud has warned that it has received 1,754 reports over a two week period about dodgy emails impersonating Asda.

These emails tell you that you've won a prize, which you can claim by completing a survey.

The links in the email lead to phishing websites which try to get your personal and financial information.

You can report scam emails by forwarding them to report@phishing.gov.uk.

Dodgy websites can be reported to the National Cyber Security Centre.

12 June

'Facebook' phishing emails targeting businesses

The cybersecurity firm Kaspersky has found examples of scammers hijacking Facebook profiles to send phishing emails to business accounts on Facebook.

After taking over someone's Facebook account, the fraudster changes the display name on the account to '24 Hours Left To Request Review. See Why' and changes their profile picture to an orange icon with an exclamation mark. 

They then publish posts from the hacked Facebook page, tagging business accounts. This then triggers the business to receive an email from Facebook saying their account has been blocked. 

These dodgy emails include a link to 'dispute the decision to block your account'. If you click through, you will be asked for your page name, first and last name, phone number, date of birth and the email address or phone number linked to your Facebook account and your password.

Read our story on protecting and recovering hacked social media accounts here.

Scam websites can be reported to the National Cyber Security Centre.

10 June

Fake political ads

The Bureau of Investigative Journalism (TBIJ) has found over 8,000 adverts featuring false information about politicians on Facebook.

The ads also include AI-manipulated videos and images, with one stating that Labour leader Keir Starmer had been involved in a banking scandal.

Many led to websites which mimic newspaper articles to push dodgy investment platforms.

These websites will most likely try to obtain your personal details. 

Scam ads on Facebook can be reported by selecting the three dots in the top right corner and pressing 'report.'

Dodgy websites can be reported to the National Cyber Security Centre.

6 June

Skechers scam ad

A scam advert for the footwear brand Skechers is circulating on Facebook. The ad leads to a dodgy phishing website.

Scam ads on Facebook can be reported by selecting the three dots in the top right corner and pressing 'report.'

Phishing websites can be reported to the National Cyber Security Centre.

4 June

International FIFA World Cup lottery scam letter

A scam letter is being sent to households which tells you that your name 'drew lucky numbers' in the 'International FIFA World Cup online lottery program'.

It goes on to say that you've won hundreds of thousands of pounds and you need to call a number to claim your prize money. 

Calling this number will put you through to a scammer who will try to obtain your personal and financial information.

Royal Mail provides a form that you can use to report scam letters. You can submit this online or send it to Freepost Scam Mail.

31 May

Energy scam calls

We've received reports of a new wave of scam calls claiming to be from energy companies. 

During these calls, scammers pose as energy providers and attempt to access your personal and financial information.

To report a scam call you can text the word ‘call’ followed by the phone number to 7726.

29 May

Fake solar panel emails

Action Fraud has warned of phishing emails pretending to offer you deals on solar panels.

The emails ask you to check your eligibility for funding to cover the upfront costs of solar panel installation and prompt you to follow a link.

The link asks for personal and financial information, and may install malware on your device.

Action Fraud has received 971 reports in the last two weeks about these emails.

You can report scam emails by forwarding them to report@phishing.gov.uk.

Dodgy websites can be reported to the National Cyber Security Centre.

22 May

Vodafone points scam

Scam texts promoting fake 'points' that lead to 'rewards' on your Vodafone account take you to dodgy phishing websites.

The texts tell you that you only have three working days to redeem your points.

Don't click on the link. You can report scam texts by forwarding them to 7726, then delete the message. 

Dodgy websites can be reported to the National Cyber Security Centre.

21 May

Fake Asda £250 voucher

Scammers are posting on Facebook groups to promote dodgy vouchers at Asda they claim are worth £250.

The link to claim the voucher provided by the fraudster actually leads to Rewards Giant.

Rewards Giant is company we've previously reported on, which we found could cost you time and money with probably nothing in return if you try to get the voucher.

You can report Facebook profiles by selecting the three dots on the user's profile page and pressing 'find support or report.'

You can report posts and comments by also selecting the three dots next to them before pressing 'report.'

Dodgy websites can be reported to the National Cyber Security Centre.

20 May

Seasalt Cornwall scam websites

A number of scam ads on Instagram and Facebook are impersonating clothes retailer Seasalt Cornwall to promote fake sales.

The ads claim to offer an 80% discount on items due to store closures.

The retailer's official website is www.seasaltcornwall.com.

To report scam ads on Facebook and Instagram, select the three dots in the top right corner of the advert and press 'report.'

Copycat websites can be reported to the National Cyber Security Centre.

PayPal 'money request' email scam

This scam starts with you receiving an email invoice from 'PayPal' for a high value item, such as an iPhone.

The email includes a number which will put you through to a scammer who will try and get your personal data.

Scammers have previously sent similar emails from a PayPal email address -  service@paypal.co.uk - by exploiting PayPal's 'request money' feature. These emails include a dodgy number in the notes section of the invoice to try and get your personal or financial information.

You can report scam numbers by forwarding the number to 7726.

Scam emails impersonating PayPal can be reported by forwarding them to phishing@paypal.com and report@phishing.gov.uk.

If you receive an email from a genuine PayPal email address about an item you have not purchased, log into your account and select 'Activity'.

You can then click on the fraudulent request and cancel it. 

If you suspect your account has been compromised, you can change your password and security questions by logging into your account.

16 May

Beware of fake bank note ads

The currency exchange service No1 Currency has warned of a surge in adverts selling counterfeit banknotes on social media.

Which? has previously come across these ads, which offer discounts on various currencies. 

Buyers are at risk of being scammed if nothing arrives or by committing a criminal offence, as knowingly possessing or spending fake money is illegal.

You can report scam ads on social media by selecting the three dots in the top right corner and pressing 'report.'

14 May

Action Fraud warns of fake McAfee emails

Emails claiming to be from computer security software company McAfee tell you that your antivirus subscription needs to be renewed.

The emails lead to malicious websites which attempt to steal your personal and financial information.

Action Fraud has received 4,531 reports of these scam emails since April 2024.

You can report scam emails by forwarding them to report@phishing.gov.uk and phishing websites can be reported to the National Cyber Security Centre.

You can also report fraudulent scams impersonating McAfee to scam@mcafee.com.

13 May

Evri reports an increase in scam texts

Parcel delivery company Evri has issued a scam warning after revealing a 174% increase in reported scams from April 2023 to April 2024.

The scam texts impersonate Evri and usually tell you that you've missed a delivery before redirecting you to a dodgy site where your details will be stolen.

Evri warned consumers to be aware of scam messages being sent via iMessage, Apple’s encrypted messaging service, and Rich Communication Services (RCS), which is used on Google Android devices.

You can report scam texts by forwarding them to 7726. Malicious websites can be reported to the National Cyber Security Centre.

Virgin Media O2 warns of energy scam texts

Virgin Media O2 has issued a warning to beware of energy efficiency grant texts after detecting a significant increase in the number of these texts targeting its customers.

These texts claim to offer grants for energy bills and lead to malicious phishing websites which try to get your personal data.

The provider reports that these texts are now the fourth most common texts reported and blocked on Virgin Media O2’s mobile network.

Scam texts can be reported by forwarding them to 7726 and websites can be reported to the National Cyber Security Centre.

9 May

Amazon 'mystery box' email

This scam email impersonating Amazon claims that you can receive a 'mystery box' containing a range of products, simply by answering a few survey questions.

It leads to a phishing website where you're asked eight questions. You'll then be asked to enter your personal and financial details - supposedly to pay for the shipping of the mystery box.

You can report scam emails by forwarding them to report@phishing.gov.uk and phishing websites can be reported to the National Cyber Security Centre.

7 May

Diet pill scam emails

We've previously reported on scammers sending phishing emails advertising weight loss supplements.

These emails are again doing the rounds and promise unrealistic weight loss results in exchange for your personal and financial information. 

Scam emails can be reported by forwarding them to report@phishing.gov.uk and phishing websites can be reported to the National Cyber Security Centre.

HSBC impersonation text

This dodgy text claims that there's been an Amazon transaction on your HSBC account and includes a number to call if this wasn't initiated by you.

This number will put you through to a fraudster who will try to get your details. 

Scam texts can be reported by forwarding them to 7726.

2 May

Santander 'new payee' text

This scam text claiming to be from Santander informs you that a new payee has been added to your account.

It encourages you to follow a malicious link to cancel the payee. This website will attempt to steal your personal details.

Scam texts can be reported by forwarding them to 7726.

Phishing websites can be reported to the National Cyber Security Centre.

30 April

Scam toll charge text

A dodgy text claiming that you need to update your vehicle's information for an electronic toll collection attempts to take you to a phishing website.

This website will try to gather your personal information.

Scam texts can be reported by forwarding them to 7726 and phishing websites can be reported to the National Cyber Security Centre.

25 April

Travel insurance scam ads

Adverts are circulating on Instagram and Facebook promising 'free travel insurance for those over 55' under a new government initiative. 

The government isn't offering any such promotion, and these ads are a con to get you to part with your personal data and financial information.

You can report scam ads on social media by selecting the three dots in the top right corner and pressing report.

Phishing websites can be reported to the National Cyber Security Centre.

24 April

Housing repair scam call

Reports of a scam call from an unknown number or 03316302208 are circulating.

The scam caller claims to be from a 'property repair organisation' and asks if you have damp or mould in your property.

These calls are used by scammers to obtain as much personal or financial information from you as possible.

If you receive a scam call you can report it to your provider by texting the word ‘call’ followed by the phone number to 7726.

You’ll then receive a message asking you for the scam number.

22 April

Microsoft impersonation email

A fake Microsoft email threatens 'account suspension' after receiving '50 complaints about your email address.'  

The email then prompts you to 'review your account information' by following a phishing link.

This will lead to a dodgy website which attempts to obtain your personal data.

To report scam emails, forward them to report@phishing.gov.uk and phishing websites can be reported to the National Cyber Security Centre.

18 April

Tesco scam email

A dodgy email impersonating Tesco claims to offer a £500 gift card.

The email leads to a malicious survey website which asks you to answer a few questions before attempting to obtain your personal and financial information.

Scam emails can be reported by forwarding them to report@phishing.gov.uk and phishing websites can be reported to the National Cyber Security Centre.

17 April

Taylor Swift fans targeted by concert ticket scams

Lloyds Bank estimates that more than £1 million could have been lost in the UK to fraudsters selling fake Taylor Swift tickets.

The warning comes after the bank received over 600 scam reports from its customers. 

To avoid ticket scams:

• Stick to official retailers and competitions.
• Be wary of buying tickets from sellers on social media as many ticket scams begin on these platforms.
• Be suspicious of too good to be true prices.
• Don't pay via bank transfer as you'll have a hard time being reimbursed if you do.

Read our story on avoiding concert ticket scams.

15 April

PCG program messages

Facebook users are being targeted by messages asking them about the 'PCG program.'

These messages offer fake grants and are typically sent by your Facebook contacts who've had their accounts hacked.

They will most likely go on to send you a phishing link which invites you to sign up to a this scam offer.

If you receive a message like this from one of your contacts, contact them using a different platform and let them know that they may have been hacked.

10 April

Beware of Facebook funeral scams

The Chartered Trading Standards Institute (CTSI) is warning of scammers using Facebook to target the friends and family members of the recently deceased.

Scammers are looking through funeral notices and then creating accounts to connect with the friends and family members.

Typically, they'll send phishing links to 'live streams' of the funeral which will ask for personal and financial information.

They're also asking for donations in an attempt to con mourners out of their money.

To report a profile on Facebook, select the three dots in the top right-hand corner of the person’s profile page and click ‘Find support or report’. You can then select the reason for reporting the profile.

To block a profile, click on the same three dots and select ‘Block’.

9 April

Celebrity presenter Alison Hammond used in scam ads

A series of scam ads on Facebook and Instagram appear with Alice Hammond's image.

Some of the ads also impersonate the BBC and ITV news in fake news stories.

The ads lead to dodgy retail websites which attempt to steal your personal data.

You can report dodgy ads on Facebook and Instagram by selecting the three dots in the top right corner of the post and pressing ‘report.’

Scam websites can be reported to the National Cyber Security Centre. 

3 April

Student Finance impersonation text

A scam text impersonating Student Finance England includes a link to a phishing website imitating the official government website.

The text tells you to follow the link to make sure 'your maintanance (sic) arrives on time' and the website asks for your personal data.

Scam texts can be reported by forwarding them to 7726 and scam websites to the National Cyber Security Centre.

2 April

WhatsApp Gold scam returns

A scam which dates all the way back to 2016 has returned. In it, WhatsApp users are targeted by fraudsters offering 'WhatsApp Gold.'

It starts when a fraudster messages you on WhatsApp promoting 'WhatsApp Gold' which they claim gives you exclusive features.

The message also includes a link, which when clicked on leads to a malicious site which asks for your phone number.

This could sign you up to an expensive subscription service, steal your data or install malware onto your device.

To report WhatsApp senders, click on the sender's number, scroll down and select 'report.'

DVLA impersonation email

A scam email claiming to be from the DVLA tells you that 'you are not up to date with your current vehicle tax' and threatens you with a fine or other penalties if you don't pay.

A malicious link is included to complete a form to 'be up to standard with the DVLA legal requirements.'

This will lead to a dodgy site where your details will be stolen by fraudsters.

Scam emails can be reported by forwarding them to report@phishing.gov.uk and phishing websites can be reported to the National Cyber Security Centre.

Lidl scam ad

A dodgy advert on Instagram and Facebook tells you that 'Lidl is giving away Dell laptops to everyone in the UK over the age of 35.'

It leads to a website where you're asked to complete survey questions before selecting a box with the 'prize' in and asked for your details to 'pay for delivery.'

Scam ads can be reported by selecting the three dots in the top corner and pressing 'reporting.' Malicious websites can be reported to the National Cyber Security Centre.

25 March

Ozempic phishing scam

Scammers are setting up fake phishing websites peddling the new weight loss drug Ozempic, cybersecurity firm Kaspersky has warned.

The websites ask for your personal details including your name, address and banking information.

Malicious websites can be reported to the National Cyber Security Centre.

20 March

Evri scam email

Fraudsters are again impersonating Evri in phishing emails which lead to malicious websites. 

This email tells you that you must reschedule a parcel delivery after a failed attempt.

Scam emails can be reported by forwarding them to report@phishing.gov.uk and phishing websites can be reported to the National Cyber Security Centre.

19 March

PayPal invoice scam

Scammers impersonating PayPal are sending recipients a 'receipt' for a high-value order in an attempt to get them to call a dodgy phone number.

The number is provided if you 'didn't authorise this charge' and leads to a phone scam where a fraudster will try to obtain your personal details.

Don't click on the links in these emails and don't respond to them.

To report scam emails, forward them to report@phishing.gov.uk.

15 March

McAfee impersonation email

This 'warning' email purporting to be from McAfee claims 'your internet protection is about to end.'

It includes a phishing link titled 'restore now'. This will lead to a malicious website asking for your personal and financial information.

Scam emails can be reported by forwarding them to report@phishing.gov.uk and phishing websites can be reported to the National Cyber Security Centre.

13 March

Norton auto-renewal

Emails that send you an antivirus auto-renewal receipt are doing the rounds again.

A Norton impersonation email claims to be invoicing you for nearly $500 and tells you to call a number if you did not authorise this.

Even though the email claims that it won't be charging customers for an auto-renewal this year, as a 'gesture of goodwill,' fraudsters are still banking on you calling the number to query the invoice.

The number will put you through to a scammer who will attempt to solicit personal data from you.

To report scam emails, forward them to report@phishing.gov.uk.

11 March

Apple ID scam

Emails which tell you that your 'Apple ID has been compromised' are circulating.

They say that 'your Apple ID has been blocked for security purposes' and will be deleted. You are given you 24 hours to provide the 'necessary information.'

The email also includes a phishing link which leads to a site that tries to steal your personal data.

To report scam emails, forward them to report@phishing.gov.uk and phishing websites can be reported to the National Cyber Security Centre.

8 March

ITV impersonation email

This scam email impersonating ITV offers a subscription to the ITV X streaming service for just £2 a year.

The link in the email leads to a phishing website which asks for your address, phone number, email and bank details.

You can forward scam emails to report@phishing.gov.uk and phishing websites can be reported to the National Cyber Security Centre.

6 March

Post Office phishing text

This scam text impersonating the Post Office claims a parcel delivery was unsuccessful. 

It includes a link to 'rebook delivery', which leads to a phishing website. 

To report scam texts, forward them to 7726. Phishing websites can be reported to the National Cyber Security Centre.

5 March

DVLA scam email

A scam email impersonating the Driver and Vehicle Licensing Agency (DVLA) tells you that 'your vehicle is no longer up to date with its current road tax.'

It also includes a warning that this is the last reminder it will issue you and a dodgy link to fill out a form to be 'up to standard with the DVLA legal requirements.'

You can forward scam emails to report@phishing.gov.uk and phishing websites can be reported to the National Cyber Security Centre.

1 March

'Mystery Box' scam emails

Action Fraud says it has received more than 7,900 reports of scam emails offering free 'mystery boxes'.

The emails impersonate well-known retailers and claim to offer a box of free items to the recipient.

The links in these emails lead to malicious phishing websites where scammers attempt to steal your personal and financial information.

You can forward scam emails to report@phishing.gov.uk. Phishing websites can be reported to the National Cyber Security Centre.

29 February 

HMRC scam email

This dodgy email claims to provide a link to your 'Government Gateway Online Account.'

It claims that your HMRC online business profile is 'not up to date' and includes a link to a phishing website.

You can report HMRC impersonation emails by forwarding them to phishing@hmrc.gov.uk with a subject line describing the email, such as ‘scam HMRC email.'

28 February

Amazon scam ad

A scam Facebook ad impersonating Amazon claims to offer 'electronic kits for every Briton.'

In return for this, it asks you to 'answer 3 questions' and includes a link to a phishing website.

To report scam ads on Facebook, select the three dots before pressing 'report'.

27 February

Harry styles appears in BBC deep fake video

A BBC presenter has warned on social media that a fake news video of them appearing with Harry Styles is circulating.

The short clip, which mimics the BBC, features a presenter who claims that Harry Styles has 'launched a new app in which Britons could become very wealthy.'

This will most likely lead to an investment scam where fraudsters will try to lure you into their 'too good to be true' money-making schemes.

26 February

Sophie Ellis-Bextor and Le Creuset scam ad

A number of ads featuring singer Sophie Ellis-Bextor and her hit song 'Murder on the Dancefloor' are being used to impersonate cookware company Le Creuset.

The ads claim that the singer has teamed up with the company 'to hand out 5,000 complete cookware sets' and includes links to malicious websites.

These 'bait and switch' scam ads lead to random dodgy retailers selling skincare.

To report scam ads on Instagram, press the three dots on the top right hand corner and press 'report'.

On Facebook, also select the three dots before pressing 'report'.

Scam websites can be reported to the National Cyber Security Centre.

23 February

Dodgy train ticket ads on Facebook

These scam adverts on Facebook claim to offer a year of rail travel for just £3.

The ads, impersonating Great Western Railway, lead to a malicious site that will phish for your personal data.

To report ads on Facebook, select the three dots in the top right and then press 'report ad.'

Scam websites can be reported to the National Cyber Security Centre.

22 February

Copycat BBC website

This dodgy article uses BBC branding. It claims the TV presenter Richard Hammond is being sued by the Bank of England.

The fake eye-catching headline is used to draw readers in, before targeting them with adverts for dodgy cryptocurrency firms. 

If you click on a link on the page you'll be asked for your personal information. You'll then be contacted by fraudsters attempting to lure you into an investment scam.

Genuine providers of financial services will be listed in the Financial Conduct Authority (FCA) register.

Scam websites can be reported to the National Cyber Security Centre.

21 February 

Smeg kettle scam ad

This fraudulent advert offers a Smeg kettle worth around £130 for just £3 from Lidl. It claims that you can receive the product by answering a few questions.

The advert will most likely lead to a dodgy phishing site where fraudsters will try to obtain your personal information.

To report a scam advert on Facebook, select the three dots on the top right corner and press 'report ad.'

20 February

Europol scam email

A dodgy email impersonating Europol, the EU's law enforcement agency, claims the recipient is 'subject to a judicial investigation.'

It includes a downloadable 'court letter'. If you click to download the attachment, malware may be downloaded onto your device.

You can forward scam emails to report@phishing.gov.uk to report them.

19 February

DSB job scams

The Disclosure and Barring Service (DBS),  which helps employers make safer recruitment decisions by processing and issuing DBS checks, is warning of job scams.

These scams are an example of advance fee fraud, where fraudsters ask for an upfront fee for a DBS check for a non-existent job.

Some signs of a DBS job scam include:

• An employer asking for a DBS check for jobs outside of roles in education, health and social care, and security.
• Someone asking for more than £18 for a basic check and £38 for an enhanced check. However, some firms will charge an admin fee.
• Anyone who refers to the service as the Criminal Records Bureau (or the CRB). It was changed to the Disclosure and Barring Service in 2012.
• Websites which use the DBS logo as organisations that are registered with DBS are not permitted to use the logo on their websites.

If a potential employer has asked you to complete a DBS check, ask who is processing the check. If it's the employer, contact DBS or Disclosure Scotland to confirm their legitimacy.

If it's a company carrying out the check on behalf of other employers, check to see if the company is registered to use the service on the government's website.

Be wary of life insurance scams

Action Fraud is warning a rise in reports of scam emails which claim to be from companies selling life insurance.

The emails offer a 'free quote' which then leads to phishing websites designed to steal your data.

To report scam emails, forward them to report@phishing.gov.uk.

You can report scam websites to the National Cyber Security Centre.

16 February

Royal Mail delivery texts

This text message impersonating Royal Mail claims that 'a package cannot be delivered due to incomplete address information.' 

It includes a link to confirm your address. If you click the link, you'll likely be taken to a phishing website.

Scam texts can be reported by forwarding them to 7726.

14 February

Google impersonation email

This scam email says a 'suspected virus' has been detected on your device and you are at a 'high risk'.

The email includes a dodgy link to complete a 'security check'. This link may be used to steal your personal information or download malware on to your device.

To report scam emails, forward them to report@phishing.gov.uk.

12 February 

Norton impersonation email

A scam email, also known as a phishing email, impersonates security software company Norton and tells you that you have set up a scheduled payment for £499.99 for a Norton product.

It gives you a number to call if you didn't authorise this payment.

Calling this number will likely put you through to a scammer who will attempt to obtain further information to scam you. 

Don't call the number. To report scam emails, forward them to report@phishing.gov.uk.

9 February

TV Licensing scam email

This scam email spoofs an official TV Licensing email address. The subject line reads 'you're about to lose your licence'. 

The message invites you to renew your licence online, but if you click on the link you'll be sent to a phishing website.

If you receive an email that claims to be from TV Licensing, don't click on any links. 

Instead, navigate to the genuine TV Licensing website (www.tvlicensing.co.uk) and log in to your account to see if you have any messages. 

Scam emails can be forwarded to report@phishing.gov.uk and dodgy websites to the National Cyber Security Centre.

Fake celebrity endorsement ads on YouTube

This dodgy advert uses an image of Richard Hammond appearing on This Morning to lure people into a phoney investment scheme.

The ad leads to a copycat BBC website which contains an 'article' promoting a scam investment company.

To report scam ads on YouTube, select the three dots under the ad and 'report ad.' Malicious websites can be reported to the National Cyber Security Centre.

7 February

Energy grant scams

Trading Standards Scotland has warned of cold callers and doorstep scammers posing as representatives of energy companies.

The cold callers tell you that you're eligible to receive funding or grants for boilers, insulation or heating systems.

You can protect yourself from doorstep scams by following our tips .

If you receive a spam call on your iPhone, you can report it to your provider by texting the word ‘call’ followed by the phone number to 7726.

On Android, text the word ‘call’ to 7726. You’ll then receive a message asking you for the scam number.

Evri impersonation scam text

A phishing scam text impersonates Evri and tells you that due to 'damage to the outer package,' your 'address information is lost' and therefore your parcel 'can not be delivered.'

This is the latest delivery attempt scam created by fraudsters to trick you into entering your details into a dodgy site.

Scam texts can be reported by forwarding them to 7726 and malicious websites to the National Cyber Security Centre.

5 February

DVLA scam email

A dodgy email impersonating the Driver and Vehicle Licensing Agency (DVLA) tells you that you need to make a payment update due to 'an issue with your last transaction' and leads to a phishing website.

Scam emails can be forwarded to report@phishing.gov.uk and dodgy websites to the National Cyber Security Centre.

Etsy scam message

A message from scammers is targeting Etsy sellers saying: 'Due to an update to our payment system, orders on your account are currently on hold.'

It goes on to say that your store needs to be verified in order to be fully operational and it includes a link to complete this.

The dodgy link leads to a copycat website asking for your financial details.

Genuine messages from Etsy will always appear in the 'From Etsy' folder. If you receive a suspicious message, you can mark it as spam on Etsy by selecting the message and choosing 'spam'.

You can report scam websites to the National Cyber Security Centre.

1 February

Disney+ impersonation email

This scam email offers 12 months of free streaming on Disney+.

The link leads to a phishing website, which informs you that your membership has expired and encourages you to extend it for free.

You'll then be asked to provide your name, phone number, email address, and card details.

Scam emails can be forwarded to report@phishing.gov.uk and dodgy websites to the National Cyber Security Centre.