The latest scam alerts from Which?

The scams you need to know about this month, including parking scams, emails impersonating banks and fake theme park ticket giveaways.
Which?Editorial team

Find out about the latest scams trending this month. Come across a scam? Let us know by using our scam sharer tool.

For weekly updates on the scams you need to be aware of, sign up to our free scam alerts service.

6 November

Portable heater scam email

A scam email advertising a portable heater
A scam email advertising a portable heater

A dodgy email which claims to offer a portable heater for 30% off and says that the device is endorsed by Elon Musk. 

You're encouraged to follow a link to 'order now' which will lead to a malicious site that'll ask for your personal and financial data.

This is yet another example of a celebrity scam advert. Scam emails can be reported by forwarding them to report@phishing.gov.uk.

Phishing websites can be reported to the National Cyber Security Centre.

4 November

Tesco voucher scam

A scam email impersonating Tesco
A scam email impersonating Tesco

An email impersonating Tesco offers a non existent voucher for £750.

It includes a dodgy link to a phishing website which will try to get your personal and financial details.

You can report scam emails by forwarding them to report@phishing.gov.uk.

Malicious websites can be reported to the National Cyber Security Centre.

28 October

Fake Space NK shop

A scam website impersonating Space NK
A scam website impersonating Space NK

A malicious website impersonating beauty retailer Space NK claims to offer a beauty advent calendar for £28.99 reduced from £125.03.

To purchase the non-existent calendar, you are asked for your shipping and financial details which can be then used to scam you.

The actual advent calendar is sold on Space NK's official website (www.spacenk.com) for £150.

Phishing websites can be reported to the National Cyber Security Centre.

Lloyds Bank scam email

A scam email impersonating Lloyds Bank
A scam email impersonating Lloyds Bank

A dodgy email impersonating Lloyds Bank tells you that the bank is 'changing the way it looks' and that you need to 'reauthenticate' your account to continue using it.

The email provides a link to do this which will lead to a phishing website designed to steal your personal and financial information.

You can report scam emails by forwarding them to report@phishing.gov.uk.

Malicious websites can be reported to the National Cyber Security Centre.

25 October

Google scam email

A scam email impersonating Google
A scam email impersonating Google

A dodgy email impersonating Google tells you that your iPhone has 'been infected with viruses' and provides a button which claims to remove them.

This will lead to a phishing website or download malware to your device.

You can report scam emails to report@phishing.gov.uk.

21 October

TikTok scam text

A text promoting a job scam
A text promoting a job scam

A text shown as being sent from TikTok claims to offer a 'part time online job.'

To find out more details about this 'job', you're asked to contact the sender of the text on WhatsApp.

This will most likely lead to what's known as a task scam. This is when you're asked to complete simple tasks for money but are eventually asked to invest money to 'upgrade your account.' As well as never being paid, you'll never see any invested money returned to you.

Do not reply to the message. Scam texts can be reported by forwarding them to 7726. 

Action Fraud warns of fake Starbucks email

Over a two week period, Action Fraud has received 916 reports of phishing emails impersonating Starbucks.

The emails claim to offer a 'free coffee bundle' by following a link to a malicious site that will steal your personal and financial information.

You can report scam emails to report@phishing.gov.uk

Phishing websites can be reported to the National Cyber Security Centre.

17 October

Scam Dyson vacuum giveaway

A scam website claiming to offer a Dyson V15 vacuum
A scam website claiming to offer a Dyson V15 vacuum

A series of scam adverts on Facebook and Instagram claim to offer a free Dyson V15 vacuum in exchange for completing a short survey on a malicious site.

The website will ask for your personal and payment information in exchange for the non-existent vacuum.

Scam ads can be reported by selecting the three dots in the top right corner of the ad and selecting report.

Phishing websites can be reported to the National Cyber Security Centre.

14 October

Nationwide scam text

A scam text impersonating Nationwide
A scam text impersonating Nationwide

A text message impersonating Nationwide tells you that an attempted transaction has been declined.

It provides a number to call, in the hope you'll dial it after not recognising the transaction.

The number has been linked to other scams including one which impersonates Barclays.

Scam texts can be reported by forwarding them to 7726.

'Heating subsidy' scam text

A scam text claiming to offer a 'heating subsidy'
A scam text claiming to offer a 'heating subsidy'

A scam text claims that 'the government decided to provide subsidies in the form of living expenses' due to 'the cancellation of heating subsidies this winter.'

It then provides a malicious link which will lead to a website attempting to steal your personal and financial information to 'apply.'

Scam texts can be reported by forwarding them to 7726.

Phishing websites can be reported to the National Cyber Security Centre.

11 October

Lloyds Bank scam email

A scam email impersonating Lloyds Bank
A scam email impersonating Lloyds Bank

A scam email impersonating Lloyds Bank tells you that the bank is 'changing the way it looks' and needs you to 'reauthenticate to continue using your account'. It then asks you to click on a link to proceed.

On Lloyds Bank's official website, it says that genuine emails will always greet you by name, include part of your main account number and never link directly to the internet banking login page.

You can report scam emails to report@phishing.gov.uk

Phishing websites can be reported to the National Cyber Security Centre.

9 October

'Living expenses' scam text

A scam text claiming to be about a 'living expenses subsidy scheme'
A scam text claiming to be about a 'living expenses subsidy scheme'

Another dodgy text impersonating the government is circulating.

It claims to be about a 'living expenses subsidy scheme' and asks you to 'update your information' to avoid missing out on the payment by following a phishing link.

You can report scam texts by forwarding them to 7726.

Phishing websites can be reported to the National Cyber Security Centre.

7 October

Screwfix impersonation email

A scam email impersonating Screwfix
A scam email impersonating Screwfix

A scam email claiming to be from Screwfix tells you that you have the opportunity to receive a 'BOSCH Hammer Drill Kit.'

To receive this product, you're asked to take a short survey about your experience with Screwfix by following a dodgy link.

This will lead to a malicious website which will ask for your personal and financial information.

You can report scam emails to report@phishing.gov.uk and phishing websites can be reported to the National Cyber Security Centre.

3 October

NatWest scam text

A scam text impersonating NatWest
A scam text impersonating NatWest

A text message claiming to be from NatWest gives you a phoney new 'mobile banking code'.

The text leaves a number to call if you were not expecting the mobile banking code, which will put you through to a scammer who will attempt to get your personal and financial information.

You can report scam texts by forwarding them to 7726.

Vodafone points scam

A scam text impersonating Vodafone
A scam text impersonating Vodafone

A scam text impersonating Vodafone tells you that you have '5131 points in your account' which will 'expire today.'

To 'redeem' them you must follow a dodgy phishing link.

We've previously covered the same 'points' scam text impersonating EE. The link led to a website which asked for your phone number and home address.

Scam texts can be reported by forwarding them to 7726.

Phishing websites can be reported to the National Cyber Security Centre.

30 September

UK Supreme Court parking fine text

The UK Supreme Court (UKSC) has revealed that it has received a high number of reports about texts impersonating it and demanding money.

The text tells you that you'll be prosecuted due to an unpaid parking fine if you 'refuse to pay.'

It leads to a phishing website where your personal and payment info will be stolen.

The UKSC will never contact you out of the blue asking for money and does not send texts.

Scam texts can be reported by forwarding them to 7726.

Phishing websites can be reported to the National Cyber Security Centre.

26 September

Disney+ phishing email

A scam email impersonating Disney+
A scam email impersonating Disney+

A scam email impersonating Disney+ tells you that your subscription to the streaming platform could not be renewed.

It encourages you to follow a dodgy link to log into and update your account.

You can report scam emails to report@phishing.gov.uk and malicious websites to the National Cyber Security Centre.

24 September

Microsoft scam email

A scam email impersonating Microsoft
A scam email impersonating Microsoft

A scam email impersonating Microsoft tells you that 'suspicious security risks are being observed on your Windows computer.'

It goes on to say that your computer is at risk of being 'hacked' or 'infected with malware' and provides a link to 'protect' your device using 'McAfee anti virus.'

This link will lead to a phishing websites or download malware to your device.

You can report scam emails to report@phishing.gov.uk and malicious websites to the National Cyber Security Centre.

23 September

Jobseeker's Allowance (JSA) scam text

A scam text claiming to offer Jobseeker's Allowance
A scam text claiming to offer Jobseeker's Allowance
A scam website claiming to offer Jobseeker's Allowance
A scam website claiming to offer Jobseeker's Allowance

A scam text impersonating tells you to 'confirm your personal and bank account information within 24 hours' to claim Jobseeker's Allowance.

It leads to a convincing phishing website impersonating gov.uk which asks for these details.

Recently, we uncovered two other scam texts leading to government impersonation websites which claim you have a parking fine and are owed a Cost of Living payment.

Scam texts can be reported by forwarding them to 7726.

Phishing websites can be reported to the National Cyber Security Centre.

iCould storage scam emails

Action Fraud has warned of dodgy emails claiming your iCloud storage is about to run out after receiving 1,861 reports about these emails over a two-week period.

The emails lead to phishing websites that steal your Apple ID login details and other personal and financial information.

You can report scam emails to report@phishing.gov.uk and malicious websites to the National Cyber Security Centre.

19 September

AA impersonation email

A scam email impersonating the AA
A scam email impersonating the AA

An email impersonating the AA claims to offer a 'free car emergency kit' and includes a phishing link which will attempt to steal your personal and financial information.

You can report scam emails to report@phishing.gov.uk and malicious websites to the National Cyber Security Centre.

Fake Action Fraud page

A message from a Facebook page impersonating Action Fraud
A message from a Facebook page impersonating Action Fraud

A Facebook page impersonating Action Fraud is sending messages on the platform, offering assistance with issues including hacking and scam recovery.

These messages are fraudulent. You can only report scams to Action Fraud on its official website

16 September

Spotify impersonation email

A scam email impersonating Spotify
A scam email impersonating Spotify

A scam email impersonating Spotify attempts to get you to follow a link by saying that your membership has expired, but you'll get 90 days for free as part of a loyalty program.

The link will lead to a malicious website designed to steal your personal and financial information.

You can report scam emails to report@phishing.gov.uk and malicious websites to the National Cyber Security Centre.

Apple scam pop-up

A pop up impersonating Apple
A pop up impersonating Apple

A pop-up impersonating Apple tells you that 'hackers are watching you' and continues to pile on the pressure by saying that you shouldn't close the page and you only have two minutes to fix the issue.

It gives you a link to follow to 'protect your connection.'

Typically, these pop-ups appear if you've followed a dodgy link. This could be from an email, text or even a post from a hacked account on social media.

You can ignore this message. If you're concerned about viruses, download an antivirus on your device.

12 September

iPhone giveaway scam

A scam email impersonating O2
A scam email impersonating O2

A scam email impersonating O2 tells you that you've won an iPhone 15 Pro and simply need to complete 'a quick 4 minute survey' to receive this 'fantastic prize'. 

This will lead to a phishing website designed to take your personal and payment information.

You can report scam emails to report@phishing.gov.uk and malicious websites to the National Cyber Security Centre.

9 September

Action Fraud warns of Keto gummies scam

Action Fraud has received 127 reports about phishing emails from 'People's Keto Gummies.'

The emails claim that these gummies will 'support burning fat' and lead to malicious websites which ask for your personal and financial data.

Scam emails can be reported by forwarding them to report@phishing.gov.uk and phishing websites to the National Cyber Security Centre

3 September

Broadband call scam

There have been several recent reports on Who Called Me about scam callers claiming to be from BT or Virgin Media.

Some callers asked the recipient for information about their internet routers and others said they were calling to talk about issues with their internet connection.

Scam callers will impersonate legitimate companies and come up with reasons to get your personal and financial details.

You can report scam calls by forwarding the number to 7726.

You can also report scam calls to Action Fraud or call the police on 101 if you’re in Scotland.

28 August

NatWest impersonation email

A scam email impersonating NatWest
A scam email impersonating NatWest

A dodgy email claiming to be from NatWest tells you that your 'NatWest credit card account' hasn't been updated and that you will lose access to your account in 48 hours.

To stop this, the email provides a malicious link to 'update' your account.

Scam emails can be reported by forwarding them to report@phishing.gov.uk and phishing websites to the National Cyber Security Centre

27 August

'You've been hacked' email

An email from a 'hacker' asking you if you've heard of a 'Pegasus spyware program' attempts to blackmail you into parting with your money.

The hacker says that they have installed the program onto all your devices, has access to your webcam, emails and call records and has recorded compromising videos of you.

The hacker then asks for you to pay them in Bitcoin or every number in your contact Iist will suddenly receive these vidеоs.

You can safely ignore this email and report it by forwarding it to report@phishing.gov.uk

21 August

Netflix scam email

A scam email impersonating Netflix
A scam email impersonating Netflix

An email impersonating Netflix tells you that 'your membership expired today' and encourages you to follow a link to enjoy '1 year for free.'

This link will lead to a malicious website where your personal details will be asked for.

To report scam emails, forward them to report@phishing.gov.uk

Phishing websites can be reported to the National Cyber Security Centre

HMRC 'tax refund' scam email

Action Fraud has warned of an increase in emails impersonating HMRC which tell you you're owed a tax refund.

These emails lead to dodgy sites which look genuine and ask for your personal and financial information.

Action Fraud has received 731 reports of these emails over the last two weeks which has led to the removal of over 337,000 malicious websites.

Read our guide on how to spot HMRC phone, text and email tax scams.

To report scam emails, forward them to report@phishing.gov.uk

Phishing websites can be reported to the National Cyber Security Centre

19 August

Morrisons impersonation email

A scam email impersonating Morrisons
A scam email impersonating Morrisons

A scam email claims to offer a brand new KitchenAid and leads to a dodgy phishing website.

The website asks you to complete a survey about your experience as a Morrisons customer before asking for your personal and financial details

Forward suspicious emails to report@phishing.gov.uk to report the email.

Dodgy websites can be reported to the National Cyber Security Centre

15 August

Drivers warned about QR code parking scams

Drivers are being warned to avoid scanning QR codes when paying for parking, following a spate of scams.

The RAC says motorists should only make payments via cash, card or official apps.

In recent weeks there have been a series of incidents of fraudsters placing stickers featuring QR codes on parking signs. 

Drivers who scan the codes are taken to dodgy websites asking them to enter their card details, which criminals use to spend money from their accounts.

We recently reported on drivers being tricked into signing up for expensive subscriptions after scanning QR codes in car parks.

13 August

Natwest impersonation scam

Fake emails impersonating Natwest claim that the contact number on your account has changed. 

The email includes a link to a malicious website that's designed to steal personal and financial information.

Action Fraud has received over 150 reports of these emails.

If you receive a suspicious email from your bank, don't reply to it and don't click on any links or give away any personal information. 

Contact your bank using an official communication channel to confirm the authenticity of the email. 

Forward suspicious emails to report@phishing.gov.uk to report the email.

7 August

Fake Evri messages

Which? has seen several fake Evri text messages circulating.

The messages claim there is incomplete or incorrect address information for your delivery and instruct you to follow a dodgy link to provide these details. 

It also claims that the details must be provided within 24 hours.

Do not click on the link. Forward suspicious messages to 7726 and then delete them.

Dodgy websites can be reported to the National Cyber Security Centre

5 August

NatWest impersonation emails

Action Fraud, the UK's fraud reporting centre, says it has received 151 reports of scam emails claiming to be from NatWest over a two-week period.

These dodgy emails claim that the contact number associated with your bank account has changed, and urge you to follow a malicious link to 'cancel the request'. Don't click any links in these kinds of messages.

You can report scam emails by forwarding them to report@phishing.gov.uk.

1 August

Microsoft customer support impersonation email

A scam email impersonating Microsoft
A scam email impersonating Microsoft

This email purporting to be from Microsoft customer services claims that the tech company has received '62 complaints about your email account from Google Drive.'

It goes on to say that your account has been spreading malware and viruses via spam emails sent from your email address.

It includes a link to 'run and scan for viruses.' However, this leads to a malicious site that will either download malware to your device or take you to a phishing website.

You can report scam emails by forwarding them to report@phishing.gov.uk.

Suspicious websites can be reported to the National Cyber Security Centre.

31 July

Dodgy Alton Towers giveaways

A page on Facebook claiming to offer tickets to Alton Towers
A page on Facebook claiming to offer tickets to Alton Towers
Rewards Giant claiming to offer a £500 gift card to Alton Towers
Rewards Giant claiming to offer a £500 gift card to Alton Towers

These dodgy Facebook posts claim to offer free tickets and gift cards for the theme park Alton Towers.

They ask users to like the page and follow a link to be in with a chance of getting the prizes.

The link takes you to Rewards Giant, a company we've previously reported on.

Suspicious websites can be reported to the National Cyber Security Centre.

You can report pages, posts and people on Facebook by selecting the three dots in the top right corner and selecting 'report.'

Personal alarm scam calls

Nottingham On Call, a service which provides personal alarms for elderly and vulnerable people, has warned that it is being impersonated in dodgy phone calls. 

The callers claim to be getting in touch with customers about having their 'lifeline' equipment swapped. We've previously reported on similar scams.

Nottingham On Call has warned customers not to let anyone into their homes who claim they're visiting to swap their equipment. 

If you receive a suspicious call, you can inform Nottingham On Call on 0115 746 9777. 

30 July

Dodgy Tesco voucher

A website impersonating Tesco
A website impersonating Tesco

 

This dodgy website impersonating Tesco attempts to entice victims with the promise of a free voucher. 

The link in the email leads you to a website from 'Rewards Giant'. This is a dubious 'rewards' company which regularly claims to offer free vouchers for popular retailers.

We have previously reported on this company and how shoppers have struggled to obtain the promised gift cards.

Suspicious websites can be reported to the National Cyber Security Centre.

24 July

Global IT outage scams

The National Cyber Security Centre has warned of an increase in phishing attempts referencing the global IT outage.

Phishing is when a scammer targets you using an email containing malicious links. 

Opportunistic scammers typically take advantage of big events, like the global IT outage, to con their victims.

You can report scam emails by forwarding them to report@phishing.gov.uk, websites can be reported to the National Cyber Security Centre.

Scam texts can be reported by forwarding them to 7726.

23 July

Lloyds Bank impersonation email

A scam email impersonating Lloyds Bank
A scam email impersonating Lloyds Bank

An email imitating Lloyds Bank claims that you need to complete an 'account verification process' and attempts to get you to click on a malicious link.

The email states that this is due to the bank 'implementing new login authentication procedures.'

You can report scam emails by forwarding them to report@phishing.gov.uk, websites can be reported to the National Cyber Security Centre.

Evri scam email

A scam email impersonating Evri
A scam email impersonating Evri

An email impersonating delivery company Evri tells you that your delivery has been delayed.

It goes on to say that your 'package has been held due to an unpaid invoice' and leads to a phishing site where you're asked to pay to 'resume delivery.'

Scam emails can be reported by forwarding them to report@phishing.gov.uk and websites can be reported to the National Cyber Security Centre.

22 July

Wetherspoons Facebook scam

A scam post on Facebook impersonating Wetherspoons
A scam post on Facebook impersonating Wetherspoons

A Facebook page impersonating Wetherspoons claims to offer a free meal for two.

The fake promotion is shared in a post which asks users to like and comment to receieve the offer.

In the comments, the fake Wetherspoons page shares a link which sends you to a website to gather your financial and personal details.

You can report scam posts and pages by selecting the three dots in the top right corner and pressing 'report.'

Websites can be reported to the National Cyber Security Centre.

HMRC tax rebate email

A scam email impersonating HMRC
A scam email impersonating HMRC

An email telling you that you're eligible for a tax refund is a scam impersonating HMRC.

The email includes a 'UK Gateway' logo and a link to a malicious website which will ask for your personal and financial information.

You can report scam emails by forwarding them to report@phishing.gov.uk, websites can be reported to the National Cyber Security Centre.

11 July

Transport for West Midlands impersonation scam

A scam post impersonating Transport for West Midlands
A scam post impersonating Transport for West Midlands

Transport for West Midlands has issued a warning about dodgy Facebook posts offering a 'Swift pay as you go' card. 

The posts claim that the cards provide free public transport for a year. If you click on a link, you'll be taken to a malicious phishing websites that will attempt to obtain your personal and financial information.

To report posts on Facebook, select the three dots in the top right corner and press 'report.'

Websites can be reported to the National Cyber Security Centre.

10 July

Counterfeit money warning

A scam Instagram page offering fake money
A scam Instagram page offering fake money

An Instagram account offering counterfeit money claims its products are printed to 'pass all security tests.'

The account includes a link to follow for 'further information.' 

Printing cash is illegal and any money you part with will most likely give you nothing in return, the scammer could also use your personal details to scam you again.

Which? previously uncovered over a dozen scam pages claiming to sell fake money.

To report scam posts and accounts on Instagram, select the three dots on the right and press 'report.'

5 July

Scam housing repair calls

We've received a growing number of reports of scammers calling homeowners and tenants claiming to be from a 'housing disrepair team'.

These calls, which come from a variety of numbers, may make bogus offers of financial help to solve damp or mould problems.

If you receive a scam call on an iPhone, you can report it to your provider by texting the word ‘call’ followed by the phone number to 7726.

If you have an Android phone, text the word ‘call’ to 7726. You’ll then receive a message asking you for the scam number.

2 July

Amazon phishing email

A scam email impersonating Amazon
A scam email impersonating Amazon

A scam email impersonating Amazon tells you that your payment method is 'no longer valid' and your Prime Membership is about to renew.

It goes on to provide a link to a malicious website under the guise of updating this information.

This is where scammers will attempt to steal your personal and financial data.

You can report scam emails by forwarding them to report@phishing.gov.uk, websites can be reported to the National Cyber Security Centre.

27 June

Three text scam

A scam text impersonating Three
A scam text impersonating Three

A scam text impersonating the mobile network Three claims there are 'points' in your account that expire in three working days.

It provides a link to 'redeem the points for available rewards'. This leads to a malicious phishing site which attempts to steal your personal details.

Scam texts can be reported by forwarding them to 7726.

You can report emails by forwarding them to report@phishing.gov.uk.

26 June

Halifax impersonation email

A scam email impersonating Halifax
A scam email impersonating Halifax

A scam email impersonating Halifax tells you that the bank has tried to get in contact with you but couldn't, and needs you to update your information.

It then includes a link labelled 'Update Now' which will take you to a phishing website.

You can report scam emails by forwarding them to report@phishing.gov.uk.

24 June

Bosch drill kit scam emails

A scam email impersonating Bosch and Screwfix
A scam email impersonating Bosch and Screwfix

Action Fraud has received 616 reports in a two week period of scam emails offering a free Bosch drill set.

The emails include links to dodgy sites which ask you to fill in a survey and give away your personal and financial information.

You can report scam emails by forwarding them to report@phishing.gov.uk.

Dodgy websites can be reported to the National Cyber Security Centre.

19 June

Waspi warns of fraudulent websites

The Women Against State Pension Age (Waspi) campaign group has warned of a surge in targeted online scams asking for your personal details.

Various dodgy websites advertise that women affected by state pension delays can claim up to £2,950. 

There has been no government announcement of a compensation scheme for Waspi women.

If you've entered your details into one of these fake sites, call your bank immediately using the number on the back of your bank card and report it to Action Fraud, or call the police on 101 if you’re in Scotland.

18 June

Beware of Asda scam emails

A scam email impersonating Asda
A scam email impersonating Asda

Action Fraud has warned that it has received 1,754 reports over a two week period about dodgy emails impersonating Asda.

These emails tell you that you've won a prize, which you can claim by completing a survey.

The links in the email lead to phishing websites which try to get your personal and financial information.

You can report scam emails by forwarding them to report@phishing.gov.uk.

Dodgy websites can be reported to the National Cyber Security Centre.

12 June

'Facebook' phishing emails targeting businesses

A scam email sent from a hacked Facebook account, found by Kaspersky
A scam email sent from a hacked Facebook account, found by Kaspersky

The cybersecurity firm Kaspersky has found examples of scammers hijacking Facebook profiles to send phishing emails to business accounts on Facebook.

After taking over someone's Facebook account, the fraudster changes the display name on the account to '24 Hours Left To Request Review. See Why' and changes their profile picture to an orange icon with an exclamation mark. 

They then publish posts from the hacked Facebook page, tagging business accounts. This then triggers the business to receive an email from Facebook saying their account has been blocked. 

These dodgy emails include a link to 'dispute the decision to block your account'. If you click through, you will be asked for your page name, first and last name, phone number, date of birth and the email address or phone number linked to your Facebook account and your password.

Read our story on protecting and recovering hacked social media accounts here.

Scam websites can be reported to the National Cyber Security Centre.

10 June

Fake political ads

The Bureau of Investigative Journalism (TBIJ) has found over 8,000 adverts featuring false information about politicians on Facebook.

The ads also include AI-manipulated videos and images, with one stating that Labour leader Keir Starmer had been involved in a banking scandal.

Many led to websites which mimic newspaper articles to push dodgy investment platforms.

These websites will most likely try to obtain your personal details. 

Scam ads on Facebook can be reported by selecting the three dots in the top right corner and pressing 'report.'

Dodgy websites can be reported to the National Cyber Security Centre.

6 June

Skechers scam ad

A scam advert claiming to advertise shoes from Skechers
A scam advert claiming to advertise shoes from Skechers

A scam advert for the footwear brand Skechers is circulating on Facebook. The ad leads to a dodgy phishing website.

Scam ads on Facebook can be reported by selecting the three dots in the top right corner and pressing 'report.'

Phishing websites can be reported to the National Cyber Security Centre.

4 June

International FIFA World Cup lottery scam letter

A scam letter is being sent to households which tells you that your name 'drew lucky numbers' in the 'International FIFA World Cup online lottery program'.

It goes on to say that you've won hundreds of thousands of pounds and you need to call a number to claim your prize money. 

Calling this number will put you through to a scammer who will try to obtain your personal and financial information.

Royal Mail provides a form that you can use to report scam letters. You can submit this online or send it to Freepost Scam Mail.

31 May

Energy scam calls

We've received reports of a new wave of scam calls claiming to be from energy companies. 

During these calls, scammers pose as energy providers and attempt to access your personal and financial information.

To report a scam call you can text the word ‘call’ followed by the phone number to 7726.

29 May

Fake solar panel emails

Action Fraud has warned of phishing emails pretending to offer you deals on solar panels.

The emails ask you to check your eligibility for funding to cover the upfront costs of solar panel installation and prompt you to follow a link.

The link asks for personal and financial information, and may install malware on your device.

Action Fraud has received 971 reports in the last two weeks about these emails.

You can report scam emails by forwarding them to report@phishing.gov.uk.

Dodgy websites can be reported to the National Cyber Security Centre.

22 May

Vodafone points scam

A scam text impersonating Vodafone
A scam text impersonating Vodafone

Scam texts promoting fake 'points' that lead to 'rewards' on your Vodafone account take you to dodgy phishing websites.

The texts tell you that you only have three working days to redeem your points.

Don't click on the link. You can report scam texts by forwarding them to 7726, then delete the message. 

Dodgy websites can be reported to the National Cyber Security Centre.

21 May

Fake Asda £250 voucher

Rewards Giant promoting a £250 voucher
Rewards Giant promoting a £250 voucher

Scammers are posting on Facebook groups to promote dodgy vouchers at Asda they claim are worth £250.

The link to claim the voucher provided by the fraudster actually leads to Rewards Giant.

Rewards Giant is company we've previously reported on, which we found could cost you time and money with probably nothing in return if you try to get the voucher.

You can report Facebook profiles by selecting the three dots on the user's profile page and pressing 'find support or report.'

You can report posts and comments by also selecting the three dots next to them before pressing 'report.'

Dodgy websites can be reported to the National Cyber Security Centre.

20 May

Seasalt Cornwall scam websites

A scam advert impersonating Seasalt Cornwall
A scam advert impersonating Seasalt Cornwall

A number of scam ads on Instagram and Facebook are impersonating clothes retailer Seasalt Cornwall to promote fake sales.

The ads claim to offer an 80% discount on items due to store closures.

The retailer's official website is www.seasaltcornwall.com.

To report scam ads on Facebook and Instagram, select the three dots in the top right corner of the advert and press 'report.'

Copycat websites can be reported to the National Cyber Security Centre.

PayPal 'money request' email scam

An email invoice from PayPal sent by a scammer
An email invoice from PayPal sent by a scammer

This scam starts with you receiving an email invoice from 'PayPal' for a high value item, such as an iPhone.

The email includes a number which will put you through to a scammer who will try and get your personal data.

Scammers have previously sent similar emails from a PayPal email address -  service@paypal.co.uk - by exploiting PayPal's 'request money' feature. These emails include a dodgy number in the notes section of the invoice to try and get your personal or financial information.

You can report scam numbers by forwarding the number to 7726.

Scam emails impersonating PayPal can be reported by forwarding them to phishing@paypal.com and report@phishing.gov.uk.

If you receive an email from a genuine PayPal email address about an item you have not purchased, log into your account and select 'Activity'.

You can then click on the fraudulent request and cancel it. 

If you suspect your account has been compromised, you can change your password and security questions by logging into your account.

16 May

Beware of fake bank note ads

A scam ad advertising fake bank notes
A scam ad advertising fake bank notes

The currency exchange service No1 Currency has warned of a surge in adverts selling counterfeit banknotes on social media.

Which? has previously come across these ads, which offer discounts on various currencies. 

Buyers are at risk of being scammed if nothing arrives or by committing a criminal offence, as knowingly possessing or spending fake money is illegal.

You can report scam ads on social media by selecting the three dots in the top right corner and pressing 'report.'

14 May

Action Fraud warns of fake McAfee emails

McAfee scam emails

A large collection of images displayed on this page are available at https://www.which.co.uk/news/article/the-latest-scam-alerts-from-which-aBRLy2b02WkC

Emails claiming to be from computer security software company McAfee tell you that your antivirus subscription needs to be renewed.

The emails lead to malicious websites which attempt to steal your personal and financial information.

Action Fraud has received 4,531 reports of these scam emails since April 2024.

You can report scam emails by forwarding them to report@phishing.gov.uk and phishing websites can be reported to the National Cyber Security Centre.

You can also report fraudulent scams impersonating McAfee to scam@mcafee.com.

13 May

Evri reports an increase in scam texts

Parcel delivery company Evri has issued a scam warning after revealing a 174% increase in reported scams from April 2023 to April 2024.

The scam texts impersonate Evri and usually tell you that you've missed a delivery before redirecting you to a dodgy site where your details will be stolen.

Evri warned consumers to be aware of scam messages being sent via iMessage, Apple’s encrypted messaging service, and Rich Communication Services (RCS), which is used on Google Android devices.

You can report scam texts by forwarding them to 7726. Malicious websites can be reported to the National Cyber Security Centre.

Virgin Media O2 warns of energy scam texts

Virgin Media O2 has issued a warning to beware of energy efficiency grant texts after detecting a significant increase in the number of these texts targeting its customers.

These texts claim to offer grants for energy bills and lead to malicious phishing websites which try to get your personal data.

The provider reports that these texts are now the fourth most common texts reported and blocked on Virgin Media O2’s mobile network.

Scam texts can be reported by forwarding them to 7726 and websites can be reported to the National Cyber Security Centre.

9 May

Amazon 'mystery box' email

A scam email impersonating Amazon
A scam email impersonating Amazon
A scam website impersonating Amazon
A scam website impersonating Amazon

This scam email impersonating Amazon claims that you can receive a 'mystery box' containing a range of products, simply by answering a few survey questions.

It leads to a phishing website where you're asked eight questions. You'll then be asked to enter your personal and financial details - supposedly to pay for the shipping of the mystery box.

You can report scam emails by forwarding them to report@phishing.gov.uk and phishing websites can be reported to the National Cyber Security Centre.

7 May

Diet pill scam emails

A scam email promoting weight loss pills
A scam email promoting weight loss pills

We've previously reported on scammers sending phishing emails advertising weight loss supplements.

These emails are again doing the rounds and promise unrealistic weight loss results in exchange for your personal and financial information. 

Scam emails can be reported by forwarding them to report@phishing.gov.uk and phishing websites can be reported to the National Cyber Security Centre.

HSBC impersonation text

A scam text impersonating HSBC
A scam text impersonating HSBC

This dodgy text claims that there's been an Amazon transaction on your HSBC account and includes a number to call if this wasn't initiated by you.

This number will put you through to a fraudster who will try to get your details. 

Scam texts can be reported by forwarding them to 7726.

2 May

Santander 'new payee' text

A scam text impersonating Santander
A scam text impersonating Santander

This scam text claiming to be from Santander informs you that a new payee has been added to your account.

It encourages you to follow a malicious link to cancel the payee. This website will attempt to steal your personal details.

Scam texts can be reported by forwarding them to 7726.

Phishing websites can be reported to the National Cyber Security Centre.