Scams used to mean a dodgy email from a “Nigerian prince.” Now they look like a text from your bank, a call from someone who already knows your name and address, or a WhatsApp message from a number saved as your son’s. Scammers in 2026 don’t need to trick you into believing something impossible — they just need thirty seconds of distraction, a convincing enough story, and your bank details.
UK banks and card providers refunded hundreds of millions of pounds to scam victims last year, and that’s only the money that got reported. A lot of people don’t report it — out of embarrassment, or because they assume nothing can be done. Neither is true. Scams happen to switched-on people all the time. The ones who recover money fastest are the ones who recognise what’s happening quickly and act straight away.
This article covers the scam types doing the rounds right now, the psychological tricks they all share, and exactly what to do in the first hour if you think you’ve been caught out.
The scams actually working right now
Scammers follow the news and the calendar. Here’s what’s currently doing damage in the UK:
Bank transfer (APP) scams. APP stands for “authorised push payment” — meaning you authorised the payment yourself, even though you were tricked into it. This covers fake delivery text messages (“Your parcel couldn’t be delivered, pay £1.99 to reschedule”), fake HMRC tax rebate texts, and fake calls from “your bank’s fraud team” asking you to move money to a “safe account.” There is no such thing as a safe account. Your real bank will never ask you to transfer money anywhere to protect it.
Investment and crypto scams. Slick websites, fake celebrity endorsements, and “returns” that look real on a dashboard you can log into — until you try to withdraw. If an investment promises guaranteed high returns with no risk, that’s not a bonus feature, it’s the tell. All legitimate investments carry risk.
Romance scams. Someone you’ve never met builds a relationship over weeks or months, then needs money for an emergency, a flight to visit you, or to “release funds” stuck abroad. These are often run by organised groups, not lone individuals, and the emotional manipulation is deliberate and practised.
Safe account and impersonation scams. Calls appearing to come from a real bank number (this can be faked — it’s called “number spoofing”) telling you your account has been compromised and you need to move your money immediately.
Purchase scams. Fake listings on marketplace sites for cars, concert tickets, or rental deposits. You pay, the seller disappears.
The one thing every scam has in common
Urgency and isolation. Scammers need you to act before you’ve had time to think it through or tell anyone else. That’s why nearly every scam script includes some version of “you need to do this right now” or “don’t tell anyone, including your bank, or the money/deal/person will be lost.”
This is the biggest misconception people have about scams: that they’re obviously stupid-sounding and only “gullible” people fall for them. That’s wrong. Scam scripts are tested and refined on thousands of people. They’re designed by people who understand psychology, not criminals who forgot to spellcheck. Falling for one isn’t a reflection of your intelligence — it’s a reflection of how good the manipulation has become.
If you ever feel a surge of pressure to act immediately and keep quiet about it, that combination — urgency plus secrecy — is the clearest scam signal there is.
How to actually verify who you’re talking to
Never trust caller ID, a text sender name, or an email “from” address on their own. All three can be faked.
Instead:
- Hang up and call back using a number you find independently — from the bank’s app, the back of your card, or their official website. Not a number the caller gives you, even if they say “call this number to verify me.”
- Use a different device or channel. If someone calls claiming to be your bank, don’t reply to a text they then send — open your banking app separately and check for alerts there.
- Check official channels directly. Log into HMRC, your bank, or any government service by typing the address yourself, never by clicking a link in a message.
- Ask for time. A genuine bank, government department, or family member will never penalise you for taking ten minutes to check something is real.
Spotting the red flags before they get you
| Warning sign | What it sounds like | What it actually means |
|---|---|---|
| Urgency | “You must act in the next 10 minutes” | Real organisations don’t rush you into moving money |
| Secrecy | “Don’t tell your bank or they’ll freeze your account” | Your bank is the one institution that wants to stop fraud, not cause it |
| Unusual payment method | Asking for gift cards, crypto, or bank transfer only | Legitimate businesses accept normal, traceable payment methods |
| Too good to be true | Guaranteed high returns, “once in a lifetime” deal | All real investments carry risk; guarantees are a red flag, not reassurance |
| Unsolicited contact | A call, text or email you didn’t initiate, about money | Assume unsolicited financial contact is fraudulent until proven otherwise |
| Pressure to isolate | “Don’t discuss this with family/friends” | Real deals and real institutions don’t need secrecy to work |
What to do in the first hour if you think you’ve been scammed
Speed matters more than almost anything else here. Banks can sometimes recall a transfer if you act within hours, but the window closes fast.
- Contact your bank immediately through its official app or the number on your card — not any number given to you during the incident.
- Report it to Action Fraud, the UK’s national reporting centre for fraud and cybercrime, at actionfraud.police.uk, or call 159 — a free, memorable number that connects you directly to your bank’s fraud team if you’re unsure whether a call or message is genuine.
- Change passwords on any accounts the scammer may have had access to or learned details about, especially if you shared security answers or login details.
- Don’t pay anyone promising to “recover” your money for a fee. Recovery scams specifically target people who’ve already been scammed once. Legitimate fraud recovery through your bank or the Financial Ombudsman never charges upfront fees.
- Tell someone. Embarrassment keeps people quiet, and silence is exactly what scammers rely on. Reporting it fast gives you the best chance of getting money back and helps stop the same scam hitting someone else.
The refund question: will the bank give my money back?
It depends on the type of scam and whether your bank signed up to the voluntary (soon mandatory, for APP fraud) reimbursement rules. Since October 2024, most UK banks are required to reimburse victims of authorised push payment fraud in most circumstances, subject to a claim excess and some exceptions — for example, if you ignored clear warnings or acted with gross negligence. This is a genuinely significant shift from a few years ago, when getting money back from a bank transfer scam was far harder. If you’ve been scammed, report it to your bank and ask directly about reimbursement under these rules — don’t assume you’re not covered.
The misconception that costs people the most
Many people think scams only happen to older or less tech-savvy adults. The data doesn’t support that. Investment and crypto scams disproportionately hit younger, financially confident people — often because confidence makes you less likely to double-check, not more. Nobody is naturally immune. The only real protection is a habit: pause, verify independently, then act.
The bottom line
- Build in a mandatory pause. Before any money moves anywhere in response to an unexpected call, text, or email, give yourself ten minutes and verify independently — this single habit blocks most scams.
- Save 159 in your phone now. It’s the free number that connects you to your bank’s fraud team and can confirm instantly whether a call claiming to be your bank is genuine.
- Treat urgency and secrecy as red flags, not reasons to act faster. Any message pushing you to move quickly and quietly is behaving exactly like a scam, whether it turns out to be one or not.
- Report it even if you’re embarrassed. Contact your bank and Action Fraud immediately — speed affects whether money can be recovered, and reporting helps protect other people too.
- Talk to older or vulnerable relatives about this today, not after something happens. A five-minute conversation about the 159 number and the “never move money under pressure” rule is worth more than any amount of after-the-fact advice.
Next read: none