UK scam guide
Warning signs of a scam text message
Scam texts cost UK consumers hundreds of millions every year. The same patterns repeat. Here's what to look for, with real-world UK examples.
It asks for a small unexpected fee
The most common UK scam text claims you owe a tiny amount, usually £1 to £3, on a parcel or tax bill. Royal Mail, Evri, DPD, HMRC. The amount is small on purpose. People pay £1.45 without thinking, but the real goal is your card details.
It pushes urgency
Scam texts almost always include a deadline:
- "Your parcel will be returned in 24 hours"
- "Your account will be locked tonight"
- "Final reminder before legal action"
- "Action required immediately"
The urgency is the scam. Real organisations write to you in calmer language, with multiple ways to respond.
The link is on a domain you don't recognise
Real Royal Mail links are on royalmail.com. Real HMRC links are on gov.uk. Real bank links are on the bank's own domain. Anything else is a scam, even if the rest of the text looks plausible.
Watch for endings like .top, .xyz, .click, .live, .icu and .cyou. These are cheap to register and are favoured by scammers.
Watch for hyphenated names that mix the brand with words like "secure", "verify", "portal", "redelivery". Real brands rarely do that.
The link is shortened
bit.ly, tinyurl, t.co, cutt.ly. Real businesses know better than to send shortened links by text, because shortened links are exactly how scammers hide where they actually go. If you see one in a text claiming to be from a big organisation, that alone is a strong scam signal.
It asks you to share a code or password
No legitimate organisation, anywhere, ever asks you to share a one-time code, full password or PIN. Banks include this exact warning in the texts they send. If something asks for one of those, it is a scam.
The sender ID looks wrong
Some scam texts come from a long random number. Others come from spoofed sender IDs that look almost right. "RoyalMali" instead of "Royal Mail". "HMRevenue" instead of "HMRC". A quick squint should pick up the difference.
Caller ID can be spoofed even when the sender looks correct. Don't trust the sender alone. The link in the message is what tells you the truth.
It promises something for nothing
Free TV Licence, energy rebate, Winter Fuel Payment, council tax refund, NHS compensation. Real schemes pay automatically, or via your gov.uk Personal Tax Account. They never ask you to "claim now" via a link in a text.
It pretends to be a family member
"Hi Mum, I've dropped my phone, this is my new number." Variations target dads, sons, daughters and partners. The asks usually come within a few messages: a transfer for an urgent bill or a new phone.
Always call the person on their old number to confirm before you send anything. Even if their phone is genuinely broken, you will hear the voicemail. We have a dedicated guide on the Hi Mum WhatsApp scam with more on this pattern.
What to do
- Don't tap the link.
- Forward the message to 7726 (free, spells SPAM).
- Delete it.
- If you're not sure, paste the text into the checker on our home page. We'll tell you in plain English.
Common questions
- How do I block a scam text number?
- On iPhone, open the message, tap the number at the top, then tap "Info" and "Block this Caller". On Android, long-press the message and choose "Block number" from the menu. Blocking is per-number, so a determined scammer will use a new one.
- Why am I getting so many scam texts all of a sudden?
- Your number is almost certainly on a list that's been sold to scammers. This usually traces back to a service you signed up for that suffered a data breach. There's little you can do to remove it from those lists, but reporting (7726) helps cut the volume over time.
- Can scammers send messages from a real bank's sender ID?
- Sometimes, yes. Sender IDs can be spoofed. The bank's name in the chat thread is not proof. The link in the message is the real test.
- I tapped the link but didn't enter anything. Is that a problem?
- Usually not. Just visiting a page rarely causes harm on a modern phone. The risk starts when you enter details or download something. See our guide on what to do if you clicked for more.