Spotting and Avoiding Online Scams

The internet is a wonderful thing, but just as in the real world, a small number of people use it to try to trick others out of money or personal details. The good news is that scams follow predictable patterns, and once you know the warning signs you can spot them a mile off. This guide shows you what to look for and how to stay safe and confident online.

What is a scam?

A scam is a dishonest attempt to get you to hand over money, or personal information such as your bank details, passwords, or PIN. Scammers may get in touch by email, text message, phone call, or through fake websites. They often pretend to be an organisation you trust, like your bank, a delivery company, or even the NHS.

The most common scams to watch for

  • “Phishing” messages. An email or text that looks official and asks you to “verify your account”, “confirm a payment”, or “click here to avoid your account being closed”.
  • Delivery scams. A text claiming a parcel could not be delivered and asking you to pay a small fee or re-enter your details.
  • Bank and refund scams. A call or message saying there is a problem with your account, or that you are owed a refund, and asking you to move money or share a code.
  • Too-good-to-be-true offers. Prizes you did not enter for, unbelievable bargains, or investments that promise big, guaranteed returns.

The warning signs

Almost every scam shares one or more of these tell-tale signs. If you spot them, pause:

  • A sense of urgency. “Act now or lose access!” Scammers rush you so you do not have time to think.
  • A request for personal details. Your password, PIN, or full bank details.
  • An unexpected link or attachment, especially from a sender you do not recognise.
  • Poor spelling or an odd greeting, such as “Dear Customer” instead of your name.
  • A request to pay in an unusual way, such as gift cards or a bank transfer to a “safe account”.
The golden rule: your bank, the police, and genuine organisations will never ask you for your full password or PIN, and will never ask you to move your money to keep it “safe”. If a message does, it is a scam — every time.

How to protect yourself

  1. Stop and think. If a message pressures you to act quickly, that is your cue to slow down.
  2. Do not click. Never click a link or open an attachment you were not expecting.
  3. Check it yourself. If a message claims to be from your bank, do not use its links or phone numbers. Instead, contact the organisation directly using the number on the back of your card or their official website.
  4. Never share codes. If you receive a security code by text, keep it to yourself. No genuine caller will ever ask you to read one out.

If you think you have been targeted

First, please do not feel embarrassed — these criminals are convincing, and it happens to sensible, capable people every day. If you have shared bank details or lost money, phone your bank straight away using the number on your card. You can also report scams to help protect others:

  • Forward suspicious texts to 7726 (free of charge).
  • Forward suspicious emails to report@phishing.gov.uk.
  • Report fraud to Action Fraud on 0300 123 2040.
When in doubt, ask. If a message worries you, do not act on it — show it to someone you trust first, or bring it along to one of our drop-in sessions. We are always happy to take a look and put your mind at rest.