Spotting scams and fraud
Scammers are constantly finding new ways to trick people online - but with a few smart habits, you can stay a step ahead.
Scams change all the time, so it's a good idea to keep up to date. Why not sign up for FREE scam alerts from Which? Common online scams include:
Phishing emails
These are fake messages pretending to be from organisations such as:
- HMRC (e.g. tax rebates or penalties)
- Banks (e.g. suspicious activity alerts)
- Royal Mail, Evri, DPD (e.g. missed deliveries)
These emails will make you think something is urgent and push you to act quickly. The key thing to remember is that genuine organisations will never ask for full bank details or passwords by email or text.
How to protect yourself
- Never give out private information (such as bank details or passwords), reply to text messages, download attachments or click on any links in emails if you’re not sure they’re genuine.
- If you think something might be real (for example you are a customer of the organisation), but you are unsure, call or email the company/organisation using the link on their website that you access from a fresh browser by typing in the website address yourself or through a search engine - do not click on links or use telephone numbers in emails you may think are not genuine, as they may also be false.
Think you've been scammed? Act now
Fake shopping and marketplace scams
Fake shopping and marketplace scams are designed to catch people out when they’re looking for a good deal online. Scammers create convincing websites and adverts that closely copy well-known brands or retailers, making them look genuine at first glance.
These scams often appear on social media or in search results and use very low prices or “limited-time” offers to encourage quick decisions.
Taking a moment to check a website before buying can help you avoid losing money or receiving nothing at all. Common scams include:
- Fake websites with cloned branding - these are websites that look just like a genuine website, but feel just a bit too good to be real - in so far as they are advertising goods that are unrealistically cheap or they might be social media ads with unrealistic deals.
- Such sites are often promoted from within other social media - for example on your feed. The best way to check is to google the website in a fresh browser that you type in yourself or take from a search engine, and use that website to buy.
- If it is a website you don't know, you can visit the Get Safe Online free website scam checker and enter the URL.
- Another great tip is to use Trust Pilot to check reviews from other people using the website - even if the site is genuine this website will give you an idea of the service you are likely to receive - visit Trust Pilot.
How to protect yourself
- Stick to trusted retailers that you look up directly yourself - don't enter from a social media feed.
- Always use secure payments - never bank transfers.
- If you are unsure, visit the Get Safe Online free website scam checker
Think you've been scammed? Act now
Romance scams or catfishing
Romance scams or emotional frauds typically involve a criminal building a fake online relationship with their victim over time. The scammer often pretends to be romantically interested or emotionally invested, using dating websites, apps, or even social media platforms to establish contact. Sometimes these scams are done by AI.
Once trust has been built, the scammer begins to share fabricated emotional stories designed to manipulate the victim into sending money. Common examples include:
- Medical emergencies: They claim they or a loved one urgently need surgery or treatment but can’t afford it.
- Travel problems: They say they’re trying to visit the victim but are stranded due to lost passports, visa issues, or unpaid fees.
- Military or work-related complications: They pose as soldiers, oil rig workers, or contractors in remote locations who can't access their funds and need help.
- Family emergencies: They invent crises involving children, parents, or other relatives that require financial assistance.
The scammer often escalates the urgency, guilt-tripping the victim or creating a false sense of dependence. In many cases, they never meet the victim in person, and once the money is sent, it’s very difficult to recover. Victims may lose thousands of pounds, and the emotional toll can be severe.
Look out for red flags
- Refusal to video call or meet.
- Vague answers to questions.
- Spelling mistakes or inconsistent stories.
- Quickly declaring love or a deep connection.
How to protect yourself
- Be cautious with new online contacts.
- Take your time getting to know someone.
- Don’t rush into emotional or financial commitments.
- Keep communication on trusted platforms - be wary if someone tries to move the chat to private apps (like WhatsApp or email) too quickly.
- No matter how convincing the story, never transfer money or share your bank details with someone you haven't met.
- Be wary of dramatic or urgent requests - scammers often create fake emergencies (e.g., medical bills, passport issues). These stories are designed to pressure you.
- Protect your personal information - don’t share your address, financial details, or copies of documents (like ID or passport) with people you haven’t met in person.
- Use reverse image searches - check their profile photos using tools like Google Images or TinEye — scammers often steal photos from the internet.
- To use Google images, go to a normal Google browser page, and click the camera icon on the far right of the search bar. This will bring up a box you can drag images into - just save the image you want to your computer and drag and drop it into the Google search box.
Think you've been scammed? Act now
Tech support scams
These scams typically begin with a pop-up message, phone call, or email claiming your device has been hacked, infected with a virus, or is at risk of crashing. The aim is to frighten you into handing over money or remote access to your device.Once access is granted, scammers may install malware, steal personal data, or lock your computer until you pay.
Common tactics used by scammers
- Fake pop-ups or alerts on your screen (e.g. “Your computer is infected - call Microsoft now!”).
- Unsolicited phone calls from someone claiming to be from Microsoft, Apple, BT, TalkTalk or "your broadband provider".
- Emails pretending to be from antivirus companies, tech support, or your ISP (e.g. "Subscription expired – renew now or lose protection").
- Requests to install software like TeamViewer or AnyDesk, which gives the scammer remote control of your device.
- Scare tactics, claiming your bank account has been accessed, or your data is about to be stolen.
- Demands for payment, either for fake “repairs” or unnecessary “security subscriptions”.
Look out for red flags
- A tech company contacts you out of the blue - Microsoft, Apple, and broadband providers will never cold-call you about device security issues.
- Messages that create panic and urgency.
- You’re asked to install software or give remote access.
- You’re pressured into paying for help immediately.
How to protect yourself
- Don’t click on unexpected links, pop-ups, or attachments, even if they look official.
- Never allow someone remote access to your computer unless you initiated the contact and fully trust the provider.
- Be cautious of urgent messages like “Act now or lose access!” - this is a classic scare tactic.
- Check sender addresses and web links carefully - watch out for subtle misspellings (e.g. “micr0soft.com”).
- Avoid clicking links or calling phone numbers in unexpected emails or text messages - if you recieve an email that claims to be from an organisation, open the official app or type the website address yourself instead.
- Use official websites or apps - type in the address yourself, or use a bookmark.
- Keep antivirus and software up to date to reduce risks.
- Install a browser popup blocker to avoid fake alerts - to enable a pop-up blocker, navigate to your browser's settings, find the "Pop-ups and redirects" or similar section under "Privacy and security," and then toggle the setting to block pop-ups.
- Never give out passwords, PINs or bank details - legitimate companies will never ask for them.
Think you've been scammed? Act now
Social media scams
Social media platforms like Facebook, Instagram, TikTok and X (formerly Twitter) are common hunting grounds for scammers. These scams are often designed to look convincing, using familiar branding, fake profiles, and emotional manipulation. Common types of social media scams:
Fake competitions and giveaways
- Scammers post or message about fake contests with prizes like phones, designer goods, or gift cards. You might be asked to:
- Fill in a form with your personal or card details
- Share the post to “claim” your prize
- Pay a “small fee” for delivery or entry
- These are often phishing attempts to steal your money or identity.
Investment scams and ‘get rich quick’ schemes
Fraudsters promote fake cryptocurrency or forex trading opportunities, often using:
- Posts promising quick, guaranteed returns.
- Fake success stories and reviews.
- Messages from hacked or fake profiles claiming “it really works”.
- They might ask you to transfer money to a “trading account” or join a WhatsApp or Telegram group full of fake activity.
Impersonation of friends or influencers
You might receive a message from someone you know, but their account has been hacked. They could send:
- Suspicious links
- “I made money with this app!”-style messages
- Requests for money or personal details
- Other times, fake profiles mimic celebrities or influencers and ask for donations, investments, or personal info.
Online shopping scams on Facebook Marketplace or Instagram shops
Scammers advertise items like electronics, pets, or concert tickets at low prices. They might:
- Ask for payment upfront via bank transfer
- Disappear once money is sent
- Send counterfeit or poor-quality goods
- If there’s no buyer protection, you may not get your money back.
How to protect yourself
- Be sceptical of too-good-to-be-true offers or miracle investments.
- Never enter personal or financial details into links from social media.
- Don’t pay strangers via bank transfer - use secure payment platforms
- Check verified profiles and official websites - visit the Get Safe Online free website scam checker
- If a friend sends a strange link or message, contact them outside the platform to confirm.
- Report fake accounts or scams directly to the platform.
Think you've been scammed? Act no
