Category: Scam Guides

  • Fake HMRC Texts and Emails — How to Tell If It’s a Scam

    📱 THE HMRC SCAM EPIDEMIC

    Fake HMRC messages are among the most reported scams in the UK. Criminals send texts and emails claiming you’re owed a tax refund — or threatening legal action for unpaid tax. Both are designed to steal your personal details and money.

    HMRC itself has confirmed: they will never text, email, or WhatsApp you about a tax refund or penalty. If you receive one, it’s a scam. Full stop.

    👀 WHAT THESE SCAMS LOOK LIKE

    • Tax refund texts — “HMRC: You are owed a refund of £450.38. Claim now at hmrc-refunds[.]co.uk” — the link goes to a fake .gov-lookalike page that harvests your bank details.
    • Threatening emails — “Legal action will be taken if you do not pay your outstanding tax within 24 hours” — designed to create panic so you act without thinking.
    • WhatsApp messages — Newer tactic using WhatsApp to send official-looking messages with HMRC branding.
    • Phone calls — Automated or live calls claiming to be from HMRC, threatening arrest for unpaid tax.

    🔍 HOW TO SPOT THE FAKES

    • HMRC never sends emails, texts or WhatsApp messages about tax refunds or penalties.
    • HMRC never asks for personal or payment information by text or email.
    • Check the sender — official HMRC emails only come from @hmrc.gov.uk domains.
    • Look for urgency and threats — legitimate government bodies don’t threaten immediate arrest.
    • Hover over links before clicking — scam URLs often mimic official addresses with slight variations.

    ✅ WHAT TO DO

    • Scam text? Forward it to 60599 (network rate charge), then delete it.
    • Scam email? Forward it to phishing@hmrc.gov.uk, then delete it.
    • Scam WhatsApp? Screenshot it and email to phishing@hmrc.gov.uk.
    • Already shared details? Contact HMRC’s security team at phishing@hmrc.gov.uk and your bank immediately.
    • Scam phone call? Hang up and report it at gov.uk/report-tax-fraud.

    Sources: HMRC (gov.uk), Action Fraud, Which?

  • Facebook Marketplace Scams — 8 Tricks Sellers and Buyers Use

    🛒 MARKETPLACE: A SCAMMER’S PLAYGROUND

    76% of purchase scams now originate on social media platforms, with Facebook Marketplace being a prime hunting ground for fraudsters. Whether you’re buying or selling, knowing the tricks can save you hundreds — or thousands.

    💰 SCAMS TARGETING BUYERS

    • 1. Non-existent items — Bargain-priced electronics, concert tickets, or vehicles that don’t exist. The seller takes payment and vanishes. If the price seems too good to be true, it is.
    • 2. Bait and switch — The listing shows a quality item, but what arrives is counterfeit, broken, or completely different. Always inspect before paying.
    • 3. Fake payment links — Seller sends a “secure payment” link that’s actually a phishing page designed to steal your card details.
    • 4. Deposit scams — “I’ve got loads of interest, can you send a deposit to hold it?” The item doesn’t exist and the “seller” disappears with your deposit.

    🎯 SCAMS TARGETING SELLERS

    • 5. Overpayment scam — Buyer “accidentally” overpays and asks you to refund the difference. The original payment bounces, and you’ve lost the refund amount.
    • 6. Fake collection agents — Buyer says a courier will collect the item and sends a fake payment confirmation email. You hand over the item and never get paid.
    • 7. Phishing via messages — Buyer sends links claiming to be payment confirmations or shipping labels that actually steal your login credentials.
    • 8. Gift card payments — Buyer offers to pay with gift cards. These are untraceable and almost always a scam.

    🛡️ HOW TO STAY SAFE

    • Meet in person in a public place for local sales. Many police stations have designated safe exchange zones.
    • Cash or PayPal Goods & Services only — never accept bank transfers from strangers or gift cards.
    • Inspect before paying — never pay for an item you haven’t seen or verified.
    • Don’t click links from buyers or sellers — use the platform’s built-in payment system if available.
    • Check the profile — new accounts with no history, no friends, and no other listings are high-risk.
    • Trust your gut — if something feels off, walk away. There will always be another deal.

    Sources: Norton, Action Fraud, Lloyds Banking Group, UK Finance

  • Parcel Delivery Scam Texts — Royal Mail, DPD, Evri Fakes Explained

    📦 THE UK’S MOST COMMON TEXT SCAM

    Fake parcel delivery texts are the most reported scam to Which?’s Scam Sharer tool. Research shows 3 in 5 UK adults received a fake delivery text in the past year. With online shopping at an all-time high, criminals exploit the fact that most of us are always expecting a parcel.

    ⚙️ HOW THESE SCAMS WORK

    • The text — You receive an SMS that appears to be from Royal Mail, DPD, Evri (Hermes), or Amazon claiming a delivery failed or a fee is owed.
    • The link — It directs you to a convincing copycat website that looks identical to the real courier’s site.
    • The trap — You’re asked to enter personal details and pay a small “redelivery fee” (usually £1–3). The form captures your full name, address, and card details.
    • The damage — Criminals use your details for further fraud, make purchases with your card, or sell your data on the dark web.

    🔍 HOW TO SPOT A FAKE

    • Check the sender — Real delivery notifications come from official shortcodes or email addresses, not random mobile numbers.
    • Inspect the URL — Legitimate Royal Mail links use royalmail.com. Fakes use variations like royal-mail-redelivery.com or rm-delivery.co.uk.
    • No fee for redelivery — Royal Mail, DPD, and Evri do not charge fees for redelivery. If a text asks for payment, it’s a scam.
    • Check your tracking — If you’re expecting a parcel, go directly to the courier’s official website or app to check the status. Don’t use the link in the text.
    • Watch for pressure — Phrases like “your parcel will be returned within 24 hours” are designed to rush you into acting.

    ✅ WHAT TO DO

    • Don’t click the link — delete the text immediately.
    • Report it — Forward the text to 7726 (spells SPAM on a keypad). This is the free spam reporting number for all UK networks.
    • Report phishing sites — Send the URL to report@phishing.gov.uk (NCSC).
    • Already entered details? Contact your bank immediately to freeze your card, then change passwords on any accounts using the same email.
    • Use courier apps — DPD’s ‘Your DPD’ app and Royal Mail’s app give genuine tracking updates without SMS.

    Sources: Which?, NCSC, Royal Mail, DPD, Action Fraud

  • How to Spot a Romance Scam in the UK — 7 Warning Signs

    💔 ROMANCE SCAMS: THE £120M PROBLEM

    Romance fraud is one of the UK’s most devastating scam types. In 2025 alone, fraudsters stole £119.6 million from victims through fake online relationships, according to Which? research. The average loss per victim exceeds £10,000.

    Criminals create convincing fake personas on dating apps and social media, grooming victims over weeks or months before requesting money. Here’s how to spot them.

    🚩 7 WARNING SIGNS

    • 1. The relationship stays entirely online — They always have an excuse to avoid video calls or meeting in person. If weeks pass without a face-to-face interaction, that’s a major red flag.
    • 2. Their photos seem too good to be true — Scammers use stolen images or AI-generated photos. Use Google Image Search or TinEye to reverse-search their profile pictures.
    • 3. Dramatic sob stories — They claim to be stuck abroad, have a sick family member, or face a sudden emergency. These tales are designed to trigger sympathy and loosen your purse strings.
    • 4. They ask for money early — Any request for money from someone you haven’t met in person is a massive warning sign. Legitimate partners don’t ask for bank transfers.
    • 5. They want to move off the dating app — Scammers push to move conversations to WhatsApp or email quickly to avoid platform moderation and reporting.
    • 6. Their profile is brand new — Few photos, sparse details, and recently created accounts are hallmarks of fake profiles.
    • 7. They profess love unusually quickly — “Love bombing” is a manipulation tactic. Genuine connections take time to develop.

    🛡️ WHAT TO DO IF YOU SUSPECT A SCAM

    • Stop all communication immediately and do not send any more money.
    • Report it to Action Fraud (0300 123 2040 or actionfraud.police.uk) and the dating platform.
    • Contact your bank — they may be able to recover funds under APP fraud reimbursement rules.
    • Talk to someone — Victim Support (0808 168 9111) offers free, confidential help.

    Sources: Which?, Action Fraud, UK Finance Annual Fraud Report 2025, Victim Support