What are some common types of scams I should look out for?
Scams come in many forms, but examples of common ones include:
Companies pretending to be StepChange
Clients tell us they get messages or have phone calls from people saying they are us.
We call these 'clone firms'.
Remember:
- We only contact you in the way you told us to
- Update your preferences if you change your mind
- We never use WhatsApp or messaging apps
- If you get one, it is almost certainly fake
- Tell us if you receive anything strange
- We will look into it
Use our contact page so you know it is us.
We will tell you if the contact was real.
Find out more about clone firms here.
Cold calls that seem to be from your bank
What is the risk?
You may give personal details to a scammer that lets them access your bank account.
Your other accounts may use the same details.
How do I stay safe?
Remember, your bank will NEVER ask you to:
- Tell them your online banking password
- Authorise a payment from your account
- Move your money into another ‘safe’ account
- Carry out a ‘test transaction’ on your account to ‘check that it is working’
What should I do if a scammer phones me?
End the call immediately.
Taking money like this is fraud, a serious criminal offence.
Make sure the line is completely cut off.
Some scammers can keep the line open even if you think you hung up.
This means that if you phone the bank right away on the same phone:
- You may end up speaking to the scammers again
- Even if it is a different voice
To make sure the connection is broken:
- Phone a friend or parent from the same phone
- You know a loved one's voice
- This helps you know the scammer is disconnected
Get in touch with your bank and let them know what happened
Their fraud department can:
- Raise an enquiry for you
- Escalate to the police
Check your bank account after the call. Is any money missing? Tell the fraud team right away.
Email “phishing” scams
This is when you get an email from what looks like a trusted source like your bank.
What is the risk?
Scammers can use your personal information to get into your accounts.
The email usually:
- Asks you to click on a link and
- Login to your bank account
But you are actually giving your information to a fake website.
The email usually looks like it is from a real organisation.
It will use:
- The company logo
- The same design
- Similar language
These can be very convincing.
How do I stay safe?
Spelling and grammar
Look for errors.
Real bank emails are checked by multiple people before sign off.
An email with spelling mistakes or bad English would not come from your bank.
The email address
Where did the email come from?
Click on the ‘from’ name at the top of the message.
Scam email addresses to be:
- Filled with random numbers
- Misspelled
- Have a different name
- Use a different domain than the real company
- For example, someone claiming to write from HSBC might have an email address ending in HBBC.com
Links
Look at the link before you click on it.
On a desktop computer:
- Hover your mouse cursor over the link
- Do not click
- This could trigger another security risk, like a virus
- Does the link point to the real company’s website?
- Do not click if there is a strange website underneath
What to do and how to report an email scam
Report phishing emails to Action Fraud.
Contact your bank if money is taken from your account. The fraud team needs to know as soon as possible.