The Most Common Phone Scams in the UK Right Now

The caller ID says it is your bank. Or HMRC, warning of a warrant for your arrest over unpaid tax. Or your grandchild, calling from a hospital abroad, voice shaking. Phone scams succeed because they hijack the most human reflexes — fear, trust and the urge to help — and they are run by organised operations with scripts, call centres and spoofing tools. Learn the scripts used across the UK and most of these calls die in the first ten seconds.

Bank impersonation calls

The most damaging script in circulation: a caller claiming to be from the fraud team of Barclays, HSBC, Lloyds, NatWest or your own bank warns of a suspicious payment and talks you through stopping it. The caller ID shows the bank's genuine number, the caller sounds professional, and they may know your name and address from earlier data breaches.

Then comes the ask: read back the code just texted to you, approve a login on your banking app, or move your money to a safe account. Every one of these is theft in progress. Your bank will never ask for one-time codes, never ask you to move money to protect it, and never object to you hanging up and calling back on the number printed on your card. Customers of many major UK banks can also dial 159 to be put through to their bank's genuine fraud team.

HMRC and government impostor scams

Automated calls claiming to be from HMRC threaten arrest, court action or bailiffs over unpaid tax unless you pay immediately — sometimes by bank transfer, sometimes with gift cards or vouchers. Variants impersonate the police, the Home Office, or a local court with invented case numbers.

HMRC does contact people by phone, but it does not demand immediate payment under threat of arrest by automated call, and it never asks for gift cards or vouchers. If a tax demand worries you, hang up and check your account through the official HMRC app or website, or call HMRC on a number you look up yourself.

Parcel-delivery texts

The UK's favourite smishing lure. A text claiming to be from Royal Mail, DPD, Evri or Amazon says a parcel is held, a redelivery fee is due, or an address needs confirming, with a link to fix it. The link opens a convincing copy of the courier's site that harvests your name, address and card details — sometimes followed by a small test payment.

Real couriers do send tracking updates, but they do not demand card details and passcodes by text link to release a parcel. If you are expecting something, open the retailer's or courier's official app and check the tracking there. Otherwise delete the text and forward it to 7726.

Broadband and tech-support scams

Your internet provider is disconnecting you today. Your computer has reported a virus to Microsoft. A patient caller with remote-access software talks you through installing a support tool — and from that moment they can see your screen, watch you log in to your bank, and empty your accounts. Some variants then demand payment for the fix.

No broadband provider or software company cold-calls customers this way. Never install remote-access software at a stranger's request, and never let an inbound caller guide you through your computer. Hang up and call your provider on its published number if you are concerned.

Grandparent and family-emergency scams

The cruellest script: a caller says Hello Gran, it's me and spins a story — an accident, an arrest, a hospital abroad — then hands over to a solicitor or officer demanding an urgent bank transfer. The Hi Mum variation arrives by text or WhatsApp from an unknown number claiming a lost phone, then asks for money for an urgent bill. Voice-cloning tools have made this worse: scammers can imitate a real relative's voice from a short social-media clip.

Families can defuse this in advance: agree on a family code word for real emergencies, always hang up and call the person back on their usual number, and never send money on the strength of a new number without a voice check first.

Red flags that apply to every scam

• Urgency: pay today, act now, or face arrest, disconnection or loss.
• Secrecy: do not tell anyone, this transaction is confidential.
• Untraceable payment: bank transfer to a stranger, gift cards, vouchers, crypto.
• Requests for codes: any one-time passcode requested over the phone is being used to break into your account.
• Emotional pressure: fear, excitement, sympathy — the stronger the feeling, the more you should slow down.

What to do if you already fell for it

It happens to sharp people every day; these scripts are professional products. Speed is everything:

1. Call your bank immediately on the number on your card. Ask about freezing accounts, recalling transfers and reissuing cards.
2. Change your passwords from another device, starting with email and banking, and enable two-factor authentication.
3. Report to Report Fraud at reportfraud.police.uk or on 0300 123 2040 — in Scotland, Police Scotland on 101.
4. File the details with your bank's fraud team, and keep any reference numbers.
5. Watch for follow-up scams: victims' names get passed around, and you may get calls promising to recover your money for a fee. Recovery offers are just round two.

Register with the TPS to cut legitimate telesales, let unknown calls go to voicemail, and use a blocking app like NoCall to flag known scam numbers in real time. The scams change costumes every year — cloned voices, spoofed banks, courier-text twists — but the skeleton never changes: urgency, authority, secrecy and an irreversible payment. Break any one of those and the scam collapses.