The latest scam alerts from Which?

The scams you need to know about this month, including Boots impersonation scams and fake crypto offers
Which?Editorial team

Find out about the latest scams trending this month. Come across a scam? Let us know by using our scam sharer tool.

Join almost half a million Scam Alert subscribers and get free weekly updates on the scams you need to be aware of. In just five years, Which? Scam Alerts has helped subscribers to avoid almost £5.5m in scam losses.

Sign up for scam alerts

Our emails will alert you to scams doing the rounds, and provide practical advice to keep you one step ahead of fraudsters.

Sign up for scam alerts
Sign up

19 May

Council Tax scam calls and texts

Wandsworth Council has warned of scammers contacting residents with requests to pay Council Tax arrears.  

The calls and texts claim that you owe thousands of pounds in uncollected Council Tax and you must pay immediately. The scammers also say that the council is currently in court due to your unpaid tax.

Wandsworth Council has examples of genuine council tax messages on its website.

You can report scam texts by forwarding them to 7726.

To report scam calls received on an iPhone, text the word ‘call’ followed by the phone number to 7726. 

On an Android phone, text the word ‘call’ to 7726. You’ll then receive a message asking you for the scam number.

For scam calls received on WhatsApp, open the WhatsApp chat with the dodgy phone number and tap 'block.' You can report the contact by tapping 'report contact' and 'block'.

15 May

M&S impersonation email

A scam email impersonating M&S
A scam email impersonating M&S

A scam email claiming to be from M&S tells you that you're eligible for a 'free Afternoon Tea Letterbox Hamper with your next qualifying order.'

It invites you to 'unlock your free surprise' by clicking on a link. However, this link leads to a malicious website which has nothing to do with M&S. This website will ask for your personal and financial information to scam you now or at a later date.

M&S recently experienced a data breach, read what to do if you're worried about this here.

Suspicious emails can be reported by forwarding them to report@phishing.gov.uk.

Dodgy websites can be reported to the National Cyber Security Centre.

12 May

Shein 'mystery box' scam

A scam email impersonating Shein
A scam email impersonating Shein

A dodgy email peddling a fake Shein mystery box leads to a malicious website.

The site will gather your personal and financial details while offering you nothing in return.

Suspicious emails can be reported by forwarding them to report@phishing.gov.uk.

Dodgy websites can be reported to the National Cyber Security Centre.

8 May

Apple impersonation scam

A scam email impersonating Apple
A scam email impersonating Apple

An email claiming to be from 'Apple security' tells you that your iPhone has been infected with 44 viruses.

It then provides a link to remove these threats, which leads to a malicious site intent on stealing your financial info and data.

Scam emails can be reported by forwarding them to report@phishing.gov.uk.

Dodgy websites can be reported to the National Cyber Security Centre.

6 May

Failed delivery scam text

A scam text claiming that your delivery has failed
A scam text claiming that your delivery has failed

A scam text from 'The Sorting Centre' tells you that providing incorrect address information has led to two failed deliveries and leads to a malicious website to 'update your address.'

The message also uses 'the recent frequent incidents of lost parcels' to appear more legitimate.

The dodgy link included in the text will lead to a site designed to steal your personal and financial data or download malware to your device. 

You can report scam texts by forwarding them to 7726.

1 May

M&S 'afternoon tea' email

A scam email impersonating M&S
A scam email impersonating M&S

A scam email claiming to be from M&S tells you that you've been chosen to receive an afternoon tea Letterbox hamper.

It then says that to receive the hamper, you must follow a link to complete a short survey. This will lead to a dodgy website designed to steal your personal and financial information.

Scam emails can be reported by forwarding them to report@phishing.gov.uk.

Malicious websites can be reported to the National Cyber Security Centre.

29 April

PayPal impersonation scam

A scam email impersonating PayPal
A scam email impersonating PayPal

A scam email impersonating PayPal tells you that an unauthorised transaction was made using your PayPal account.

It prompts you to call a dodgy number to receive a refund, which will put you through to a scammer trying to get your personal and financial details. 

Scam emails can be reported by forwarding them to report@phishing.gov.uk.

24 April

Oasis fans have lost over £2m to ticket scams

Lloyds Banking Group has estimated, based on the volume of fraud reports made by its own customers, that since Oasis reunion tickets were released, more than £2m has been stolen by ticket scammers across more than 1,000 cases.

The bank said that many cases began on social media and that across its banks - Lloyds Bank, Halifax and Bank of Scotland - Oasis fans made up more than half of all reported concert ticket scams so far this year, losing £436 on average. The biggest amount lost in a single case was over £1,700.

Fake Oasis tickets were the biggest type of ticket scams, with the average victim losing around £200 more than the average lost to a concert ticket scam.

People aged 35 to 44 were the most likely to be scammed, making up nearly a third of all cases. Edinburgh, Warrington and Manchester have the highest numbers of victims.

Lisa Webb, a consumer law expert at Which? said: 'Scammers are always looking for new ways to part people from their hard-earned cash and unfortunately, Oasis tickets being in such high demand has created a perfect storm for criminals.

If you spot any suspicious posts, you can report them to the social media platform and the National Cyber Security Centre to investigate.'

On social media, posts are usually reported by selecting the three dots in the top right corner of the post and pressing 'report.'

Malicious websites can be reported to the National Cyber Security Centre.

22 April

Weight loss pill scam

A scam email impersonating Mail Online
A scam email impersonating Mail Online

A scam email impersonating Mail Online promotes a 'miracle weight loss pill.' 

The email also says that the product scored a deal on tv show Dragon's Den and includes a phishing link for you to purchase the item.

The link will lead to a dodgy website asking for you personal and financial information.

Scam emails can be reported by forwarding them to report@phishing.gov.uk.

Malicious websites can be reported to the National Cyber Security Centre.

16 April

Boots impersonation scam

A scam post on Facebook promoting a Boots mystery box
A scam post on Facebook promoting a Boots mystery box

A scam post on Facebook tells you that Boots is offering mystery boxes for £3 full of 'leftover cosmetics' in exchange for completing a short survey.

The post, most likely published from a scam or hacked account, includes a malicious link to complete the survey which is where your personal and financial details will be stolen.

You can report posts on Facebook by selecting the three dots in the right corner and selecting 'report.'

Malicious websites can be reported to the National Cyber Security Centre.

14 April

Scam text impersonating Binance

A dodgy text claiming to be from cryptocurrency exchange Binance asks you to call a number beginning with 0808 if you didn't initiate a withdrawal request.

Recipients of the text say that it contains a verification code. This could mean that scammers are attempting to get into your account and need you to give them the verification code to gain access.

If you ring the number the scammer will most likely try to get you to reveal your personal and financial information.

You can report scam texts by forwarding them to 7726.

10 April

Boots scam email

A scam email impersonating Boots
A scam email impersonating Boots

A dodgy email promoting a 'Nivea sunscreen pack' asks you to complete a short survey in order to receive the items.

The email impersonating Boots will lead to a malicious website which will ask for your personal and financial information.

Scam emails can be reported by forwarding them to report@phishing.gov.uk.

Malicious websites can be reported to the National Cyber Security Centre.

7 April

One in four Britons have experienced a ticket scam

Data analysed by Nationwide has found that one in four Britons have experienced a ticketing scam, losing £82 on average.

When buying tickets, stick to official retailers and be alert to scammers on social media. Avoid offers that seem too good to be true and don’t pay by bank transfer. 

If you’ve lost money to a scammer, call your bank immediately using the number on the back of your card. Report the scam to Action Fraud or call the police on 101 if you’re in Scotland. 

1 April

The UK is a hotbed for WhatsApp scams

Data analysed by Revolut has found that between 1 January 2023 and 31 December 2024, British consumers lost more money to scams through WhatsApp than any other country in Europe.

It also revealed that WhatsApp fraud accounted for one in five of all reported scams in the UK and victims lost an average of £2,437 per fraud incident.

In the second half of 2024, WhatsApp’s fraudulent activity surged by 33% and two of the biggest scams on WhatsApp were job scams, making up half of cases on Revolut, and investment scams, making up four in 10.

You can report a WhatsApp message by selecting it in your conversation and tapping ‘report’.

To report the sender on WhatsApp, open up the chat, tap on the sender's contact details and select 'block and report'.


Learn how to spot a WhatsApp scam


31 March

Phishing Facebook post

A Facebook post promoting a fake giveaway at skincare company Sol De Janeiro
A Facebook post promoting a fake giveaway at skincare company Sol De Janeiro

A post from a seemingly hacked Facebook account tells you that you can fill out a short questionnaire and get a Sol De Janeiro 'Ultimate Icons' set for £1.95.

The post then includes a phishing link to complete this questionnaire, which will actually take you to a site designed to steal your personal and financial data.

To report a scam post on Facebook, select the three dots on the right-hand side of the page and click ‘report’.

You can report scam websites to the National Cyber Security Centre.

25 March

Screwfix scam email

A scam email impersonating Screwfix
A scam email impersonating Screwfix

A dodgy email claiming to be from Screwfix tells you that you've won a Knipex backpack tool bag.

The email includes a link to 'claim your reward' which will lead to a malicious website ready to steal your personal and financial data.

Scam emails can be reported by forwarding them to report@phishing.gov.uk.

Malicious websites can be reported to the National Cyber Security Centre.

20 March

Vehicle tax payment scam

A scam email telling you that your vehicle tax payment was unsuccessful
A scam email telling you that your vehicle tax payment was unsuccessful

A scam email impersonating the government tells you that your vehicle tax payment to the the Driver and Vehicle Licensing Agency (DVLA) was unsuccessful.

It asks you to follow a link to update your payment details to avoid any penalties. This link will lead to a scam website created to steal your personal details.

In an effort to scare victims into clicking the link, it then warns that you may be fined up to £1,000, or have your details pssed onto a debt collection agency, if you don't pay your tax on time.

You can report scam emails by forwarding them to report@phishing.gov.uk.

Malicious websites can be reported to the National Cyber Security Centre.

17 March

Action Fraud issue warning about social media and email account hacking

Reports to Action Fraud about hacked social media and email accounts are rising, increasing from 22,530 in 2023 to 35,434 in 2024, with nearly £1m being lost to hackers.

A campaign launched by Action Fraud and Meta encourages people to enable 2-Step Verification for each online account they have. This means setting up another method of verifying your identity - such as a code being sent to your phone before you sign into an account.

Action Fraud data also reveals that the most common motives for social media hacking were either investment fraud, ticket fraud or theft of the targeted account.

As well as setting up 2-Step Verification, you should also use strong passwords which differ from each other.

Meta has a step-by-step process that you can follow to recover your accounts for Facebook and Instagram. Microsoft also has a recovery guide for Hotmail users and Google outlines steps to follow for hacked Gmail accounts.

Recruitment scam texts

A scam text impersonating an employee from a recruitment company
A scam text impersonating an employee from a recruitment company

Scammers are sending texts over WhatsApp, SMS and Telegram which impersonate employees at real recruitment agencies.

The messages ask if you're interested in hearing about job opportunities.

This is likely to lead to a task scam, which involves opening an account on a platform controlled by a scammer and completing simple tasks, such as watching videos, rating products or completing surveys.

At some point you'll be asked to pay a fee to upgrade your account and you’ll never see your ‘earnings’ from completing the tasks.

You can report scam texts by forwarding them to 7726.

Energy scam text

12 March

Energy-saving device scam email

A scam email promoting an 'energy-saving device'
A scam email promoting an 'energy-saving device'

An email which tells you a device can 'reduce energy bills by 92%' leads to a phishing website designed to get you to leave your personal and financial information.

Which? has previously reported on these devices and found customers complaining that they either don't work, don't arrive or have been charged twice for buying one.

You can report scam emails by forwarding them to report@phishing.gov.uk.

Malicious websites can be reported to the National Cyber Security Centre.

10 March

Total AV scam email

A scam email impersonating Total AV
A scam email impersonating Total AV

A dodgy email claiming to be from antivirus company Total AV tells you that your 'subscription has expired' and you only have 24 hours to update it.

The email provides a button labelled 'renew now' which will lead to a malicious website asking for your personal and financial information.

Report scam emails by forwarding them to report@phishing.gov.uk.

Scam websites can be reported to the National Cyber Security Centre.

6 March

Apple scam email

A scam email impersonating Apple
A scam email impersonating Apple

A scam email impersonating Apple tells you that your account has been disabled for violating Apple's policy and you must verify your Apple ID information to avoid your account being terminated.

It includes a link which leads to a phishing website designed to steal your personal and financial information.

Report scam emails by forwarding them to report@phishing.gov.uk.

Scam websites can be reported to the National Cyber Security Centre.

4 March

Royal Mail impersonation text

A scam text impersonating Royal Mail
A scam text impersonating Royal Mail

A dodgy text impersonating Royal Mail tells you that your parcel can't be delivered due to 'missing or damaged address information.'

It then provides a link to 'update your details' which will lead to a phishing website designed to steal your personal and payment information.

You can report scam texts by forwarding them to 7726.

27 February

BP impersonation email

A scam email impersonating BP
A scam email impersonating BP

An email claiming to be from oil and gas company BP tells you to 'answer and win' to receive a brand new 'car emergency kit.'

The email leads to a phishing website with a short survey designed to steal your personal and payment information.

Report scam emails by forwarding them to report@phishing.gov.uk.

Scam websites can be reported to the National Cyber Security Centre.

25 February

Action Fraud warns of holiday scams

Action Fraud says it received 6,066 reports about holiday scams in 2024. Most of these were reported in July which saw 647 reports.

From the reports, victims lost a combined total of £11m with the average loss per victim being £1,844.

Action Fraud also revealed that over half of the reports mentioned social media platforms and others suggested fraudulent branding from travel protection agencies, like ATOL, ABTA, or ABTOT was used to appear convincing.

To keep protected from holiday scams:

  • Avoid deals which sound too good to be true.
  • If the travel company includes logos of travel protection agencies, check their websites to verify that they're members: ATOL, ABTA and ABTOT.
  • Check reviews for the holiday company across multiple platforms.
  • Pay with a credit card or PayPal, as you'll have more protection if things go wrong.

19 February

Car tax payment scam

A scam email impersonating the Driver and Vehicle Licensing Agency (DVLA)
A scam email impersonating the Driver and Vehicle Licensing Agency (DVLA)

A scam email tells you that your latest vehicle tax payment failed due to incorrect details.

It then provides you with a link to update these details or risk a fine of up to £1,000. It also claims that your details may be passed onto a debt collection agency.

This link will lead to a malicious phishing website which will steal your personal and financial information.

Report scam emails by forwarding the email report@phishing.gov.uk.

17 February

Scam job call

A scam call with a recorded message tells you that they want to speak to you about a job opportunity.

It asks you to add the number on WhatsApp to talk about the role.

On an iPhone, you can report scam calls by texting the word ‘call’ followed by the phone number to 7726. 

On an Android phone, text the word ‘call’ to 7726. You’ll then receive a message asking you for the scam number.

On WhatsApp, open the WhatsApp chat with the dodgy phone number and tap 'block.'

You can report the contact by tapping 'report contact' and 'block'.

14 February

Energy bill support scheme scam

A scam email claiming that you're eligible for a £400 discount on your energy bills
A scam email claiming that you're eligible for a £400 discount on your energy bills

A scam email which tells you you're 'eligible to receive a £400 discount under the Energy Bill Support Scheme' leads to a malicious phishing website.

In order to apply for the scheme, the email states you'll be asked for your name, address, date of birth and financial details. This information will then be used to try to scam you now or in the future.

You can report scam emails to report@phishing.gov.uk.

Scam websites can be reported to the National Cyber Security Centre.

11 February

Facebook scam message

A message sent by a scammer on Facebook
A message sent by a scammer on Facebook

A scam message sent through Facebook Messenger tells you that a post you made on Facebook Marketplace has been 'flagged for review.'

It provides a link to 'update or edit your post' and warns that your account may be temporarily restricted. 

This will lead to a site that will try to steal your personal and financial information.

To report a scam group, page or profile on Facebook, select the three dots on the right-hand side of the page and click ‘report’.

You can report scam websites to the National Cyber Security Centre.

6 February

Tesco scam ad

A scam ad posted on Meta platforms
A scam ad posted on Meta platforms

A dodgy advert posted to Meta platforms tells you that Tesco is looking for 'testers' to try an air frying grill.

You're also told that you can keep the grill afterwards for just £2.

The ad includes a dodgy link to a site where you're asked to answer four questions in order to become a tester. This site will try to get your personal and financial information.

You can report scam ads on Facebook and Instagram by clicking the three dots on the top right corner and selecting 'report.'

4 February

M&S 'Afternoon Tea' scam

A scam email impersonating M&S
A scam email impersonating M&S

A scam email impersonating M&S tells you that 'you've been chosen to receive a Marks and Spencer Afternoon Tea Letterbox Hamper.'

To win the prize, you're encouraged to follow a dodgy link and complete a survey.

This link will lead to a website waiting to steal your personal and financial information.

You can report scam emails to report@phishing.gov.uk.

Scam websites can be reported to the National Cyber Security Centre.

30 January

PayPal invoice scam

An email sent through PayPal by a scammer
An email sent through PayPal by a scammer

This scam email, sent from a genuine PayPal email address, tries to panic you into calling a dodgy phone number to cancel a fake money request.

If called, you'll be put through to a scammer who will try and get you to reveal your personal and payment information.

We've reported on this scam before, exposing how scammers exploit PayPal's service to send fake payment requests for high-value items.

On your PayPal account, you can view and cancel any requests under 'activity'.

Suspicious emails can be forwarded to phishing@paypal.com and report@phishing.gov.uk.

28 January

United Airlines scam email

A scam email impersonating United Airlines
A scam email impersonating United Airlines

A dodgy email impersonating United Airlines tells you that you can receive an 'exclusive offer' in exchange for completing a quick survey.

The email leads to a malicious link which will try to steal your personal and financial information.

You can report scam emails to report@phishing.gov.uk.

Scam websites can be reported to the National Cyber Security Centre.

21 January 

Fake ScotRail Facebook pages

A scam page on Facebook impersonating ScotRail
A scam page on Facebook impersonating ScotRail

A number of fake pages on Facebook are impersonating ScotRail and claiming to offer discounted rail fare.

One page claims to offer 'unlimited travel for 12 months for just £2' in Scotland and provides a link to claim this fake offer.

This link will most likely lead to a site that will download malware to your device or ask for your personal and payment data.

You can report posts and pages on Facebook by selecting the three dots and pressing 'report.'

Scam websites can be reported to the National Cyber Security Centre.

17 January 

DVLA vehicle tax scam

A scam email impersonating the DVLA
A scam email impersonating the DVLA

A scam email, impersonating the Driver and Vehicle Licensing Agency (DVLA), claims that you're 'overdue on your vehicle tax'.

It includes a malicious link to 'ensure your vehicle is compliant with the DVLA.'

You can report scam emails to report@phishing.gov.uk.

Scam websites can be reported to the National Cyber Security Centre.

15 January

Winter fuel payment scam

A scam text telling you that you can apply for £300 towards your bills this winter
A scam text telling you that you can apply for £300 towards your bills this winter
A copycat government website claiming to offer a Winter Fuel Payment
A copycat government website claiming to offer a Winter Fuel Payment

A scam text claiming to be from 'The Department of Pension Protection' falsely tells you that you have the opportunity to apply for £300 to help towards bills during the colder weather.

The text includes a malicious link leading to a convincing copycat government website where your personal and financial information is asked for.

The government offers a Winter Fuel Payment of £200 or £300 to some people born before 23 September 1958. If you’re eligible, you would've received a letter in October or November saying how much your payment will be.

If you think you could be eligible, you can check on the gov.uk website.

You can report scam text messages by forwarding them to 7726.

Scam sites can be reported to the National Cyber Security Centre.

14 January

Superdrug impersonation email

A scam email impersonating Superdrug
A scam email impersonating Superdrug

A scam email which claims to be from Superdrug tells you that you can receive an Oral B electric toothbrush in exchange for answering a few questions.

The email invites you to click on a malicious link which leads to a dodgy website asking for your personal and payment information.

You can report scam emails to report@phishing.gov.uk.

Scam websites can be reported to the National Cyber Security Centre.

9 January

TotalAV scam email

A dodgy email telling you that your TotalAV membership has expired
A dodgy email telling you that your TotalAV membership has expired

An email that claims to be from antivirus company TotalAV says that your membership has expired and provides a link to 'renew' it.

This link will most likely lead to a malicious website, designed to steal your personal and financial information or download malware to your device.

You can report scam emails to report@phishing.gov.uk.

Scam websites can be reported to the National Cyber Security Centre.

7 January

Great Western Railway scam post

A scam post on Facebook impersonating Great Western Railway
A scam post on Facebook impersonating Great Western Railway

A fake post circulating impersonating Great Western Railway (GWR) on Facebook claims to offer a railcard for just £3.

To claim this you're asked to follow a malicious link which will try to steal your personal and payment data.

You can report posts on Facebook by selecting the three dots in the top right corner and pressing 'report.'

Suspicious websites can be reported to the National Cyber Security Centre.

2 January

HSBC scam text

A scam text impersonating HSBC
A scam text impersonating HSBC

A text sent from a spoofed mobile number impersonating HSBC tells you that there's been a direct debit set up on your bank account.

It tells you to reply 'STOP' if you didn't authorise this, which will most likely lead to a scam which will try to steal your personal and payment information.

You can report scam text messages by forwarding them to 7726.

30 December

The mayor of London has warned of ticket scams for London's New Year's Eve fireworks event.

The annual celebration is a ticketed event and the only official place to buy tickets is through Ticketmaster. Resale tickets are also sold through Ticketmaster.

Avoid ticket scams by only using official platforms to buy your tickets and don't be tempted to buy tickets through social media. Never pay for tickets via bank transfer.

23 December

A WhatsApp message impersonating Aldi
A WhatsApp message impersonating Aldi

A WhatsApp message claiming to offer free Christmas gift cards at Aldi includes a malicious phishing link.

This will lead to a dodgy website created to steal your personal and financial information.

You can report WhatsApp messages by selecting them and tapping ‘report’.

To report the sender on WhatsApp, open up the chat, tap on the sender's contact details and select 'block and report'.

Suspicious websites can be reported to the National Cyber Security Centre.

20 December

People's Postcode Lottery scam email

A scam email impersonating the People's Postcode Lottery
A scam email impersonating the People's Postcode Lottery

The People's Postcode Lottery is being impersonated in an email promoting the chance to win a 'scratch advent calendar' in exchange for answering a 'few quick questions.'

The email leads to a malicious website designed to steal your financial and personal data.

You can report scam emails to report@phishing.gov.uk.

Scam websites can be reported to the National Cyber Security Centre.

18 December

Cadbury WhatsApp scam

A scam WhatsApp message impersonating Cadbury
A scam WhatsApp message impersonating Cadbury

An out of the blue WhatsApp message telling you that you've won a chocolate hamper leads to a scam survey site.

We first reported on this scam in December 2022, which led to a website asking for your personal and financial data in exchange for a non-existent Christmas giveaway.

You can report a WhatsApp message by selecting it in your conversation and tapping ‘report’.

To report the sender on WhatsApp, open up the chat, tap on the sender's contact details and select 'block and report'.

Scam websites can be reported to the National Cyber Security Centre.

17 December

Apple ID scam

A scam email impersonating Apple
A scam email impersonating Apple

Emails impersonating Apple telling you that your Apple ID account is disabled due to it being compromised are circulating.

The email includes a link to a malicious website to 'verify' your account which will try to get your personal and financial information.

You can report scam emails to report@phishing.gov.uk.

Suspicious websites can be reported to the National Cyber Security Centre.

11 December

Job scam text

A text from a scammer claiming to be from Reed jobs
A text from a scammer claiming to be from Reed jobs

A scam text claims to offer a remote work from home job which pays £100 - £300 a day.

The message then tells you to follow a link to contact the 'manager' on WhatsApp.

This will lead you to a scammer who will try to get your personal and financial details or con you over the course of weeks in a fake job.

You can report scam texts by forwarding them to 7726.

10 December

Seasalt Cornwall scam

A scam advert on Facebook impersonating Seasalt Cornwall
A scam advert on Facebook impersonating Seasalt Cornwall

Scam ads leading to dodgy websites are impersonating clothes shop Seasalt Cornwall.

The ads and sites promote too good to be true discounts on items in an attempt to steal your personal and financial data.

To report scam ads on Facebook, select the three dots in the top right corner and press 'report.'

Suspicious websites can be reported to the National Cyber Security Centre.

5 December

HMRC scam text

A scam text impersonating HMRC
A scam text impersonating HMRC

A scam HMRC text instructing you to call a number to 'avoid being summoned to court' over unpaid tax is circulating.

This number will put you through to a scammer who will try to get your personal and payment information.

HMRC does occassionally send text messages to some of its customers, which can sometimes include links to GOV.UK or to its webchat.

Scam texts can be reported by forwarding them to 7726.

2 December

TalkTalk scam email

A scam email impersonating TalkTalk
A scam email impersonating TalkTalk

A scam email which tells you to 'sign in to keep using your email' says that your account with TalkTalk has not been verified.

It goes on to give you a link to 'verify' your account and threatens that if this is not done, your account it will be disabled tomorrow.

This link will lead to a malicious website that will either download malware onto your device or take you to a phishing site designed to steal your personal data.

Scam emails can be reported by forwarding them to report@phishing.gov.uk.

Dodgy websites can be reported to the National Cyber Security Centre.

27 November

Fake Jo Malone advent calendar

A scam email promoting a fake Jo Malone advent calendar
A scam email promoting a fake Jo Malone advent calendar

An email promoting a free Jo Malone Advent Calendar asks you to follow a link and complete a 'marketing survey' to receive the item.

The link leads to a malicious site where you're asked survey questions against a countdown timer before needing to enter your personal and payment data.

You can report scam emails by forwarding them to report@phishing.gov.uk.

Scam websites can be reported to the National Cyber Security Centre.

25 November

'Winter living welfare' scam

A scam text about a bogus 'winter living welfare' payment
A scam text about a bogus 'winter living welfare' payment

A scam text tells you that a 'liaison officer' has tried to contact you several times about a 'winter living welfare' payment.

It goes on to give you a quick deadline to collect this payment by following a malicious link.

Scam texts can be reported by forwarding them to 7726.

Scam websites can be reported to the National Cyber Security Centre.

21 November

Virgin Media scam email

A scam email impersonating Virgin Media
A scam email impersonating Virgin Media

A dodgy email impersonating Virgin Media tells you that 'potentially dangerous viruses' have been detected on your device.

It goes on to list these viruses and includes a link to 'fully remove these threats and secure your data.'

This link will lead to a malicious website created to download malware to your device or steal your personal information.

You can report scam emails by forwarding them to report@phishing.gov.uk.

Scam websites can be reported to the National Cyber Security Centre.

19 November

Stationery advent calendar scam

Stationery company Martha Brook has been impersonated across scam ads and listings on Facebook, Instagram, Amazon, eBay, Shein, Temu and TikTok claiming to sell its '24 Days of Stationery Advent Calendar' which has sold out.

The ads and listings use videos and images stolen from Martha Brook.

In some instances, scammers are sending counterfeit versions of the advent calendar.

To report scam ads on social media, select the three dots in the right corner of the ad and press 'report.'

On Amazon, at the bottom of 'about this item' press 'report an issue with this product.'

On eBay, scroll down to 'about this item' and select 'report this item' on the right.

On Temu, opposite the item's 'details,' select 'report this item.'

15 November

Dodgy restaurant Facebook page

A post promoting a free dinner for two at Harvester
A post promoting a free dinner for two at Harvester

A dubious Facebook page advertising free meals at various restaurants leads to the Rewards Giant website.

Rewards Giant is a company which claims to offer free vouchers on social media. However, chasing these vouchers could cost you time and money, and you probably won’t get anything in return.

To report Facebook pages, select the three dots on the right of the page and press 'report page.'

12 November

Premier Inn scam email

A scam email impersonating Premier Inn
A scam email impersonating Premier Inn

An email impersonating Premier Inn claims to offer a 'luxury 2-piece set' in exchange for questions 'regarding your experience at Premier Inn.'

This will lead to a phishing website which will ask you questions to get your personal and financial information.

You can report scam emails by forwarding them to report@phishing.gov.uk.

Malicious websites can be reported to the National Cyber Security Centre.

8 November

Action Fraud warns of DVLA scams

Action Fraud has received 1,186 reports about scam emails impersonating the Driver and Vehicle Licensing Agency (DVLA).

The messages claim that your vehicle tax payment has failed and includes a link to 'retry payment.'

This will lead to a malicious website designed to steal your personal and financial information.

You can report scams by forwarding them to report@phishing.gov.uk.

Malicious websites can be reported to the National Cyber Security Centre.

6 November

Portable heater scam email

A scam email advertising a portable heater
A scam email advertising a portable heater

A dodgy email which claims to offer a portable heater for 30% off and says that the device is endorsed by Elon Musk. 

You're encouraged to follow a link to 'order now' which will lead to a malicious site that'll ask for your personal and financial data.

This is yet another example of a celebrity scam advert. Scam emails can be reported by forwarding them to report@phishing.gov.uk.

Phishing websites can be reported to the National Cyber Security Centre.

4 November

Tesco voucher scam

A scam email impersonating Tesco
A scam email impersonating Tesco

An email impersonating Tesco offers a non existent voucher for £750.

It includes a dodgy link to a phishing website which will try to get your personal and financial details.

You can report scam emails by forwarding them to report@phishing.gov.uk.

Malicious websites can be reported to the National Cyber Security Centre.