The latest scam alerts from Which?
Find out about the latest scams trending this month. Come across a scam? Let us know by using our scam sharer tool.
Join over half a million Scam Alert subscribers and get free weekly updates on the scams you need to be aware of. In just five years, Which? Scam Alerts has helped subscribers to avoid almost £5.5m in scam losses.
8 July
O2 inactive SIM cold call and texts
Watch out for scam calls and texts targeting O2 customers.
The scam message or call claims your SIM is inactive and will expire. You're typically told to give details to issue a new SIM, either over the phone or via a dodgy website.
O2 has warned that it has blocked over 1 billion scam messages to date, including thousands of the latest 'inactive SIM' scam.
Scam messages can be reported by forwarding them to 7726, and websites can be reported to the National Cyber Security Centre.
6 July
Aldi air-con scam
Cybersecurity firm Kaspersky has found fraudulent websites impersonating retailers such as Aldi to flog air conditioning systems.
It also revealed that scammers have created fraudulent emails in an attempt to promote dodgy or non-existent air conditioning products.
Kaspersky highlighted one example it came across where scammers impersonated a legitimate portable air cooler brand on a dodgy website designed to steal your personal and financial details as you enter them in.
In another example, scammers impersonated an existing brand that manufactures portable air coolers.
The websites it discovered used limited-time discounts and accurate branding of the companies they impersonated to trick shoppers into handing over their information.
Scam websites like these can be reported to the National Cyber Security Centre and emails by forwarding them to report@phishing.gov.uk
30 June
Evri scam text
A scam text message claiming to be from Evri tells you that your delivery couldn't be completed due to incorrect address details.
It then provides a link for you to follow to correct this. The link will lead to a dodgy site impersonating Evri. Entering your details into this website will hand them over to a scammer.
Scam messages can be reported by forwarding them to 7726 and websites can be reported to the National Cyber Security Centre.
25 June
Scam Aldi advert
A fraudulent advert appearing on Google impersonates Aldi and leads to a copycat website.
You can report scam ads and search results on Google by filling out a form on its website. You can also select the three dots next to the ad or search result and press 'feedback' then 'something else' and explaining the scam.
Scam websites can be reported to the National Cyber Security Centre.
Find out more about how to spot and report scam adverts found on search engines.
Housing repair scam call
Reports to Who Called Me detail a scam call made from a most likely spoofed London-based landline number.
An automated message, in an attempt to get your personal data, tells you that the call is from housing repairs.
Scam calls received on an iPhone can be reported by texting the word ‘call’ followed by the phone number to 7726.
If you have an Android phone, text the word ‘call’ to 7726. You’ll then receive a message asking you for the scam number.
15 June
'Apple iPhone hacked' pop-up
A scam pop-up which appears after clicking a dodgy link tells you that your details have be found in a data breach and your device is at risk of being compromised.
It also gives you buttons to click which typically lead to malware being downloaded on your device.
This type of scam is known as scareware and has been a popular tactic for a while. Usually, you can safely ignore these pop-ups by closing your browser.
10 June
Netflix scam email
A dodgy email impersonating Netflix tells you that your payment to the streaming service has failed and says that your account will be permanently deactivated in three business days.
It goes on to provide a link to update your payment details. Clicking this will lead to a phishing website designed to take your personal and payment information.
Scam emails like this can be reported by forwarding them to report@phishing.gov.uk
8 June
Argos account hack
Report Fraud has recently warned of a rise in reports of criminals using personal details of Argos customers, likely gleaned from data breaches, to log in to their accounts with the retailer.
Once they have control of the account, they're placing online orders and collecting the items in-person at a physical store. Sometimes, payments are made using details that aren't associated with the victim of the compromised account.
Report Fraud received 652 reports mentioning Argos in May 2026 and 1,175 reports since the start of the year.
Argos has been contacting customers who may have been affected.
Scammers are able to do this due to the use of the same password across more than one account. So make sure you create a strong, unique password for each account you have.
If you have had your account compromised, report it to the retailer using contact details on their official website as well as to Report Fraud or by calling the police on 101 if you live in Scotland.
1 June
Postcode lottery scams
Fraudsters are impersonating the People’s Postcode Lottery.
Reports claim scammers are contacting people via phone calls and fake social media accounts to promote sham version's of the Lottery.
Which? has previously reported on scam emails and letters impersonating the organisation.
You can only win the People’s Postcode Lottery if you sign up, after which you're entered into prize draws every month. The official website is www.postcodelottery.co.uk
You can report scam accounts on social media by selecting the three dots in the top right corner and pressing 'Report.'
Scam calls can be reported by texting the word ‘call’ followed by the phone number to 7726 on an iPhone. If you have an Android phone, text the word ‘call’ to 7726. You’ll then receive a message asking you for the scam number.
Scam emails can be reported by forwarding them to report@phishing.gov.uk and Royal Mail provides a form that you can use to report scam letters.
Barclays impersonation text
A dodgy text message sent from a spoofed number claims to be from Barclays.
It tells you that your credit card application for £1,500 has been approved and provides a number to call if you didn't make the application.
Calling this number will connect you to a scammer who'll try and get you to reveal personal or financial information. This number has been spoofed in other scam texts
Scam messages can be reported by forwarding them to 7726.
28 May
BT scam email
An email which claims to be from BT says you can claim a discount on a Wi-Fi booster.
This link will take you to a phishing website which will steal your information as you enter it in.
Dodgy emails can be reported by forwarding them to report@phishing.gov.uk and websites to the National Cyber Security Centre.
26 May
DVLA impersonation email
A phishing email claiming to be from the DVLA tells you that some of the information on your driving licence is out of date.
It also says that you could be fined up to £1000 if your licence isn't up to date and provides a link to follow to update your name, date of birth, full address and payment details.
This information will be gathered by scammers to scam you either immediately or in the future.
Dodgy emails like these can be reported by forwarding them to report@phishing.gov.uk
Phishing websites can be reported to the National Cyber Security Centre.
18 May
EE scam email
A scam email impersonating EE tells you that you're in with a chance of receiving a brand new Wi-Fi booster.
The email will go on to provide a link to claim the item, which will lead to a phishing website designed to steal your personal and financial information.
Scam emails like this can be reported by forwarding them to report@phishing.gov.uk
Phishing websites can be reported to the National Cyber Security Centre.
13 May
Barclays scam text
A scam text impersonating Barclays from a spoofed mobile number tells you that a direct debit has been arranged.
It goes on to provide a number to call, which will most likely put you through to a scammer who'll try to get you to reveal your personal and financial information.
Scam texts like this can be reported by forwarding them to 7726.
11 May
Scam FCA text
Text messages claiming to be from the Financial Conduct Authority (FCA) claim that your details were identified in a Report Fraud report and your personal data is at risk due to a data breach.
It gives you a number to call and reports suggest that if you call the number and you will be asked for your first and last name, who you bank with and your current balance.
One report also said they were given a 5 digit reference code to quote when called by a 'manager' to verify fraudulent activity.
Scams like these typically encourage you to give personal and financial information.
Scam texts can be reported by forwarding them to 7726.
5 May
Dodgy car finance text
A scam text sent from a claims management firm tells you that you could be owed up to £2,487 in mis-sold car finance and provides a link to see how much you're owed.
It also includes a number to text to stop receiving messages. On Who Called Me, reports of this number claim receiving the text despite not being owed any money.
Drivers who were mis-sold car finance are now due compensation and rogue claims firms are cropping up.
You can search the Financial Conduct Authority's (FCA) register to see if a company can legally provide financial services in the UK.
Scam and spam texts can be reported by forwarding them to 7726.
27 April
TV Licence scam email
A scam email impersonating TV Licensing tells you that your TV Licence could not be renewed and provides a link to start the renewal process.
The email also says that your direct debit payment has been declined and is sent from a '.jp' domain, which is a Japanese-registered email address.
The link included in it will lead to a phishing website intent on stealing your personal and payment information.
Scam emails like this can be reported by forwarding them to report@phishing.gov.uk
Phishing websites can be reported to the National Cyber Security Centre.
21 April
Apple scam text
A text which claims to be from Apple tells you that there was a 'problem processing your billing details.'
It also says that your account is temporarily paused and provides a phishing link to rectify this.
This will lead to a website which will steal your personal and financial information after you enter it in.
Scam texts can be reported by forwarding them to 7726 and scam websites can be reported to the National Cyber Security Centre.
13 April
National Rail impersonation email
An email impersonating National Rail tells you that you're in with a chance of getting a pair of earbuds for being a 'valued National Rail passenger.'
It provides a link to 'claim' these which will probably lead to a dodgy website, set up to gather your personal details.
Scam emails like this can be reported by forwarding them to report@phishing.gov.uk
Phishing websites can be reported to the National Cyber Security Centre.
Fortnum & Mason scam email
A dodgy email claiming to be from Fortnum & Mason tells you that you're eligible for a 'Tea Explorer Hamper' by following a suspicious link.
This will most likely lead to a phishing website created to steal your personal and payment details when you enter it in.
Scam emails like this can be reported by forwarding them to report@phishing.gov.uk
Phishing websites can be reported to the National Cyber Security Centre.
31 March
Car finance claims scams
Watch out for scammers taking advantage of the Financial Conduct Authority's car finance compensation scheme.
Which? is aware of dodgy texts, emails and websites claiming that you're owed compensation for mis-sold car finance.
The aim of this scam is to trick you into sharing your personal and sensitive information.
Scam texts can be reported by forwarding them to 7726, scam emails can be forwarded to report@phishing.gov.uk and scam websites can be reported to the National Cyber Security Centre.
30 March
DPD delivery scam
Which? is aware of a DPD delivery text scam circulating.
Versions of this message are likely to warn that there has been a missed delivery that you need to rearrange or an unpaid fee.
The message will instruct you to reply to the text, or follow a link to give further information or card details. Some will use very convicing copycat websites, such as in this version of a DPD scam that we warned about in August 2021.
Do not reply to the message or follow any link. Report the message to 7726, a free reporting service run by phone operators.
If you are concerned it could be genuine, visit the DPD website directly and use verified contact details or tracking information from its website.
25 March
Garden waste subscription scam
Bassetlaw District Council, a council in Nottinghamshire, has warned residents of fake garden waste subscription leaflets being posted.
The leaflets feature QR codes to scan, which could lead to phishing websites or malware being downloaded to your device.
Phishing websites can be reported to the National Cyber Security Centre.
23 March
Evri copycat site
A scam text which says that your delivery failed due to a signature being required provides a link to reschedule the delivery.
This link leads to a convincing Evri copycat site complete with up to date logos and branding.
Entering your personal information into sites like these leaves you vulnerable to being scammed in the future, as fraudsters can use these details to make their scams more convincing.
Scam texts can be reported by forwarding them to 7726 and scam websites can be reported to the National Cyber Security Centre.
Account closure scam
A scam email impersonating Microsoft tells you that your account will close due to 'inactivity.'
It goes on to say that you won't be able to access any Microsoft services including Windows and Outlook, or access any of your data stored on these services.
The email also includes a link to 'keep your account open' which will most likely lead a phishing site intent on stealing your personal details.
Scam emails like this can be reported by forwarding them to report@phishing.gov.uk
Scam websites can be reported to the National Cyber Security Centre.
16 March
Marriott Hotel impersonation email
A scam email claiming to offer 'Marriott luxury pillows' includes a dodgy phishing link.
Following this link will lead to site that will steal your personal and financial information after you enter it in.
Scam emails like this can be reported by forwarding them to report@phishing.gov.uk
Scam websites can be reported to the National Cyber Security Centre.
11 March
Cloud Storage scam
A scam email tells you that your account is scheduled for deletion and that you face 'permanent data loss' of your files.
This is a fake email attempting to worry you into following a dodgy link.
The link will lead to a website that will steal you personal data or download malware to your device.
Scam emails like this can be reported by forwarding them to report@phishing.gov.uk
3 March
Scammers impersonate Wiltshire Police
Fraudsters are claiming to be from Wiltshire Police and calling residents to tell them a package is being held as part of an investigation.
In this scam, the fraudsters will give you a made up crime reference number and told you'll be called by your bank.
Then you'll be called by the same scammers, but this time, they'll be impersonating your bank and will go on to request access to your account.
You should never disclose financial details to callers over the phone.
On an iPhone, you can report scam calls to your provider by texting the word ‘call’ followed by the phone number to 7726.
If you have an Android phone, text the word ‘call’ to 7726. You’ll then receive a message asking you for the scam number.
23 February
Norton scam email
A malicious email claiming to be from cybersecurity company Norton tells you that your subscription to the software has expired and therefore, your device is vulnerable to 'malicious software,' 'viruses' and 'identity theft.'
It goes on to promote a 70% discount on the subscription service and gives you a link to 'renew' it.
This link will lead to a dodgy website which will either steal your personal details or download malware to your device.
You can report scam emails like this by forwarding them to report@phishing.gov.uk and suspicious websites to the National Cyber Security Centre.
16 February
Scam 'Hi mum' text
The 'Hi mum' text is a scam message that continually does the rounds and sees scammers posing as adult children.
In a new version of the scam, the text addresses the recipient as mum and attempts to continue the conversation on WhatsApp.
Here, the scammer will make up an emergency scenario in an attempt to get you to transfer them money.
You can report scam texts by forwarding them to 7726.
11 February
Mail Online impersonation scam
A dodgy email impersonating the Daily Mail website and Dragons' Den claims to offer an 'amazing weight loss supplement.'
The email goes on to include a link to buy the product, which will lead to a malicious website designed to steal your personal and financial information.
You can report scam emails like this by forwarding them to report@phishing.gov.uk and suspicious websites to the National Cyber Security Centre.
9 February
Which? scam accounts on X
On X, formerly known as Twitter, fraudsters were impersonating Which? through the account handles @whichukrep and @WhichukAsk.
Accounts like these will try and get you to reveal personal and financial information.
Which? reported these accounts and they have now been suspended. You can report accounts on X by selecting the three dots on the account page and pressing report.
Which?'s official X account is @WhichUK.
Apple scam email
A dodgy email impersonating Apple tries to get you to act quickly by telling you that 'your system is heavily damaged by viruses.'
It goes on to provide a link to 'remove viruses' which could lead a phishing website or malware being downloaded to your device.
You can report scam emails like this by forwarding them to report@phishing.gov.uk.
2 February
Cleaning Superstore WhatsApp scam
A scam circulating WhatsApp appears to have hijacked a legitimate WhatsApp business account to spread a delivery scam.
Which? has previously reported on this type of scam which saw another compromised business account be used by fraudsters to send out 'missed delivery' scam messages.
WhatsApp messages sent from Cleaning Superstore, a genuine business located in the UAE, tell you that you've missed a delivery and provide a dodgy link to reschedule.
This link will lead to a malicious site set up to steal your personal and financial information after you enter it in.
To report a WhatsApp user, open up the chat, tap on the sender's contact details and select 'block and report'.