HMRC, bank, delivery and fake Microsoft support scams explained, with the warning signs to share with your family, how to report them and what to do if you clicked.
Almost everyone in the UK now receives scam messages every week. Most are easy to ignore. The dangerous ones are well written, arrive at a stressful moment and look exactly like the real thing. Fraudsters target everyone, but older relatives are hit particularly hard, and the losses can be life-changing.
This is a guide you can share with your family. It covers the scams we see most often when helping people across London, the warning signs that give them away, and what to do if something has already gone wrong.
The Golden Rules
If your family only remembers one part of this article, make it this:
- Your bank, HMRC, the police and Microsoft will never ask you to move money to a "safe account" or read out a security code.
- Urgency is a warning sign. "Act now or your account will be closed" is designed to stop you thinking.
- Never use the contact details in the message. Hang up, close the email, and contact the organisation using a number or website you already trust.
- It's always fine to say no and check. A genuine organisation will never mind.
Agree a family rule: if anyone is asked for money, a code or access to a device, they stop and call a family member first. No one will ever be told off for checking.
The Most Common Scams Right Now
Fake HMRC messages
Texts or emails saying you're owed a tax refund, or calls claiming you owe tax and will be arrested if you don't pay today. HMRC doesn't text or email about refunds with a link to claim, and it never threatens immediate arrest.
Bank impersonation
A call from "your bank's fraud team" saying your account has been compromised. The caller may know your name, address and even part of your card number. They ask you to move money to a safe account, or read out a code that has just been texted to you. That code is what lets them into your account.
Delivery and parcel texts
"We missed you, please pay a small redelivery fee." The link goes to a convincing fake Royal Mail, Evri or DPD site that collects your card details. Real couriers rarely ask for fees by text.
"Microsoft" or "BT" support calls and pop-ups
A call or a full-screen pop-up saying your computer has a virus and you must ring a number. The "technician" then asks you to install remote access software, takes control of your computer and either steals your banking details or demands payment. Microsoft will never call you unprompted about your computer.
"Hi Mum" messages
A WhatsApp or text from an unknown number: "Hi Mum, I've dropped my phone, this is my new number." It quickly moves to an urgent bill they need help paying. Always call the old number or ask a question only your real child would know.
Warning Signs to Look For
- A sender address or phone number that doesn't quite match the organisation.
- Generic greetings like "Dear customer".
- Links that, when you hold your finger on them or hover the mouse, point to an odd web address.
- Pressure to act quickly, or to keep the call secret from family or the bank.
- Requests to pay by bank transfer, gift cards or cryptocurrency.
- Being asked to install an app or let someone "connect" to your device.
For a closer look at email tricks in particular, see our guide on how to spot a phishing email. It was written for businesses, but the signs are identical at home.
How to Report Scams in the UK
Reporting takes seconds and helps block scammers for everyone.
- Scam texts: forward them to 7726. It's free and works on every UK network.
- Scam emails: forward them to report@phishing.gov.uk, run by the National Cyber Security Centre.
- Suspicious calls about your bank: hang up and dial 159, which connects you safely to most major UK banks.
- If you've lost money or been hacked: report it to Action Fraud, the UK's national reporting service for fraud and cybercrime, online or by phone. In Scotland, contact Police Scotland on 101.
What to Do If You've Clicked or Paid
It happens to clever, careful people every day. What matters is acting quickly.
- Call your bank immediately using the number on the back of your card or 159. Tell them exactly what happened. The faster they know, the better the chance of stopping payments.
- Change your passwords, starting with email, because it can be used to reset everything else. Use a different device if you think yours is compromised.
- Turn on two-factor authentication for email, banking and shopping accounts.
- If someone had remote access, disconnect the computer from the internet and have it checked properly before you use it for banking again.
- Report it to Action Fraud and keep a note of dates, times, numbers and amounts.
- Talk about it. Embarrassment stops people asking for help, and scammers often come back for a second attempt.
Be wary of anyone who contacts you afterwards offering to recover your lost money for a fee. "Recovery" scams specifically target people who have already been defrauded.
Practical Protection at Home
- Keep phones, tablets and computers on automatic updates.
- Use a password manager so every account has a unique password.
- Turn on call and message filtering on mobile phones.
- Register with the Telephone Preference Service to cut down on cold calls.
- Set up the iPad or phone of an older relative carefully. Our guide to setting up an iPad for an elderly parent covers the key settings.
Key takeaway
Genuine organisations never pressure you, ask for codes or ask you to move money. Hang up and check using a number you trust. Forward scam texts to 7726 and emails to report@phishing.gov.uk, and if you've clicked or paid, call your bank straight away.
Need a Hand?
If you're worried about a parent, or you think a device may have been compromised, our tech help for seniors and remote support services can check devices, tighten settings and talk the whole family through staying safe. Senri Home works seven days a week, with a personalised quote agreed before any work. Book a visit or call or WhatsApp 07826 399715.
Related Reading
Want to talk about this?
Book a free 15-minute call and we'll discuss how this applies to your business.
Get IT tips in your inbox
Practical advice for small businesses. No spam.
