How to Spot and Avoid Scams in the UK: The Core Rules
Learn the pattern behind scams once, and you'll recognise it whatever story it's wrapped in.
The pattern behind almost every scam
Whatever the story — a bank, a courier, a government department, a new online friend — almost every scam follows the same underlying pattern: unexpected contact, a reason to act urgently, and a request to move money, share a one-time code, or hand over personal details before you've had time to check. The specific brand or channel changes constantly; the pattern underneath it barely does.
Why scams keep working even on careful people
Scams are built to short-circuit your normal caution by creating fear, excitement, or urgency in the moment. The UK's Take Five to Stop Fraud campaign frames the right response as three simple steps: **Stop** — take a moment before parting with money or information; **Challenge** — could it be fake? It's OK to reject, refuse, or ignore; **Protect** — contact your bank immediately if you've been scammed, and report it. Knowing this framework in advance makes it far easier to apply in the moment, when a scammer is actively trying to stop you thinking clearly.
Warning signs common to almost any scam
- Contact you didn't expect, by phone, text, email, or social media.
- Pressure to act immediately, or being told not to tell anyone else first.
- Being asked to move money to a new or 'safe' account.
- Being asked to share a PIN, password, or one-time security code.
- An offer or deal that seems too good to be true.
- Someone claiming to represent a trusted organisation, such as a bank, the police, or a government department.
How to slow down and check, whatever the scam
Stop replying or engaging with the contact, even if it feels rude or awkward to do so. Contact the organisation it claims to be from yourself, using a number or website you find independently — never one given to you in the message or call. Never move money, share a code, or hand over details because someone on the other end of an unexpected contact is telling you to.
If you think you've been scammed
Stop all further contact with whoever is involved. Contact your bank immediately if money or card details are involved — acting quickly gives you the best chance. Change any password or security detail you've shared, and don't let embarrassment stop you reporting it; scams are designed to catch people out, not to expose carelessness.
Where to get free help in the UK
Citizens Advice offers free, independent guidance on scams and your rights. Take Five to Stop Fraud has practical advice for specific scam types. MoneyHelper offers free guidance on financial decisions, including pensions. The UK government's Stop! Think Fraud campaign also provides general awareness resources.
How to report any scam in the UK
Report it to Report Fraud at reportfraud.police.uk or 0300 123 2040 if you're in England, Wales, or Northern Ireland. In Scotland, report to Police Scotland on 101. Forward a scam text to 7726, and a scam email to report@phishing.gov.uk.
Frequently asked questions
What is the one thing almost every scam has in common?
A push to make you act quickly, before you've had time to check — whether that's moving money, sharing a code, or handing over details.
Is it embarrassing to admit I nearly fell for a scam?
No. Scams are specifically designed to catch people out under pressure, not to expose carelessness. Reporting one helps others too.
What are the three steps in the Take Five framework?
Stop, Challenge, and Protect: pause before acting, ask whether it could be fake, and contact your bank and report it if you've been scammed.
Someone is pressuring me to move money right now. What should I do?
Stop the conversation, however awkward it feels, and contact the organisation involved yourself using details you find independently — never ones given to you by the contact itself.
How do I report a scam in the UK?
Report it to Report Fraud at reportfraud.police.uk or 0300 123 2040 (Police Scotland on 101 in Scotland). Forward scam texts to 7726 and scam emails to report@phishing.gov.uk.