Halifax Scam Texts: How to Spot a Fake Halifax SMS (UK)
Scammers are sending fake Halifax text messages claiming urgent account issues—here's exactly how to tell them apart from genuine alerts.
What a fake Halifax text looks like
A Halifax scam text - smishing, or SMS phishing - is a fake message that pretends to be from the bank so you will tap a link and hand over login details, card details, or a one-time passcode. An example of the style is: HALIFAX: We've blocked a payment of £79.99. If this wasn't you, verify your account here: halifax-secure-verify.example.
The exact wording changes: a new payee, locked account, suspicious login, blocked card, or payment you do not recognise. The goal is to make you act before you check.
Why a Halifax text can look convincing
Scammers can use familiar-looking sender names and wording. A fake may appear near genuine alerts on your phone, so you cannot rely on sender display or message position alone.
Halifax's official fraud contact page says Halifax will never ask you to tell them your account details, share your Personal Security Number, tell them your PIN or card expiry date, or move money to another account. If a text asks you to do any of those things, treat it as a scam.
Signs a Halifax text is a scam
- It pressures you to act fast: an account "locked", payment "held", or deadline.
- It asks you to tap a link to "verify", "reconfirm", "secure", log in, or re-enter card details.
- The link uses a lookalike or unusual domain. Do not use text-message links for banking; open the app or type the address yourself.
- It asks for your password, PIN, Personal Security Number, card details, or one-time passcode.
- It tells you to move money to a new, holding, or "safe" account.
- A generic greeting can be a clue, but it is weaker by text than by email.
- Errors can help, but a polished text can still be fraudulent.
How the Halifax text scam works
First, a text appears to come from Halifax, warning of a blocked payment, new payee, or suspicious login. Second, it pushes you to a link to stop the payment or restore access. Third, the link opens a copycat page that asks for banking or card details. Fourth, the criminals capture what you enter. Fifth, they may trigger a real one-time passcode and ask you to enter it. Finally, they try to move money, add payees, or use the details in further fraud.
How to check if a Halifax text is genuine
Do not use the number or link in the message. Use one of these independent routes:
- Call 159. Stop Scams UK lists Halifax as a 159 participant.
- Open the official Halifax app and check activity or secure messages.
- Type
halifax.co.ukyourself, or use a trusted bookmark. - Call the number on the back of your debit or credit card.
Not every genuine text will appear as an in-app message. If you cannot confirm the claim, contact Halifax directly.
If you are unsure whether a linked website is a copycat, our guide on Is This Website a Scam? A Practical Checklist Before You Buy walks through the checks.
What to do if you have already tapped the link or shared details
If you entered login details, card details, or a passcode, call 159 or the number on your card immediately. Ask Halifax to secure the account and check for payments, payees, card activity, or account changes you do not recognise.
Change your Halifax password only through the official app or by typing the address yourself. Change it anywhere else you reused it. If you shared card details, ask Halifax to stop and reissue the card.
If you sent money by UK bank transfer on or after 7 October 2024, mandatory APP fraud reimbursement rules may apply to Faster Payments and CHAPS transfers. The PSR rules include a 13-month claim window, a maximum claim amount of £85,000, possible exclusions, and a possible excess of up to £100. Report it to the bank as soon as possible.
Consider Cifas Protective Registration at cifas.org.uk if identity misuse is a risk, and check your credit reports for applications you do not recognise. Keep the text as evidence.
If you bank elsewhere, the same checks apply — see, for example, our Lloyds Scam Texts: How to Spot a Fake Lloyds SMS (UK) guide.
How to report a Halifax scam text in the UK
Forward the text to 7726. The NCSC says most UK phone providers let customers report suspicious texts for free this way.
If you lost money, shared sensitive information, or were hacked, report it to Report Fraud at reportfraud.police.uk or on 0300 123 2040 if you are in England, Wales, or Northern Ireland. In Scotland, report to Police Scotland on 101.
If the scam arrived by email, forward it to the NCSC at report@phishing.gov.uk. Tell Halifax through the app or the number on your card, and keep screenshots.
Frequently asked questions
Is a Halifax text with a link always a scam?
No. A link alone is not proof either way. Never use a text link to log in, confirm details, enter a one-time code, or move money. Check independently.
Can a scam text appear with genuine Halifax messages?
Yes. Sender display and phone grouping are not reliable proof. Verify through the app, 159, or the number on your card.
What number should I call to check a Halifax text safely?
Call 159 or the number printed on the back of your card. Do not call a number supplied in the suspicious text.
I tapped the link and entered my details - what should I do now?
Contact Halifax immediately using 159, the app, or the number on your card. Change your password through the official app or site, stop your card if needed, and report any payment you did not make.
How do I report a fake Halifax text in the UK?
Forward it to 7726. If you lost money or shared sensitive information, report it to Report Fraud in England, Wales, or Northern Ireland, or to Police Scotland on 101 in Scotland.