NatWest Scam Texts: How to Spot a Fake NatWest SMS (UK)
Criminals are sending convincing text messages that look like they're from NatWest—but they're designed to steal your login details and access your bank account.
The fake NatWest text - and what it is really after
A NatWest fraud-text scam is smishing: a fake SMS that pretends to be from the bank so you tap a link and give away login details, card details, or a one-time passcode. An example of the style is: NatWest: We blocked a £420 payment from a new device. If this wasn't you, confirm here: natwest-secure-login.example.
The story varies - a blocked payment, payment on hold, new device, frozen card, or suspicious activity - but the aim is to frighten you into acting before you check.
Why it slips past your guard
Scammers can use familiar-looking sender names and bank-style wording. A fake may appear near genuine messages on your phone, so sender display and message position are not reliable proof.
NatWest's official text-scam guide says it will never ask you to call a number in a text message to confirm or cancel payments. It also warns not to click links or download files from sudden text messages, and not to share bank account details, passwords, or one-time passcodes.
Red flags in a NatWest scam text
- It creates urgency: a payment "blocked", a device "added", or access lost unless you act now.
- It sends you to a link to "confirm", "restore", "secure", log in, or re-enter card details.
- It tells you to call a number in the text to confirm or cancel a payment.
- It asks for bank account details, passwords, PINs, card details, or one-time passcodes.
- It tells you to move money to a new, holding, or "safe" account.
- The link goes to a lookalike or unfamiliar domain. Do not use text-message links for banking.
- Errors can be clues, but a polished text can still be fraudulent.
Step by step: how the scam works
First, a text appears to be a NatWest alert about a blocked payment, new device, or suspicious login. Second, it pushes you to a link or phone number. Third, the link opens a copycat page or the caller asks for security details. Fourth, the criminals capture what you provide. Fifth, they may trigger a real one-time passcode and ask for it. Finally, they try to access the account, approve a payment, or use your details for further fraud.
How to check a NatWest text safely
Do not use a number or link from the text. Use one of these independent routes:
- Call 159. Stop Scams UK lists NatWest as a 159 participant.
- Open the official NatWest app and check activity, messages, or My Security Profile.
- Type
natwest.comyourself, or use a trusted bookmark. - Call the number on the back of your card.
NatWest's own guidance says to check transactions in the mobile app or call the number on the back of your card.
If you are unsure whether a linked website is a copycat, our guide on Is This Website a Scam? A Practical Checklist Before You Buy walks through the checks.
Already responded? Do this now
If you entered login details, card details, or a passcode, call 159 or the number on your card immediately. Ask NatWest to secure the account and check for payments, payees, card activity, or account changes you do not recognise.
Change your NatWest password only through the official app or by typing the address yourself. Change it anywhere else you reused it. If you shared card details, ask NatWest to stop and reissue the card.
If you sent money by UK bank transfer on or after 7 October 2024, mandatory APP fraud reimbursement rules may apply to Faster Payments and CHAPS transfers. The PSR rules include a 13-month claim window, a maximum claim amount of £85,000, possible exclusions, and a possible excess of up to £100. Report it as fraud to your bank as soon as possible.
Consider Cifas Protective Registration at cifas.org.uk if identity misuse is a risk, and check your credit reports for applications you do not recognise. Keep the text as evidence.
If you bank elsewhere, the same checks apply — see, for example, our Barclays Scam Texts: How to Spot a Fake Barclays SMS (UK) guide.
Where to report a NatWest scam text
NatWest says suspicious texts referring to NatWest can be forwarded to 88355; standard network rates apply and it is not a premium-rate number. You can also forward scam texts to 7726. The NCSC says most UK phone providers let customers report suspicious texts to 7726 for free.
If you lost money, shared sensitive information, or were hacked, report it to Report Fraud at reportfraud.police.uk or on 0300 123 2040 if you are in England, Wales, or Northern Ireland. In Scotland, report to Police Scotland on 101.
If the scam arrived by email, forward it to the NCSC at report@phishing.gov.uk. Tell NatWest through the app or the number on your card, and keep screenshots.
Frequently asked questions
Is a NatWest text with a link always a scam?
No. A link alone is not proof either way. Never use a text link to log in, confirm details, enter a one-time code, or move money. Check independently.
Can a fake NatWest text land with real alerts?
Yes. Sender display and phone grouping are not reliable proof. Verify through the app, 159, or the number on your card.
What is the safest number to call to check?
Call 159 or the number printed on the back of your card. Do not call a number supplied in the suspicious text.
Can I get my money back after a NatWest text scam?
Possibly. Eligible UK bank transfers over Faster Payments or CHAPS made on or after 7 October 2024 may be covered by APP reimbursement rules, subject to limits and exclusions. Card payments have different protections, such as chargeback.
How do I report a NatWest fraud text?
Forward NatWest-related suspicious texts to 88355 and forward scam texts to 7726. If you lost money or shared sensitive information, report it to Report Fraud in England, Wales, or Northern Ireland, or Police Scotland on 101 in Scotland.