💳 Access Device Fraud UK — What It Is and How to Stop It

Sunday, 02 August 2026

Access device fraud is the umbrella term for fraud committed using a device that gives criminals access to your money — a stolen debit card, a cloned card, a compromised phone, or hijacked online banking login.

It's one of the fastest-growing fraud types in the UK, and it often starts long before the money moves. This guide explains the main forms, how criminals get your details, and how to lock them out.

The main forms of access device fraud

Type	How it works
Card fraud	Your card is stolen, cloned, or used without permission — in shops, online, or at ATMs
SIM swap	A criminal convinces your mobile provider to move your number to their SIM, then intercepts your one-time codes
Account takeover	Criminals use stolen passwords + intercepted codes to log into your banking
Card-not-present (CNP) fraud	Your card details (number, expiry, CVC) are used for online purchases without the card
Lost/stolen device fraud	A stolen phone or laptop is used to access your accounts before you lock it

How criminals get your details

Phishing — fake emails/texts that look like your bank (see our phishing guide)
Vishing — fake calls from "your bank's fraud team" asking you to confirm details
Skimming — hidden card readers on ATMs and payment terminals
Data breaches — your details leaked from companies you use (check haveibeenpwned.com)
Malware — malicious apps or links that steal what you type
SIM swap — social engineering your mobile provider directly

⚠️ Key rule: your bank will never ask you to confirm your full PIN, password, or one-time code by phone, text, or email. Anyone who does is a fraudster.

SIM swap: the one to worry about

SIM swap is how criminals get past two-factor authentication:

They gather your personal details (phishing, breaches, social media)
They contact your mobile provider claiming to be you — "lost my phone, need a new SIM"
Your number moves to their SIM — your one-time codes now go to them
They reset your banking passwords and drain your accounts

Warning signs you're being SIM-swapped:

Your phone suddenly loses signal or shows "no service" while the SIM is still in it
You stop receiving calls and texts
Your provider emails you about a SIM change you didn't request

If your phone goes dead for no reason — call your provider immediately. That's the classic SIM-swap symptom.

How to protect yourself

Use a banking app PIN/biometric instead of SMS codes where possible
Never share one-time codes — not with "the bank", not with "tech support", not with anyone
Ask your mobile provider to add a SIM-swap PIN — most UK providers let you set one
Check your bank statements weekly — small test transactions are a red flag
Use different passwords for banking, email, and shopping (use a password manager)
Freeze your credit with the credit reference agencies (Experian, Equifax, TransUnion)
Set up transaction alerts — most banking apps notify you of every payment
Report lost/stolen cards instantly — the card is dead the moment you call

What to do if you're a victim

Call your bank's fraud line immediately — they can block the card/account and recall payments
Report to Action Fraud — 0300 123 2040 or actionfraud.police.uk
Get a crime reference number — you'll need it for refunds
Tell your mobile provider if you suspect SIM swap — they can freeze the account
Check for other accounts — change passwords on email and any account using the same details
Add Cifas Protective Registration — marks your address so lenders do extra checks (about £25/2 years)

Can you get your money back?

Often yes — but act fast:

Unauthorised transactions (card cloned, account taken over): your bank must refund you in most cases
Authorised payments (you were tricked into paying): APP fraud rules apply — see how to get your money back after a scam
The faster you report, the stronger your claim — banks expect prompt notification

Related guides

CyberAware UK — helping families report crime, recover from scams, and stay safe online.