I gave my bank details to a scammer — what should I do first?

Call your bank's fraud line on the number on the back of your card immediately. Tell them you gave your card or account details to a scammer so they can block the card and monitor the account. Do this before reporting anywhere else.

What can a scammer do with my sort code and account number?

They can set up direct debits, attempt identity fraud, or use the details for phishing. Your bank can block new direct debits and you should monitor your account and credit file for months afterwards.

What if I gave a scammer a one-time code?

Act immediately — a one-time code can approve a payment or log into your account. Call your bank right away, change passwords from a different device, and log out of all sessions.

Should I check my credit file after giving details to a scammer?

Yes. Use free services like Credit Karma, ClearScore, or Experian to check for credit applications you did not make, and consider a Cifas protective registration to flag future applications in your name.

I Gave My Bank Details to a Scammer — What Do I Do Now?

Don't panic — but do act fast. Whether you gave away your card number, sort code and account number, or a one-time verification code, the next 30 minutes matter more than anything else. Here's exactly what to do, in order.

What you might have given away

Card number, expiry, CVC — the scammer can shop online or add the card to digital wallets
Sort code + account number — they can set up direct debits or use it for identity fraud
A one-time code (OTP) — they can log into your online banking, approve a payment, or reset a password
Full name, address, DOB — identity theft material

Each one needs slightly different action — but step 1 is always the same.

Step 1: Call your bank's fraud line NOW

Call the number on the back of your card (or from the official app — never a number the scammer gave you). Tell them:

"I've given my card/bank details to a scammer. Please block the card and monitor my account for fraud."

They will:

Block/cancel the card immediately
Check for unauthorised payments and reverse them where possible
Flag the account for monitoring
Ask for the details you gave away so they can assess the risk

Do this before anything else — even before reporting to Action Fraud. The bank is the only one who can stop the money.

Step 2: If you gave a one-time code

One-time codes are the highest risk. If you shared an OTP:

Call your bank immediately — a code can approve a payment, a new payee, or an account login
If it was a card verification code (for online shopping), block the card
If it was a password reset code (email, PayPal, etc.), change those passwords from a different device and log out of all sessions

Step 3: Check for new direct debits and standing orders

With your sort code and account number, scammers sometimes set up small direct debits to test the account. Over the next few weeks:

Check your account for unrecognised direct debits (you can see them in online banking)
Tell your bank to block new direct debits temporarily if you're worried
Set up account alerts for all transactions if you haven't already

Step 4: Report to Action Fraud

Report at actionfraud.police.uk or call 0300 123 2040. You'll get a crime reference number — keep it. It helps if your bank disputes a payment, and it's needed for insurance or credit-file disputes.

Step 5: Check your credit file

Your details can be used for credit fraud — someone opening accounts in your name. It's free to check:

Credit Karma (free) — TransUnion data
ClearScore (free) — Equifax data
Experian (free tier)

Look for credit applications you didn't make. If you find any, contact the lender and Cifas (cifas.org.uk) — you can add a protective registration that flags future applications in your name.

Step 6: Change passwords (from a safe device)

If you gave any passwords or security answers:

Change them from a different device than the one the scammer might have accessed
Prioritise: email, online banking, PayPal, phone provider (SIM swap risk)
Turn on two-factor authentication everywhere important

Real-world example

"I got a call from 'my bank's fraud team' and read back a text code to 'verify it was me'. Within an hour £1,400 was transferred from my account. I called the real fraud line — they blocked everything and recovered the full amount within a week because I reported it in time."

Why it worked: the victim called the genuine number immediately, the bank froze the account before the money moved on, and the claim was documented with a crime reference.

How long do I have?

Card details: block the card as soon as you realise — every hour increases the risk
OTP/code: minutes matter — codes expire, but the scammer uses them instantly
Account number fraud: usually slower (direct debits, identity fraud) — but check your credit file for months afterwards

The bottom line

Give your bank details to a scammer? Call the bank's fraud line first, before anything else. Then report to Action Fraud, watch for direct debits, and check your credit file. Fast action recovers money and stops identity fraud — hesitation is what costs victims.

Worried a message or call is a scam? Use the free CyberAware UK Scam Checker or Phone Checker, and read our identity fraud guide.