📱 Real Scam Texts & Emails People Are Getting in the UK Right Now (2026)

Monday, 07 September 2026

If you received one of the messages below — don't click, don't pay, don't reply. These are the real scam formats circulating in the UK in 2026. Every one of them is designed to make you act fast, panic, or trust a fake sender.

This guide shows you what today's scam texts, emails and WhatsApp messages actually look like, why each one is fake, and the exact move to make next.

⚡ The 3-second rule: A genuine bank, courier, or government body will never rush you with a link, a code request, or a "pay now or else" threat. If a message does that — it's a scam.

What to do next (60-second version)

Real scam text messages (2026)

1. "Your parcel is on hold" — courier redelivery text

Text: "ROYAL MAIL: Your parcel is on hold due to an unpaid postage fee of £2.99. Arrange redelivery here: royal-mail-delivery[.]top"

2. "Unusual activity on your account" — bank OTP text

Text: "HSBC ALERT: A new device just tried to log in to your account. If this wasn't you, verify now: hsbc-security-verify[.]com"

  • Why it's fake: Banks never send login-verification links by text. The sender ID can be spoofed to look like "HSBC".
  • The trap: The page asks for your online banking password and the OTP code — giving criminals full access.
  • If you got this: Call your bank on the number on the back of your card. Never use a number in the text.
  • More: The fake bank-call & OTP scam explained

3. "Your TV Licence is expiring" — refund/fine text

Text: "TV Licensing: your Direct Debit has failed. Update payment details within 24 hours to avoid a £1,000 fine: tvlicence-update[.]uk"

4. "You've won a prize" / "claim your reward" text

Text: "CONGRATULATIONS! Your number was selected for a £500 reward. Claim within 1 hour: claim-now[.]xyz"

  • Why it's fake: You can't win a prize you never entered. Random .xyz domains = scam.
  • The trap: "Claim" pages ask for card fees or personal details.
  • If you got this: Delete, forward to 7726. Never pay a "fee" to receive a prize.

5. "I'm in a meeting, can you do me a favour?" — WhatsApp/TXT boss scam

Text: "Hi [Name], it's [Boss]. I'm in a meeting — can you quickly buy £200 of Apple gift cards for a client? I'll pay you back. Send codes here."

  • Why it's fake: The number is spoofed or the account was cloned. No boss ever needs urgent gift cards.
  • The trap: Once codes are sent, the money is gone — irreversibly.
  • If you got this: Call your boss on their real number. Report the WhatsApp number via the app.
  • More: Paid a scammer? How to fight for your money back

6. "Your account will be suspended" — gov/email provider text

Text: "GOV.UK: Your National Insurance record has an error. Verify your identity today: gov-verify[.]online"

  • Why it's fake: GOV.UK pages end in gov.uk. This is a phishing lookalike.
  • The trap: Identity-theft harvest — the data is used for loans and accounts in your name.
  • If you got this: Forward to 7726 and report to Action Fraud.

Real scam emails (2026)

7. Fake invoice / "payment overdue" email (business email compromise)

From: "accounts@your-supplier[.]co" — Subject: "Invoice #88412 overdue — please settle"

Body: "Hi, our bank details have changed. Please settle invoice #88412 to our new account: [sort code + account]. Urgent — late fees apply."

  • Why it's fake: The address is one letter off the real supplier. Real suppliers don't change bank details by email.
  • The trap: You pay a criminal's account. The money is moved within minutes.
  • If you got this: Call the supplier on a number you already have. If you paid, contact your bank immediately.
  • More: Phishing — how to spot it

8. "Unusual sign-in detected" email (account takeover)

From: "no-reply@security-microsoft[.]info" — Subject: "Security alert: new sign-in from Russia"

Body: "We blocked a sign-in from an unknown device. Review your recent activity: [link]."

  • Why it's fake: The sender domain isn't microsoft.com. Urgency + fear = classic phishing.
  • The trap: The fake login page steals your real password.
  • If you got this: Go directly to the real site (type the address yourself), change your password, and report to [email protected].

9. Refund / tax rebate email

From: "refunds@hmrc-uk[.]online" — Subject: "You are owed £384.20 — claim now"

  • Why it's fake: Official tax refunds are never claimed through emailed links. (CyberAware does not publish HMRC guidance — this is a scam pattern to recognise.)
  • The trap: Card-details harvesting on a fake GOV lookalike page.
  • If you got this: Forward to [email protected], delete. Don't click.

Real WhatsApp / Telegram scam messages (2026)

10. "Wrong number" then investment pitch

First text: "Hi! Sorry, wrong number 😅" — then days later: "By the way, I make extra income from this crypto app — my friend set it up. Want me to show you?"

  • Why it's fake: The "wrong number" is a deliberate hook. The investment app is a fake trading platform.
  • The trap: Small "profits" you can't withdraw, then a demand for more deposits — classic pig-butchering.
  • If you got this: Block and report. Never "invest" with someone who texts you first.
  • More: Crypto & investment scams — how they work

11. Family member in trouble

Text: "Mum/Dad, it's me. I broke my phone, this is my new number. I need £800 urgently for rent — can you bank transfer? I'll explain later."

  • Why it's fake: Voice-cloning and stolen numbers make this believable.
  • The trap: Panic payment to a fraudster's account.
  • If you got this: Call your family member on their real number and ask a question only they know the answer to.

What to do if you already replied or clicked

  1. Paid money? Call your bank's fraud line NOW (number on the back of your card) and ask for a recall — same-day action matters
  2. Entered passwords/codes? Change those passwords immediately and enable two-factor authentication
  3. Report it: Action Fraud on 0300 123 2040 or report online — get a crime reference number for your bank and insurer
  4. Watch for round two: scammers sell your details — expect follow-up "recovery" scams. Never pay a fee to "recover" money

FAQ — scam messages

What should I do with a scam text? Forward it free to 7726 — your mobile network investigates and blocks the sender. Then delete it. If you lost money or gave details, also report to Action Fraud.

Where do I report a scam email? Forward it to [email protected] (the National Cyber Security Centre), then delete it. Report losses to Action Fraud at actionfraud.police.uk or 0300 123 2040.

Can my bank refund money lost to a scam? If you authorised a payment to a scammer (APP fraud), your bank must consider reimbursing you under UK rules — up to £85,000 for eligible claims. Contact them immediately. See how to get your money back after a scam.

How do scammers get my number? Data breaches, leaked lists, and public directories. That's why scams arrive even if you're careful — it's never your fault.

Should I reply "stop" to a scam text? No — replying confirms your number is live and can increase scam texts. Just forward to 7726 and delete.

Related guides

CyberAware UK — founded by ex-law-enforcement investigators. Spot it. Stop it. Report it.