UK Scam & Phishing Prevention Guide: 2026 Edition
The plain-English guide to spotting phishing texts and emails, the scams targeting UK families in 2026, and exactly what to do if you're targeted. Written by the CyberAware UK security team and reviewed against official UK sources.
Why a 2026 Guide?
Scams evolve every year. In 2025, courier fraud losses passed £21 million with over-70s making up around 62% of reports, and police warned of a growing trend of victims being persuaded to buy gold and jewellery for collection. AI voice cloning, QR code phishing and fake delivery texts now sit alongside the classic bank-caller scam.
The good news: most scams share the same few red flags. Learn them once and you'll spot nearly every attempt — on text, email, phone or social media.
How to Spot a Phishing Text or Email
Phishing is a fake message designed to make you click a link, enter details or pay money. These are the red flags:
- ⚠️ Urgency or panic — "Your account will be closed today", "Final reminder", "Action needed within 24 hours".
- ⚠️ A payment request — a "redelivery fee", "unpaid invoice", "safe account" or "release your parcel" payment. Legitimate companies rarely email or text you asking for money.
- ⚠️ A link that doesn't match the sender — hover (don't click) and check the real URL. Lookalike domains like royalmail-delivery.top or dvla-refund.co are giveaways.
- ⚠️ Asking for passwords, PINs or one-time codes — no genuine bank, police or delivery company will ever ask for these.
- ⚠️ Odd sender details — an "Amazon" email from a Gmail address, or a text from a random mobile number instead of a shortcode.
- ⚠️ Poor spelling, generic greetings — "Dear Customer" instead of your name, or strange phrasing and typos.
Never call a number, click a link or use contact details from the message. Contact the company directly — using the number on the back of your card, or their official app or website.
The Texts and Emails Circulating in 2026
The Top UK Scams of 2026 — and How to Report
Our full breakdown of the 10 most common UK scams — courier fraud, AI voice cloning, QR phishing, crypto apps, impersonation and more — is in one place:
If you've been targeted, report it — it helps stop the next person being scammed:
Forward suspicious texts to 7726 (free) and forward phishing emails to [email protected]. Both help networks and the NCSC shut down the campaigns.
Five Habits That Block Most Scams
- 1. Use a different password for every account — a free password manager makes this painless.
- 2. Turn on two-factor authentication (2FA) on email and banking — an authenticator app is better than SMS.
- 3. Never act on unexpected urgency — real companies don't panic you into paying.
- 4. Keep devices and apps updated — updates patch the holes scammers exploit.
- 5. Talk about scams with older relatives — courier fraud and fake bank calls disproportionately target over-70s. One conversation can save a life's savings.
Get the Free Little Book of Scams
Our free 54-page PDF covers all the scams in this guide in depth — plus seasonal scams, victim support and recovery routes. Print it for the kitchen drawer, share it with family.
⬇️ Download Free PDF🟢 Human verified & editorially reviewed
This guide is written and reviewed by the CyberAware UK security team against official UK sources including Action Fraud, City of London Police, the National Cyber Security Centre and confirmed police force warnings. Last reviewed: 16 August 2026. See how we review content →
Subscribe to the Daily Brief / Weekend Read — free, plain English, UK-focused.