UK Scam & Social Engineering

Weekly Threat Briefing - 6 June 2026 | Intelligence from OnionClaw, BioCatch, Which?

Executive Summary

Social engineering fraud in the UK has reached record levels with a 62% year-on-year increase. AI-powered phishing, voice cloning, and deepfake attacks are making scams harder to identify. This briefing covers the most active threats this week.

Key Statistics

Social Engineering

+62%

Phishing

+140%

Device Fraud

+112%

Mule Accounts

+16%

Source: BioCatch 2026 - 9 UK banks, 100M+ accounts

Top 5 Active Threats

1. Purchase Scams (+63%)

Fake listings on Gumtree, Facebook Marketplace. AI-generated photos. Bank transfer only.

RED FLAG: Insists on bank transfer. Too cheap.

2. Task Scams (Click Work)

Paid for liking videos, then asked to pay fees to earn more.

RED FLAG: Job offers for simple tasks asking for fees.

3. AI Investment Scams

Deepfake celebrity endorsements. Fake crypto platforms on WhatsApp/Telegram.

RED FLAG: Unsolicited investment offers. Guaranteed returns.

4. Romance Scams (+47%)

AI voice cloning to sound like a real person. Fake emergencies asking for money.

RED FLAG: Never met. Always emergencies. No video calls.

5. HMRC / NHS Impersonation

Calls claiming to be HMRC with arrest threats. Payment via gift cards.

RED FLAG: HMRC never demands gift cards or Bitcoin.

Dark Web Intelligence

AI-powered phishing kits targeting HSBC, Barclays, Lloyds available on dark web forums. SMS spoofing services for UK mobile networks. AI voice cloning: 50-200 per voice. Stolen UK credentials actively traded.

Gathered via OnionClaw - 10 Tor-routed dark web engines

Weekly Red Flag Checklist

1. STOP - Bank asks to move money? Hang up. Call the number on your card.

2. VERIFY - Friend calls for money? Call them back on their real number.

3. BLOCK - Investment offers on WhatsApp? Block and report.

4. REPORT - Action Fraud: 0300 123 2040 | Texts to 7726