How to spot a scam text or email

Scam messages all try to do the same thing: make you act fast, before you think.

The six signs

1. Urgency. "Your account will be closed today."
2. A link you didn't ask for. Especially a shortened one.
3. A slightly wrong web address. hmrc-refund.co is not hmrc.gov.uk.
4. They ask for a code. No real company ever asks you to read out a verification code.
5. Unexpected money. A refund, a prize, a parcel fee you don't recognise.
6. Odd greeting. "Dear Customer" from a company that knows your name.

The one rule

Never act inside the message. Close it. Open the company's own app, or type the address yourself, and check there. If it was real, it will be waiting for you.

If you already tapped the link

• Did you enter a password? Change it now, on every account using that password.
• Did you enter card details? Ring your bank's fraud number on the back of your card.
• Did you enter a code? The account is likely being taken over — change the password and sign out all devices immediately.

You can also send scam texts to 7726 (free) and forward scam emails to your national reporting service.