Latest scams
Scams come in all shapes and sizes, from dodgy emails to fake sites. And they keep changing to try and trick you. Stay one step ahead by learning about the latest scams.
-
NEW - Working from home scam email
This is an email scam that can look like this:
Who does it target?
People working remotely from home.
How does it work?
Fraudsters send an email that claims to be from your employer’s IT support department.
They can copy a company’s email address to make a message seem genuine.
The message says you need new VPN configuration details to be able to work from home. It wants you to click on a link to get these details.
The link goes to a fake Microsoft 365 login page. The page may look real but it’s a copy to try to scam your personal or financial details.
How to avoid this scam
If you get an email like this, don’t click on the link or reply. Just delete it.
Top tips to avoid scam messages
- Keep your money and details safe - Never move money, make a payment or give personal or banking details for a message that comes out of the blue.
- Click with care - Only click on a link or download an attachment if you’re sure it’s genuine.
- Look at the spelling and layout - If it has mistakes or looks odd in any way, don’t reply and delete.
- Take your time - A scam may use warnings or threats to try to get you to act without thinking.
- Double-check before you pay - Confirm payment details before you pay an invoice or bill. Call the person or business on a number you trust, not one from an invoice or message.
-
NEW - Disney+ scam email
This is an email scam that can look like this:
Who does it target?
Disney+ customers.
How does it work?
Fraudsters send an email that claims there’s been ‘unusual activity’ on your account.
The message says your account has been locked and you need to create a new password. It could also say
that there’s been a problem with your card payment details.
They want you to click an ‘update account now’ button.
This button goes to a fake Disney+ page. The page may look real but it’s a copy to try to scam your personal or financial details.
How to avoid this scam
If you get an email like this, don’t click on the link.
Delete the email. Don’t reply to it.
Top tips to avoid scam messages
- Keep your money and details safe - Never move money, make a payment or give personal or banking details for a message that comes out of the blue.
- Click with care - Only click on a link or download an attachment if you’re sure it’s genuine.
- Look at the spelling and layout - If it has mistakes or looks odd in any way, don’t reply and delete.
- Take your time - A scam may use warnings or threats to try to get you to act without thinking.
- Double-check before you pay - Confirm payment details before you pay an invoice or bill. Call the person or business on a number you trust, not one from an invoice or message.
-
NEW - Bitcoin social media scam
This is a social media scam that can look like this:
Who does it target?
Social media users, especially younger people.
How does it work?
Fraudsters are using social media to offer Bitcoin deals.
They send a message that promises to double your money.
This message has been seen on Twitter, Snapchat and Instagram.
How to avoid this scam
If you get a social media message about Bitcoin, don’t reply.
Before you delete the message, you can report it to the social media platform.
Top tips to avoid social media scams
- Double-check messages - If you get one out of the blue, it could be a scam. Make sure that a sender is genuine before you do anything else. If you don’t know them, don’t reply and delete.
- Share with care - Keep personal and banking details private. What you share on social media can be used by fraudsters to steal your money.
- Only connect with people you know - If you’re not sure who someone is then don’t connect with them.
- Use strong passwords - Choose a new, strong password for every account or site you use.
-
NEW - Council tax scam email
This is an email scam that can look like this:
Who does it target?
Anyone with an email account.
How does it work?
Fraudsters send an email that claims to come from the Government Digital Service Team.
The message offers a Council Tax Reduction of nearly £400 for people on a low income or who get benefits.
It wants you to click a link to claim your refund.
This link will go to a fake page to trick you in to giving banking details.
How to avoid this scam
If you get an email like this, don’t click on the link.
Delete the email. Don’t reply to it.
Top tips to avoid scam messages
- Keep your money and details safe - Never move money, make a payment or give personal or banking details for a message that comes out of the blue.
- Click with care - Only click on a link or download an attachment if you’re sure it’s genuine.
- Look at the spelling and layout - If it has mistakes or looks odd in any way, don’t reply and delete.
- Take your time - A scam may use warnings or threats to try to get you to act without thinking.
- Double-check before you pay - Confirm payment details before you pay an invoice or bill. Call the person or business on a number you trust, not one from an invoice or message.
-
NEW - Netflix scam email
This is an email scam that can look like this:
Who does it target?
Netflix customers.
How does it work?
Fraudsters send an email that claims to come from Netflix Support.
The message says your account will be cancelled if you don’t update your personal details within 24 hours.
It wants you to click a link to update them.
This link will go to a fake Netflix page. The page may look real but it’s a copy to try to scam you in to giving login, credit card and billing address details.
How to avoid this scam
If you get an email like this, don’t click on the link.
Delete the email. Don’t reply to it.
Top tips to avoid scam messages
- Keep your money and details safe - Never move money, make a payment or give personal or banking details for a message that comes out of the blue.
- Click with care - Only click on a link or download an attachment if you’re sure it’s genuine.
- Look at the spelling and layout - If it has mistakes or looks odd in any way, don’t reply and delete.
- Take your time - A scam may use warnings or threats to try to get you to act without thinking.
- Double-check before you pay - Confirm payment details before you pay an invoice or bill. Call the person or business on a number you trust, not one from an invoice or message.
-
NEW - Coronavirus grant scam email
This is an email scam that can look like this:
Who does it target?
Anyone with an email account.
How does it work?
Fraudsters send an email that claims to come from a government agency, like HMRC.
The message says your grant has been approved. This is pretending to be a scheme to help self-employed people during lockdown.
It wants you to click on a link to fill in your information.
This link will go to a fake page to scam you in to giving your personal and banking details.
How to avoid this scam
If you get an email like this, don’t click on the link.
Delete the email. Don’t reply to it.
Top tips to avoid scam messages
- Keep your money and details safe - Never move money, make a payment or give personal or banking details for a message that comes out of the blue.
- Click with care - Only click on a link or download an attachment if you’re sure it’s genuine.
- Look at the spelling and layout - If it has mistakes or looks odd in any way, don’t reply and delete.
- Take your time - A scam may use warnings or threats to try to get you to act without thinking.
- Double-check before you pay - Confirm payment details before you pay an invoice or bill. Call the person or business on a number you trust, not one from an invoice or message.
-
NEW - Coronavirus TV licence scam email
This is an email scam that can look like this:
Who does it target?
Anyone with an email account.
How does it work?
Fraudsters send an email that claims to come from TV Licensing.
The message says your direct debit has failed and you need to pay to avoid prosecution. It also offers you six months free TV licence.
There’s a link to click to get this offer.
This link will go to a fake page to scam you in to giving your personal and banking details.
How to avoid this scam
If you get an email like this, don’t click on the link.
Delete the email. Don’t reply to it.
Top tips to avoid scam messages
- Keep your money and details safe - Never move money, make a payment or give personal or banking details for a message that comes out of the blue.
- Click with care - Only click on a link or download an attachment if you’re sure it’s genuine.
- Look at the spelling and layout - If it has mistakes or looks odd in any way, don’t reply and delete.
- Take your time - A scam may use warnings or threats to try to get you to act without thinking.
- Double-check before you pay - Confirm payment details before you pay an invoice or bill. Call the person or business on a number you trust, not one from an invoice or message.
-
NEW - Coronavirus tax refund scam email
This is an email scam that can look like this:
Who does it target?
Anyone with an email account.
How does it work?
Fraudsters send an email that claims to come from HMRC.
The message says you can have a tax refund because of the coronavirus outbreak.
It wants you to click on a link to get this refund.
This link goes to a fake page to try to scam you in to giving your personal and banking details.
How to avoid this scam
If you get an email like this, don’t click on the link.
Delete the email. Don’t reply to it.
Top tips to avoid scam messages
- Keep your money and details safe - Never move money, make a payment or give personal or banking details for a message that comes out of the blue.
- Click with care - Only click on a link or download an attachment if you’re sure it’s genuine.
- Look at the spelling and layout - If it has mistakes or looks odd in any way, don’t reply and delete.
- Take your time - A scam may use warnings or threats to try to get you to act without thinking.
- Double-check before you pay - Confirm payment details before you pay an invoice or bill. Call the person or business on a number you trust, not one from an invoice or message.
-
NEW - World Health Organisation (WHO) scam email
This is an email scam that can look like this:
Who does it target?
Anyone with an email account.
How does it work?
Fraudsters send an email that pretends to come from WHO.
The message has a document attached with advice to help stop the spread of coronavirus.
It wants you to download the document.
But it’s a fake document to try to put a computer virus on your device.
How to avoid this scam
If you get an email like this, don’t download the document.
Delete the email. Don’t reply to it.
Top tips to avoid scam messages
- Keep your money and details safe - Never move money, make a payment or give personal or banking details for a message that comes out of the blue.
- Click with care - Only click on a link or download an attachment if you’re sure it’s genuine.
- Look at the spelling and layout - If it has mistakes or looks odd in any way, don’t reply and delete.
- Take your time - A scam may use warnings or threats to try to get you to act without thinking.
- Double-check before you pay - Confirm payment details before you pay an invoice or bill. Call the person or business on a number you trust, not one from an invoice or message.
Social Media scams
-
Facebook bait and switch scams
What to look out for:
Fraudsters are using social media posts to send fake links to viral videos. These will appear as shared posts on popular places like Facebook. This is a bait and switch scam. The link goes to a fake site with a video. But a pop-up will ask you to update your video player with a download. The download will infect your device with a virus to steal personal and banking details. It will also send the fake post to your friends to try and scam them too.
What you should do:
- If you’re not sure who a person is on social media, then don’t connect with them. Some accounts are fake and just try to steal details.
- Don’t click on any links or attachments unless you know they’re safe.
- Make sure a site is safe before you give personal details.
-
Free supermarket voucher scam
What to look out for
You might see a free voucher offer on Facebook from Morrisons or Tesco. It looks real and says it's for 'Today only'. But it's a scam. The link takes you to a fake website to fill in a survey. Then to get the voucher you have to click on another fake link and share your personal details. There are no vouchers. And your details could be used to try and defraud you at a later date.
What you should do
- Make sure a site is safe before you give personal details.
- Ignore sites and emails that offer free things if you give your personal details.
- Tell friends and family about this scam, especially if they shop at those stores.
- Don’t click on any links or attachments unless you know they’re safe.
-
PayPal social media scams
What to look out for:
You may see fake PayPal social media posts that ask you to enter a prize draw. These will appear as promoted or shared posts on popular places like Facebook. They will ask you to follow a link to log on. This is a scam. The link will lead to a fake site to try and steal your personal details.
What you should do:
- If you’re not sure who a person is then don’t connect with them. Some accounts are fake and just try to steal details.
- Don’t click on any links or attachments unless you know they’re safe.
- Make sure a site is safe before you give personal details.
Scam messages
-
Coronavirus scam
What to look out for
People are using the coronavirus outbreak as an opportunity to try new scams by email, call and text.
One email has a PDF document with up-to-date advice on the outbreak. This is likely to be a scam.
The document could contain a computer virus to infect your device. This will then try to steal your personal or payment details.
What you should do
- Don’t open emails if you don’t know who sent them.
- Even if you know the sender, don’t reply if an email looks odd.
- Look out for spelling mistakes and a messy layout.
- Don’t click on any links or attachments unless you know they’re safe.
- If you’re not sure about an email, call the sender using a number from their site. Don’t call the number in an email or pop up.
Find out more about scam messages.
Coronavirus scams even use online marketplaces such as Facebook to sell goods like face masks and hand sanitisers that don’t exist.
Before you buy anything online it’s best to do some research and check buyer reviews to make sure a seller is genuine. And always pay by card - that way you protect your cash.
Find out more about buying from online shops.
- Don’t open emails if you don’t know who sent them.
-
Fake DVLA texts
What to look out for
There’s been an increase in DVLA scams online.
The most popular scam is by text message. It will tell you that you’re owed a refund and ask you to click on a link. The link will take you to a page which asks for personal or account details.
This is likely to be a scam to try and steal your details.
What you should do
- Be careful about opening texts that you didn’t expect.
- Don’t click on any links or attachments unless you’re sure they are genuine.
- If you’re unsure, call the DVLA. Use a number from their website, not one from a text.
- Be careful about opening texts that you didn’t expect.
-
Apple ID email scams
What to look out for:
You may get an email that looks like it comes from Apple. It will tell you that your card has been used to order something. The subject of the email could be either ‘Receipt ID’, ‘Receipt Order’ or ‘Payment Statement’. This is a scam. The email is fake and will try to get you to follow a link or attachment to cancel the order. The scam will try to steal your personal and banking details.
What you should do:
- Don’t open emails if you don’t know who sent them.
- Check the sender’s email address to make sure it’s genuine.
- Don’t click on any links or attachments unless you know they’re safe.
- If you’re not sure about an email, call the sender using a number from their site. Don’t call the number in an email or pop-up.
-
Apple ID text scam
What to look out for:
Fraudsters are sending texts which look like they’re from Apple. It will tell you that your account has been locked and to click on a link to unlock it. This is a scam. The link takes you to a fake page to try and steal your personal or banking details.
What you should do:
- Be careful about opening texts that you didn’t expect.
- Don’t click on any links or attachments unless you know they’re safe.
- If you’re not sure about a text, call the sender using a number from their site. Don’t call the number in a text.
-
British Gas email scam
What to look out for
You could get an email that looks like it's from British Gas. It will say that your latest payment by direct debit didn't go through and your gas supply could be cut off. They want you to click on a link to check and update your payment details. This is a scam. The link is to a fake site to try and get your personal or payment details.
What you should do
- Don't open emails if you don't know who sent them.
- Check the sender's email address to make sure it's genuine.
- Don't click on any links or attachments unless you know they're safe.
- If you're not sure about an email, call the sender using a number from their site. Don't call the number in an email or pop up.
-
Google calendar email scam
What to look out for
Fraudsters are sending fake emails that include a Google calendar invite. The subject of the event is in Russian and has a link to a video call. This is a scam. The link is there to try and steal your personal or banking details, or to infect your device. Your spam filter should pick this scam up. But to help protect yourself, you can follow these steps:
- Open Google Calendar settings.
- Go to Event Settings, find Automatically Add Invitations and select the option ‘No, only show invitations to which I've responded.’
- Also, under View Options, make sure that ‘Show declined events’ is unchecked, so scam events don’t appear after they’re declined.
What you should do
- Don’t open emails if you don’t know who sent them.
- Check the sender’s email address to make sure it’s genuine.
- Don’t click on any links or attachments unless you know they’re safe.
- If you’re not sure about an email, call the sender using a number from their site. Don’t call the number in an email or pop-up
-
PayPal email scams
What to look out for:
Fraudsters are using emails that look like they come from PayPal. The most common message will tell you that there’s a ‘problem with your account’. It will include a link to follow to sort the problem out. This is a scam. The link will take you to a fake PayPal site to try and steal your personal or banking details, or to infect your device with a virus.
Another fake PayPal email will tell you that ‘you’re a prize winner’. But to collect your prize you must pay a small handling fee. This is also a scam. PayPal email scams.
What you should do
- Don’t open emails if you don’t know who sent them.
- Check the sender’s email address to make sure it’s genuine.
- Don’t click on any links or attachments unless you know they’re safe.
- If you’re not sure about an email, call the sender using a number from their site. Don’t call the number in an email or pop-up.
-
Royal Mail message scam
What to look out for
You could get an email or a text that looks like it's from Royal Mail. It will say that they couldn't deliver a parcel and will give a tracking number. They want you to click on a link to confirm the parcel or pay a fee. This is a scam. The link is to a fake site to try and get your personal or payment details.
What you should do
- Don't open emails if you don't know who sent them.
- Check the sender's email address to make sure it's genuine.
- Don't click on any links or attachments unless you know they're safe.
- If you're not sure about an email, call the sender using a number from their site. Don't call the number in an email or pop up.
-
We guarantee to refund your money (including charges and interest that you’ve paid or not received as a result) in the unlikely event that you experience fraud with our Internet Banking service. We will take steps to protect you 24/7, using technology and safeguards that meet or exceed industry standards, but you must also use our Internet Banking services carefully.
Being careful when you use our services includes, for example, that you:
Do all that you reasonably can to keep your Security Details (such as online and mobile username, password, and memorable information) secure, and you log out after each Internet Banking session.
Don’t let anyone else have access to your account or Security Details, or transact using them, even if they share a joint account with you through our Internet Banking services.
Tell us, as soon as you can if you think your Security Details have been lost, stolen, damaged or are being misused; or think someone may be accessing your accounts without your authority, or has discovered your Security Details.
Carry out regular virus checks on your devices.If you've been grossly negligent, we will not refund any money taken from your account before you have told us your Security Details have been lost, stolen or could be misused.
We won't give you a refund if you have acted fraudulently.
For further guidance on using our online banking services, see our Internet Banking terms and conditions.
-
Prudential Regulation Authority
Bank of Scotland does not control the content of third party websites linked to on this page.