When you use your bank account you need to stay safe and secure. Learn how to spot a scam, what to do if you’re contacted unexpectedly, and advice on how to stay safe.
Find out how to protect yourself by spotting a scam email or text message from a real one.
What to look out for:
- They want financial or personal information - Bank of Scotland or a genuine company would never message you for banking or personal details.
- Unexpected sender - If you don’t know who sent a message then it could be a scam.
- You need to act now - A genuine message will be written in a reasonable and calm way. Scams may use warning messages, threats of fraud or problems with your account.
- How a message greets you - A Bank of Scotland email will always greet you by title and surname, as in Dear Mrs Smith. We always include part of your main account number, or part of your postcode if you don't yet have an account number.
- Spelling mistakes - Scam emails often look odd, with a messy layout and spelling mistakes.
- The email address - All our email addresses end with bankofscotland.co.uk. There should never be another word in between bankofscotland and .co.uk. This is a genuine email: email@example.com. This is a scam email: firstname.lastname@example.org.
- You’re asked to move your money - We will never ask you to make a test payment online or to move money to a new sort code and account number. We will never ask you to move money to a secure, safe or holding account.
- Invoice scams - People can hack into emails and change payment details on an invoice. Double check payment details before you pay an invoice. If you pay the wrong account, there’s a good chance you’ll lose your money.
What you can do:
If you get a message that seems odd, you should follow these steps:
- Do not reply - Even if you think you know the sender, don’t reply to an email or text message if it seems odd.
- Do not open any links or attachments - These can put a virus on your phone or computer.
- Call the company - If you’re not sure, phone the company on a number you trust or visit their website by typing their web address directly into the address bar at the top of your screen.
- Double check before you pay - If you need to pay for a job or service, it’s a good idea to confirm the payment details first. Call the person or business on a number you trust, not one from an invoice.
- Call us to make sure it’s genuine - Use the number on the back of your bank card and we can help to check the email or text message.
- Forward the message to our fraud team - Please forward any scam emails to us at email@example.com.
- Forward the message to your network provider - You can use 7726 to report the scam text for free to your network provider.
Remember, if you’re not sure about an email or text message – do not reply and delete it.
Bank of Scotland will never ask you to:
- Share your account details like user ID, password and memorable information.
- Tell us your Personal Security Number (PSN) for Telephone Banking.
- Tell us your PIN code, expiry date, CVV number which is the last 3 digits of the security code on the back of your card.
- Move money to a so-called secure, safe or holding account.
- Move your money or ask you to transfer funds to a new sort code and account number.
We guarantee to refund your money (including charges and interest that you’ve paid or not received as a result) in the unlikely event that you experience fraud with our Internet Banking service. We will take steps to protect you 24/7, using technology and safeguards that meet or exceed industry standards, but you must also use our Internet Banking services carefully.
Being careful when you use our services includes, for example, that you:
- Do all that you reasonably can to keep your Security Details (such as online and mobile username, password, and memorable information) secure, and you log out after each Internet Banking session.
- Don’t let anyone else have access to your account or Security Details, or transact using them, even if they share a joint account with you through our Internet Banking services.
- Tell us, as soon as you can if you think your Security Details have been lost, stolen, damaged or are being misused; or think someone may be accessing your accounts without your authority, or has discovered your Security Details.
- Carry out regular virus checks on your devices.
If you've been grossly negligent, we will not refund any money taken from your account before you have told us your Security Details have been lost, stolen or could be misused.
We won't give you a refund if you have acted fraudulently.
For further guidance on using our online banking services, see our Internet Banking terms and conditions.