Phone Scams UK: Spot a Fake Caller and Check Safely

Phone scams — vishing, or voice phishing — put a convincing person or recording on the line and give you a reason to act before you think. The caller may claim to be your bank's fraud team, a broadband provider, HMRC, the police, or a salesperson with an offer that expires today. What they want is nearly always one of four things: a payment, a one-time passcode, your security details, or remote access to a device.

Genuine banks, telecoms firms and government departments do telephone people, so the channel settles nothing — the request is the discriminator. End the call on anything pushing you towards those four things, then ring back on a number you found yourself. Unsure about a call or voicemail? Describe it to our free AI scam checker for an automated second opinion. It is a fallible assessment, not a verdict, so still verify the caller independently.

The main UK phone scam patterns

Fake bank fraud teams are a persistent pattern: your account is 'under attack', and the fix is often moving money or reading back a code. See fake HSBC fraud team calls and Santander impersonation calls — and the same script often arrives dressed as law enforcement in a police impersonation call.

Telecoms calls claim a fault, a virus or a refund and end with a request for remote access: see fake BT technical support calls, TalkTalk support call scams and Virgin Media 'virus on your connection' calls.

Official-sounding calls lean on a name you cannot ignore — a fake HMRC tax call threatening arrest, an automated 'your National Insurance number is suspended' robocall, or a DVLA call about failed vehicle tax. Retail impersonation works identically in an automated Amazon order call.

Cold-call sales approaches apply commercial rather than fearful pressure: free solar panels under a 'government grant', or an offer to unlock your pension early that our pension liberation guide shows can trigger a substantial HMRC charge on top of the loss.

Suspicious calls to mobiles appear to be becoming less common, while telecommunications-originated APP fraud remains disproportionately costly. Ofcom's February 2026 survey found 32% of mobile users had received a suspicious call on their mobile in the previous three months, down from 40% in 2022. Separately, UK Finance's Annual Fraud Report 2026 attributed 17% of APP cases and 28% of APP losses to telecommunications. APP here means authorised push payment — a transfer the victim was deceived into making. The two measures count different things: one is calls received by mobile users, the other is the contact channel recorded against APP cases and losses. Both are dated in our UK scam statistics research.

Caller ID is not evidence of identity

Start from this: the number on your screen is not evidence of who is calling. Caller ID can be spoofed, including in some cases a genuine bank number — our number spoofing guide explains how it is done. Ofcom's Do Not Originate list helps providers identify and block calls from numbers an organisation does not use for outbound calls, which narrows the problem — but Ofcom notes that adding a number to the list is not a guarantee that all such calls will be blocked, and its advice remains to hang up and call the organisation back on a number from its official website. The reverse holds too: an unfamiliar number is not by itself a scam. Judge the call on what it asks you to do.

Do not press a number on an unexpected recorded call. A keypress can connect or advance the call; hang up and verify the claim independently.

Work out what kind of call you are dealing with

Run an unexpected call through these questions in order. The first 'yes' tells you which situation you are in.

• Asked to move, send or withdraw money? Treat it as an attempted authorised push payment scam; there is no such thing as a 'safe account'. The courier version asks you to hand cards, cash or valuables to someone at your door. City of London Police recorded more than £21 million lost to courier fraud specifically across 1,891 reports in 2025 in England, Wales and Northern Ireland, which excludes Scotland, with victims aged 76 to 96 accounting for around 62% of those reports. It is a figure for that one pattern and that one reporting area, not for phone fraud as a whole. See the police impersonation guide.
• Asked to read out a one-time passcode, PIN, password or full card number? A code can authorise a payment, a login, a password reset, a device registration or a change to your account, so reading one aloud can complete an action you never intended. No genuine bank employee will ask you to disclose or read out a full PIN, full password or one-time banking or security code. Enter a code only in the official app or site, for an action you initiated, understand and can match to the code message; never do it at an unexpected caller's direction — a criminal can talk you through a genuine app while dictating the action you are approving. For another support service, verify the request independently and follow the warning in the code message.
• Asked to install software or share your screen? That is the remote-access pattern: the tools are genuine, the request is what fails. See what remote access can expose.
• Asked to confirm personal details 'for security'? They may be assembling an identity-fraud profile rather than chasing an immediate payment.
• A recording with a threat and a keypress? A bulk campaign. Hang up without pressing anything.
• A sales pitch that expires today? The urgency is the product. Take the details, end the call, and research the company yourself.

How to check a caller safely

• End the call, then verify independently. Hang up. Use a different phone where possible. If you must use the same landline, allow time for it to clear and first call someone you know on a number already saved. Then call the organisation on a number from its official site, statement or card. Ofcom's current scam-calls page says to hang up, take your time and call the organisation back using a number from its official website; it sets no fixed number of minutes to wait, so treat any specific delay you have read elsewhere as practice rather than regulator guidance.
• Dial 159 yourself after an unexpected call claiming to involve your bank or bank account. It is the route you reach by dialling 159 that cannot be spoofed, and 159 never calls you. Stop Scams UK says the service covers firms representing more than 99% of UK retail current accounts, which is not a guarantee for every handset or network. Your own provider sets the price of the call and it may not be included in your allowance, so check that if cost matters — and if it does not connect, use the number on your card.
• Use a number you already hold — the back of your card, a paper bill, or an address you typed in yourself. Never one the caller gave you, and never one from a pop-up or a search advert.
• Check the claim, not the caller. Sign in to your own account or app and see whether the problem actually exists.
• Ask the checker. Paste what the caller said into our free AI scam checker for a second opinion once you have verified independently.

If you have already paid or shared details

• Contact your bank immediately on the number on your card, or by dialling 159. Act straight away rather than waiting to see what happens.
• If you were talked into authorising a bank transfer yourself, ask about mandatory APP reimbursement. It covers eligible domestic consumer Faster Payments and CHAPS payments made from 7 October 2024, with an £85,000 cap, a possible excess of up to £100 that cannot be applied to a consumer the firm assesses as vulnerable, a 13-month claim limit and a set of exclusions — a route worth pursuing, not a guaranteed refund.
• If you granted remote access, disconnect the device, remove the software, and change key passwords from a different trusted device — our remote access scam guide sets out the full clean-up.
• If you shared personal details, watch for identity fraud and consider a Cifas Protective Registration at cifas.org.uk after checking the current fee.
• Work through our scam recovery checklist, and be wary of any follow-up offer to 'get your money back' — recovery fraud targets people who have just been defrauded.

How to report a scam call in the UK

Report to your bank first if money or account details are involved — dial 159 or use the number on your card. Then report it to Report Fraud (formerly Action Fraud) at reportfraud.police.uk or 0300 123 2040 in England, Wales or Northern Ireland, or Police Scotland on 101 in Scotland. Dial 999 if someone is on their way to your door to collect cards, cash or valuables. Tell the impersonated company too, through its official website or the number on your bill. If the same campaign reached you by text, a suspicious SMS text can be forwarded to 7726 free of charge. Reporting a suspicious call is a separate step: from a mobile, forward the caller's phone number to 7726, which Ofcom says is free of charge. For consumer-rights help, use the service for your nation: Citizens Advice in England and Wales on 0808 223 1133, Advice Direct Scotland in Scotland on 0808 800 9060, or Consumerline in Northern Ireland on 0300 123 6262.

All phone scams guides

Common questions

Sources checked

• GOV.UK — consumer advice services for England and Wales, Scotland and Northern Ireland
• Ofcom — Combatting mobile messaging scams: statement (February 2026 survey; suspicious calls to mobiles fell from 40% in 2022 to 32% in 2026)
• Ofcom — Combatting mobile messaging scams (consultation and statement page)
• UK Finance — Annual Fraud Report 2026 press release
• Ofcom — types of scam calls, texts and messages (published 15 July 2026)
• Ofcom — what to do about a scam call, text or message (reporting to 7726)
• Ofcom — nuisance calls and messages research summary, 2016 (historical source of the superseded five-minute callback advice)
• Ofcom — Do Not Originate list, including its blocking limitation
• Ofcom — number spoofing
• Stop Scams UK — 159, the service and its participating firms
• Ofcom — how much does a phone call really cost
• City of London Police — courier fraud exceeded £21 million in 2025 across 1,891 reports

Last reviewed 2026-07-30. Reporting routes are checked against our verified canon of official UK sources. Read about how Beat the Scam writes guides.

Browse other scam categories

• Text Message Scams (23 guides)
• Email Scams (15 guides)
• Marketplace Scams (15 guides)
• Travel Scams (14 guides)
• Payment Scams (13 guides)
• Website Scams (12 guides)