Bank Transfer Scam UK: How to Spot and Stop Fraudulent Transfers
Scammers are getting better at impersonating your bank and trusted contacts—here's how to stop them before your money disappears.
What is this scam?
A bank transfer scam is a fraud where someone tricks you into sending money from your bank account to an account controlled by criminals. The scammer typically impersonates your bank, a business you trust, or someone you know personally—often claiming there's an urgent problem, suspicious activity, or a limited-time opportunity. They might say your account has been compromised and you need to transfer money to a 'safe' account (which is actually theirs), or they could pretend to be a seller or service provider asking for payment. Unlike some scams that target your login details, bank transfer scams trick you into voluntarily sending money. Once the money leaves your account and reaches the fraudster's bank, it's extremely difficult to recover. UK banks report handling thousands of these cases monthly, with victims losing anywhere from hundreds to tens of thousands of pounds. The scam relies on speed, urgency, and psychological pressure to bypass your normal caution.
Warning signs to look for
['- An unexpected message (text, email, or call) from your bank asking you to move money or confirm urgent details—real banks rarely contact you this way about account security.', "- A sender's email address or phone number that looks almost but not quite right—for example, 'barclays-secure.co.uk' instead of 'barclays.co.uk'.", "- Pressure to act immediately without questioning—phrases like 'within the next hour' or 'your account will be frozen' are common pressure tactics.", "- A request to transfer money to an unfamiliar account or a personal account, especially if the person claims it's temporary or 'for security'.", "- Generic greetings like 'Dear Customer' instead of your actual name—legitimate banks use personalised messages.", "- Links in messages that don't match your bank's official website, or links that ask you to log in when you're already logged in.", '- Unusual grammar, spelling mistakes, or formatting in official-looking messages from your bank.', "- A 'verification' process that requires you to provide personal details, PINs, or security codes—your bank will never ask for these via message or email."]
How this scam works step by step
The scam typically begins with contact from someone impersonating your bank or a trusted organisation. You receive a message (via SMS, email, or sometimes a phone call) claiming there's fraudulent activity on your account, suspicious payments, or that you've won a reward. The message creates urgency—your account will be frozen, your money is at risk, or the opportunity expires soon. The scammer asks you to transfer money immediately to a 'safe' account (theirs), or they request you log into a fake website that mirrors your real bank's site. If you provide login details, they access your account and transfer your money directly. If you comply with a transfer request, your money goes to the scammer's account, often at another UK bank or via a money mule network. The fraudster may keep you on the phone or messaging to prevent you contacting your real bank. By the time you realise the truth—perhaps when your actual bank contacts you about unusual activity—the money has usually been moved multiple times and is extremely difficult to recover. Speed is crucial to the scammer's success; they want the money gone before you have time to think.
How to verify if it is genuine
If you receive an unexpected message claiming to be from your bank, never use the contact details in the message. Instead, hang up immediately (if it's a call) and contact your bank directly using the number on the back of your debit card or your bank's official website. Legitimate banks never ask you to move money to 'safe' accounts, provide full login details via email or text, or click links in unsolicited messages. Check your bank's official app or website directly—log out of the message first, then open your banking app independently to see if there's a genuine alert. Real bank alerts appear in your authenticated app, not via text links. Look for the padlock icon in your browser and verify the URL starts with 'https://' and matches your bank's official domain exactly. If someone claims to be a business partner or service provider requesting urgent payment, contact that organisation directly using a phone number or website you find independently—not from the message. For suspicious emails, you can check our guide on /guides/is-this-website-a-scam/ for verification techniques. When in doubt, take time to verify—a genuine organisation won't penalise you for being cautious.
What to do if you have already interacted
Act immediately if you've already sent money or provided details. First, contact your bank's fraud team right away using the number on the back of your card—do this before anything else, as timing is critical. Tell them you've been scammed and provide the account number or details you were asked to send money to. Your bank can sometimes halt or recall the transfer if it hasn't been processed yet, though this is only possible within minutes of the transaction. If you provided your login details, password, or PIN, change your password immediately from a secure device and enable two-factor authentication if available. Check your recent transactions for any unauthorised payments and report these to your bank. If you clicked a phishing link and entered details, monitor your credit report and consider registering with the National Fraud Bureau. Report the scam to Action Fraud (0300 123 2040) and submit evidence like screenshots of messages. If the message came via email, forward it to the NCSC at report@phishing.gov.uk. Keep records of all communication with your bank about the fraud. Your bank may offer a temporary credit while they investigate, though this isn't guaranteed.
Reporting this scam in the UK
Report any bank transfer scam to Action Fraud immediately on 0300 123 2040 or online at actionfraud.police.uk. Provide as much detail as possible: the account details you were asked to send money to, screenshots of messages, the date and time of contact, and the amount sent. If the scam involved a phishing email, forward it to the NCSC Suspicious Email Reporting Service at report@phishing.gov.uk—this helps them track and shut down fraudulent websites. For text message scams, forward the SMS to 7726 (spells 'SPAM') to report it to your mobile network. Contact Citizens Advice consumer helpline on 0808 223 1133 for guidance on your rights and next steps. Notify your bank's fraud team immediately, even if you haven't lost money—they need to know about the scam attempt. If you believe someone has set up a fraudulent bank account to receive scam money, report the account details to Action Fraud; they can work with banks to freeze accounts. Keep copies of all evidence: messages, emails, transaction records, and your bank's response. Report to your local police online via your police force's website if you prefer a paper trail.
Frequently asked questions
Is my bank a scam or legitimate?
Your bank is almost certainly legitimate—established UK banks like Barclays, HSBC, Lloyds, and Natwest are regulated and safe. The scam involves criminals impersonating your real bank via fake messages or websites. If you're unsure whether a message is genuine, contact your bank directly using the number on your card, never by replying to the message.
What should I do if I've already sent money to a scammer?
Contact your bank's fraud team immediately on the number on the back of your card—they may be able to recall the transfer if it hasn't cleared yet. Report the scam to Action Fraud (0300 123 2040) and the NCSC (report@phishing.gov.uk) with full details. Your bank should investigate, and you may be eligible for a refund under Authorised Push Payment (APP) fraud rules, though this isn't guaranteed.
Can I get my money back after a bank transfer scam?
Recovery depends on how quickly you act and your bank's policies. If you report the fraud within minutes, your bank may be able to recall the transfer before it clears. Under APP fraud rules, your bank should refund you if you weren't grossly negligent—however, if you ignored obvious warning signs, recovery is less likely. Most cases reported quickly have a better chance of recovery than those reported days later.
How do I report a bank transfer scam in the UK?
Report to Action Fraud on 0300 123 2040 or actionfraud.police.uk, to the NCSC at report@phishing.gov.uk for phishing emails, and to 7726 for text scams. Notify your bank's fraud team immediately and keep all evidence including screenshots and transaction records. Each report helps authorities track scammers and shut down fraudulent accounts.