Barclays Bank Text Scam: How to Spot and Avoid Fake SMS in the UK
Scammers are sending fake Barclays bank texts to UK customers—here's exactly how to tell if a message is genuine.
What is this scam?
A Barclays bank text scam is a phishing attack where fraudsters send SMS messages pretending to be Barclays, typically claiming there's suspicious activity on your account, a payment has failed, or your card has been blocked. The scam message includes a link that looks legitimate but actually leads to a fake website designed to harvest your login credentials, PIN, or card details. Once scammers have this information, they can access your real Barclays account and steal money or commit identity fraud. These texts often include urgency language ('Act now', 'Verify immediately') to pressure you into clicking without thinking. The scam is sophisticated because it exploits trust in your bank's brand and knowledge that Barclays does occasionally send genuine security alerts. Real Barclays customers receive dozens of these fake texts every week, making this one of the most common UK banking scams currently active.
Warning signs to look for
- The sender is a generic number (07xxx or similar) rather than a Barclays branded alert service—Barclays uses specific short codes for genuine alerts.
- The message contains a clickable link and urges you to 'verify', 'confirm', 'update', or 'unlock' your account urgently.
- Grammatical errors or unusual phrasing: genuine Barclays messages are professionally written and rarely contain typos.
- The link does not go to barclays.co.uk—check by hovering over it (don't click) to see the real destination URL.
- You're asked to enter your full card number, PIN, or online banking password—Barclays will never ask for these via text.
- The message mentions unusual activity but gives no specific transaction details (time, amount, merchant).
- The sender claims you need to 'confirm payment details' or 'verify your identity' to access funds.
How this scam works step by step
The scam typically begins with a text claiming your Barclays account needs immediate attention. The message might say 'Unusual activity detected' or 'Your card has been locked' and includes a short link. When you click the link, you're taken to a fake website that looks nearly identical to Barclays' genuine site—same colours, logos, and layout. The fake page prompts you to log in using your email and password, or to enter your card details and PIN for 'verification'. Once you submit this information, the scammers have what they need. They can then log into your real Barclays account using your credentials, disable alerts so you don't notice, and transfer money out or set up fraudulent payments. Some variants ask you to confirm a One Time Password (OTP) that Barclays sends to your phone—the scammer initiates a real login attempt and tricks you into reading out the OTP, giving them full access. By the time you realise something is wrong, the money has already gone or fraudulent standing orders have been created.
How to verify if it is genuine
If you receive a Barclays text claiming there's a problem with your account, do not click any link in the message. Instead, open your Barclays app directly on your phone or go to barclays.co.uk in a web browser manually (don't use a link from the text). Log in and check your account—if there's a genuine issue, you'll see a notification within the app or your online banking dashboard. You can also call Barclays customer service on the number on the back of your debit card or the number listed on Barclays.co.uk to confirm whether the alert was real. Check for URL tricks: hover over (don't click) any link to see the actual destination. Real Barclays alerts never ask you to enter your full password, PIN, or card number via text or through a link. If you're uncertain, visit /guides/bank-transfer-scam-warning-signs/ for more on how banking scams operate and how to verify genuineness. Barclays genuine messages typically arrive from recognisable short codes, not standard mobile numbers.
What to do if you have already interacted
Act quickly if you clicked a link or entered any information. First, check your Barclays account immediately—log in through the official app or website and look for any unauthorised transactions or new payees added. If you see suspicious activity, contact Barclays immediately on 0345 600 1000 (their fraud line) or use the phone number on the back of your card. If you entered your online banking password or card details, reset your password immediately through your Barclays app and inform the bank in case your account is compromised. If you sent money to a scammer or they've transferred funds out, report it to your bank and Action Fraud immediately—in some cases, banks can recover the money if they act fast (within hours). Change any other passwords you use if they're similar to your Barclays password. Do not send any more information to the scammer, and block the number. Consider placing a fraud alert or freeze on your credit file with Equifax, Experian, or TransUnion to prevent fraudulent applications using your details.
Reporting this scam in the UK
Report the scam text message to Action Fraud, the UK's official fraud reporting service, by calling 0300 123 2040 or visiting actionfraud.police.uk. You can also forward the SMS to 7726 (the reporting number for suspicious texts), which is monitored by your mobile provider and the NCSC. Tell Barclays immediately by calling their fraud line on 0345 600 1000 so they can flag the scam and protect other customers. If you're uncertain whether you were scammed or need consumer advice, contact the Citizens Advice consumer helpline on 0808 223 1133. Report the phishing URL to the NCSC Suspicious Email Reporting Service at report@phishing.gov.uk (include screenshots of the text and the fake website if possible). Keep records of everything: the text message, the time it arrived, the sender number, and any screenshots of the fake website. These details help authorities track down the scammers and warn other customers. Your bank may also request this information if they're investigating your account.
Frequently asked questions
Is Barclays bank a legitimate bank, or is this scam always a scam?
Barclays is a fully legitimate UK bank—one of the biggest in the country. However, scammers deliberately impersonate them because of their reputation and large customer base. A text claiming to be from Barclays is not automatically genuine just because Barclays is real. Always verify messages by contacting Barclays directly or checking your account through the official app.
What do I do if I've already sent money to the scammer?
Contact your bank immediately and tell them the money was sent as a result of fraud—most banks can attempt to recall the payment if you report it within hours, especially if the receiving account is with another UK bank. Also report it to Action Fraud on 0300 123 2040 and to the NCSC. Do not send any additional money or try to contact the scammer further. Time is critical, so call your bank's fraud line straight away.
If I clicked the link but didn't enter any details, am I still at risk?
Clicking the link alone is lower risk than entering information, but there is still danger. Some fake websites contain malware that can infect your phone or steal data. Monitor your Barclays account closely over the next few weeks for any unauthorised activity. Change your password immediately as a precaution, and consider running a security scan on your phone. If you're concerned, contact Barclays to ask if they've detected any suspicious access attempts on your account.
How do I report a Barclays text scam?
Forward the suspicious text to 7726 (free) so your mobile provider and the NCSC can investigate. Report the scam to Action Fraud by calling 0300 123 2040 or online at actionfraud.police.uk. Notify Barclays directly on 0345 600 1000 so they can warn their security team and flag the sender. Taking all three steps helps authorities track the criminals and protects other customers from the same scam.