Lloyds Bank Scam Text Messages: How to Spot and Stop Them in the UK
Lloyds Bank will never ask for your security details via text — but scammers will try to trick you into thinking they have.
What is this scam?
Lloyds Bank scam texts are phishing messages that pretend to come from Lloyds, one of the UK's largest banks. Scammers send SMS messages claiming your account has been locked, there's unusual activity, or you need to update your details urgently. The message typically includes a link to a fake website that looks identical to the real Lloyds login page. When you click the link and enter your username, password, or card details, the scammers capture this information. They may also ask you to verify your identity by providing your date of birth, sort code, account number, or security codes. Once they have this data, they can access your account, transfer money, or apply for credit in your name. These scams are extremely effective because they mimic Lloyds' official style and create artificial panic.
Warning signs to look for
["- The text asks you to 'verify' or 'confirm' your account details, password, or card numbers. Lloyds will never request sensitive information via text.", "- The message contains a shortened URL (like bit.ly or tinyurl) or an unusual web address that doesn't look like a real Lloyds domain. Genuine Lloyds links use secure.lloydsbanking.com or similar official domains.", "- There's a sense of urgency ('Your account will be closed', 'Act now', 'Confirm within 24 hours'). This is a classic pressure tactic to prevent you thinking clearly.", "- The sender's number is a regular mobile number or random digits, not a recognisable Lloyds service code. Lloyds sends alerts from 7884 or similar banking service numbers.", "- The text contains spelling, grammar, or formatting errors, or uses odd phrasing. Lloyds' official messages are carefully proofread.", "- You didn't request a password reset, but the message claims you did. This suggests someone else triggered the alert.", "- The message asks you to reply with personal information or mentions clicking a link 'to stay secure'. Real banks never ask you to verify details via text reply.", '- The text threatens to freeze your account or block your card unless you act immediately. Scammers use fear to override your caution.']
How this scam works step by step
The scam begins when you receive an SMS claiming to be from Lloyds Bank. The message might say your account has been locked due to suspicious activity, or that you need to update your payment details urgently. It includes a link (often shortened to hide the real URL) and tells you to click it immediately. When you tap the link, your phone opens what appears to be the official Lloyds Bank login page — but it's actually a fake website hosted by the scammers. You're asked to enter your username and password to 'verify' your account. After you submit these, the fake page may ask for additional information: your card number, expiry date, security code (CVV), and date of birth. Some variations ask you to generate a security code via your Lloyds app, then enter it on the fake site. The scammers now have enough information to access your real account, steal money, or commit identity fraud. They may sell this data to other criminals or use it to apply for loans and credit cards in your name.
How to verify if it is genuine
Never click any link in an unsolicited Lloyds text message. Instead, open your web browser directly and go to lloydsbank.com by typing the address yourself — don't use the link from the text. Log in to your account to check if there are any genuine alerts or issues. If nothing appears on your account, it was definitely a scam. Alternatively, call Lloyds' customer service directly using the number on the back of your bank card or from their official website. Do not use a phone number from the text message. Ask them specifically if they sent you this alert. Lloyds' genuine communications will have clear branding, proper grammar, and never ask you to click external links or reply with passwords. Real alerts appear in your Lloyds app or online banking portal first — they use text only as a reminder. You can also check /guides/bank-transfer-scam-warning-signs/ for more detail on how banks verify legitimate requests.
What to do if you have already interacted
If you clicked the link but didn't enter any information, you're likely safe — stop here and monitor your account. If you entered your username and password, call Lloyds immediately on 01895 205205 or the number on your bank card. Tell them you suspect a phishing scam and ask them to change your password and review recent activity for fraud. Change your Lloyds password yourself as soon as possible using a trusted device and the official website. If you provided your full card details (including CVV), contact Lloyds to cancel the card and request a replacement. If you shared your date of birth, sort code, or account number, set up a fraud alert with the three credit reference agencies: Equifax, Experian, and TransUnion — this makes it harder for scammers to open accounts in your name. Report the scam to Action Fraud and the NCSC (see section 6 for details). Forward the text message to 7726 — this is the UK's standard scam reporting number for SMS. Keep records of everything: the text message, screenshots, and any communication with your bank.
Reporting this scam in the UK
Report the scam text to Action Fraud, the UK's national fraud reporting service, by calling 0300 123 2040 or visiting actionfraud.police.uk. You can also report online through the Citizens Advice consumer helpline on 0808 223 1133. Forward the original scam SMS to 7726 (which spells 'SCAM') — this alerts your mobile network and the NCSC to the malicious number. Report the fake website to the National Cyber Security Centre (NCSC) by emailing report@phishing.gov.uk and including the fake link. Notify Lloyds Bank directly through their fraud team using the number on your bank card or app. If money was stolen, report it to Lloyds immediately and file a report with the Financial Conduct Authority (FCA) if your bank doesn't reimburse you. Keep a record of your crime reference number from Action Fraud, as you may need it for your bank's investigation or for financial claims. Don't feel embarrassed — these scams are sophisticated and target millions of people every year.
Frequently asked questions
Is Lloyds Bank a legitimate UK bank?
Yes, Lloyds Banking Group is a real, regulated UK bank. However, scammers impersonate them constantly. Lloyds' reputation and large customer base make it an attractive target for phishing scams. Never assume a text claiming to be from Lloyds is genuine just because Lloyds exists — always verify independently.
What should I do if I've already sent money to a scammer?
Contact your bank immediately and report it as fraud. If you transferred money to another UK account, your bank may be able to reverse the transaction or freeze the recipient's account if they act quickly. Report the scam to Action Fraud (0300 123 2040) and your local police. You may be eligible for compensation under the Contingent Reimbursement Model (CRM), though banks are not always required to reimburse money sent to scammers if you weren't tricked by the bank itself.
Can Lloyds text me asking me to update my security codes or CVV?
No, Lloyds will never ask for your CVV, security codes, or full card details via text, email, or phone call (unless you called them first). If an SMS claims to be from Lloyds and asks for any of these details, it is always a scam. Legitimate banks never ask customers to provide sensitive information this way.
How do I report a Lloyds Bank scam text in the UK?
Forward the text message to 7726 (SCAM) for free. Report the scam to Action Fraud on 0300 123 2040 or via actionfraud.police.uk. If money was stolen, contact Lloyds directly using the number on your card. Report the fake website to the NCSC at report@phishing.gov.uk. You can also call Citizens Advice on 0808 223 1133 for additional guidance.