NatWest Fraud Text Message Scam: How to Spot and Avoid It in the UK
Criminals are sending convincing text messages that look like they're from NatWest—but they're designed to steal your login details and access your bank account.
What is this scam?
The NatWest fraud text message scam is a phishing attack where criminals send SMS messages pretending to be from NatWest bank. The texts typically claim there's been suspicious activity on your account, an attempted login from an unknown location, or that your card has been blocked for security reasons. The scammer's goal is to create panic and urgency so you click a link or reply without thinking carefully. The link usually leads to a fake website that looks almost identical to the real NatWest online banking portal. Once you enter your username, password, or card details on the fake site, scammers have everything they need to access your real account and steal your money. These messages are becoming more convincing because scammers study genuine NatWest communications and copy their language, sender names, and formatting.
Warning signs to look for
- The text asks you to click a link or call a number to 'confirm' or 'verify' your account—NatWest never requests this via SMS.
- The message creates artificial urgency, using phrases like 'immediate action required' or 'your card has been blocked'.
- The sender number looks odd or is a regular mobile number rather than a short code (genuine bank alerts usually come from short numbers like 60016).
- The link in the text goes to a web address that's slightly different from natwest.com, such as natwest-security.com or natwest-verify.co.uk.
- The message contains spelling or grammar errors, or uses unusual phrasing that doesn't match NatWest's usual tone.
- You didn't request any action (like a card replacement or password reset) that would trigger a legitimate alert.
- The text asks you to reply with personal details, such as your sort code, account number, or PIN.
How this scam works step by step
The scam begins when you receive an SMS message claiming to be from NatWest. The text might say your card has been declined, someone tried to access your account, or your online banking has been locked for security reasons. The message includes a link and tells you to 'click here' or 'tap to verify your account'. When you click the link, you're taken to a fake website that looks almost identical to the genuine NatWest login page. Because you're in a state of panic about the supposed fraud alert, you quickly enter your username and password—or even more sensitive details like your card number, CVV, or PIN. The scammers now have your login credentials. Once you submit the form, the page might display an error or redirect you to the real NatWest website to make it seem like nothing unusual happened. Meanwhile, the criminals log into your real NatWest account using your stolen details, change your password, and begin transferring money or making fraudulent payments. By the time you realise something is wrong, your account may have been emptied.
How to verify if it is genuine
If you receive a suspicious text claiming to be from NatWest, do not click any links. Instead, open your web browser and go directly to natwest.com by typing the address yourself—do not use any link from the text message. Log into your account using your normal login details and check your recent transactions and security alerts. If there's a genuine security issue, it will be flagged in your account. You can also call NatWest's customer service on the number on the back of your debit card or on your bank statements—not a number provided in the suspicious text. Ask them directly if they sent the message. Another way to verify is to check the exact sender details of the text. Go to your phone's message settings and check whether the sender is a known short code or an unusual number. Genuine NatWest alerts typically come from short numbers. If you're still unsure, visit your nearest NatWest branch in person and ask staff to confirm whether the message is legitimate. See our related guide on bank transfer scams for more verification techniques.
What to do if you have already interacted
Act immediately if you clicked a link or entered any details. First, if you haven't already, do not enter any further information. If you entered your login details on a fake website, log into your genuine NatWest account right now and change your password to something completely new. If you also provided your card details, PIN, or CVV, contact NatWest immediately on 0370 300 0000 (the number on the back of your card) and tell them your card may be compromised—they can block it immediately. Check your recent transactions for any unauthorised payments and report them to NatWest. If money has been transferred out of your account, contact your bank straight away as they may be able to recover it, especially if the transaction is recent. Report the scam to Action Fraud on 0300 123 2040 or online at actionfraud.police.uk. Also report the text message to the NCSC by forwarding it to 7726 (spells 'SPAM'). Consider placing a fraud alert on your credit file with Experian, Equifax, or CallCredit to prevent scammers from opening new accounts in your name.
Reporting this scam in the UK
Report the scam through multiple official channels to help stop the criminals and protect others. Forward the suspicious text message to 7726 (this is the NCSC Suspicious SMS Reporting Service shortcode—it's free). Report the scam to Action Fraud by calling 0300 123 2040 (Monday to Friday, 8am to 8pm) or online at actionfraud.police.uk. You can also report phishing emails and related scams to the NCSC at report@phishing.gov.uk if the scammer provided an email address. If you've lost money, also contact your bank's fraud team immediately—they have their own reporting procedures and may be able to freeze accounts or reverse transactions. Contact the Citizens Advice consumer helpline on 0808 223 1133 for free advice if you're unsure what to do next or need support. Keep records of the text message (screenshot the date, time, and content), any fake website URLs you visited, and the phone number it came from. These details help Action Fraud investigate and build a case against the scammers. Report the incident to your employer's IT department if you received the message on a work phone.
Frequently asked questions
Is NatWest a legitimate bank, or is it always a scam?
NatWest is a completely legitimate UK bank and is not a scam. However, scammers frequently impersonate NatWest in text messages because it's a well-known bank with millions of UK customers. The scam is the fake text message pretending to be from NatWest, not the bank itself. If you receive a text that makes you uncertain, contact NatWest directly using the number on your card or in your bank statements—never use a number from a suspicious message.
What should I do if I've already sent money to the scammer?
Contact your bank immediately, even if you think it's too late. If the money was sent to another bank account (whether UK or overseas), your bank can contact that bank and attempt to freeze or recall the funds, particularly if the transaction is very recent. Report the scam to Action Fraud on 0300 123 2040 and provide them with the bank details you sent money to. Your bank may also be able to provide a 'chargeback' depending on how you paid and your account terms. Do not send any more money or information to the scammer.
Can I get my money back if I fell for this scam?
It depends on how quickly you act and how the money was sent. If you transferred money to a UK bank account, your own bank can potentially recover it through a chargeback process, especially if you report it within days. If the money was sent abroad or to a cryptocurrency wallet, recovery is much harder but not impossible—your bank should still try. Report the scam to Action Fraud and your bank's fraud team immediately. The sooner you report it, the better chance of recovery. However, some money may not be recoverable, so it's crucial to act fast and not send any additional funds.
How do I report a NatWest fraud text message?
Forward the text message to 7726 (the NCSC free reporting shortcode). This helps block the sender and warn others. Report the scam to Action Fraud by calling 0300 123 2040 or visiting actionfraud.police.uk. Also notify NatWest directly by calling 0370 300 0000 (the number on your card) so they can update their fraud systems and warn other customers. Keep a screenshot of the text message with the date and time for your records.