Passport Renewal Scam UK: How to Spot Fake HMPO Requests

The UK Passport Office never contacts you by email, text or phone to ask for payment or personal details — but scammers do.

Published 2026-05-06 · Beat the Scam Editorial Team · 8 min read

What is this scam?

Passport renewal scams involve criminals impersonating the UK Home Office Passport Office (HMPO) to steal money or personal information. Victims receive emails, text messages, or phone calls claiming there's a problem with their passport application, that renewal is urgent, or that a fee is due immediately. The scammers may claim your passport has expired and needs emergency renewal, or that you owe a processing fee you're not aware of. They direct you to fake websites that look almost identical to the real GOV.UK passport service, or ask you to pay via bank transfer, gift cards, or cryptocurrency. The goal is either to extract cash before you realise it's a scam, or to collect enough personal data (date of birth, passport number, address) to commit identity theft. HMPO never initiates contact this way — they only communicate through official post or their verified online account.

Warning signs to look for

• You receive an unsolicited email or text from 'HMPO' or 'UK Passport Office' asking you to click a link or provide personal details — HMPO does not contact people this way.
• The message claims your passport is about to expire or has been flagged as invalid, and you must pay immediately to renew it or avoid losing travel rights.
• You're asked to pay by bank transfer, gift card, cryptocurrency, or unusual payment method — genuine HMPO fees are only paid via GOV.UK using Debit/Credit card.
• The email address doesn't match the official HMPO domain (gov.uk) — check carefully, as scammers use lookalike addresses like 'hmpo-renewal@gov-passport.com'.
• The website you're directed to has poor grammar, spelling errors, or a slightly different URL from gov.uk/passport-services — genuine sites are polished and use official GOV.UK addresses.
• You're asked to verify or update sensitive information like your full passport details, NI number, or bank details via email or an online form.
• The message creates urgency ('renew within 24 hours' or 'your application will be rejected') to stop you checking facts independently.
• A caller claims to be from HMPO and asks you to stay on the line while you log into your bank or transfer money — legitimate officials never do this.

How this scam works step by step

Step 1: You receive an email, text, or phone call claiming to be from HMPO or the UK Passport Office. The message may say your passport renewal is delayed, your application has an issue, or a fee is overdue. Step 2: The scammer creates urgency — they claim you must act within hours or your passport application will be cancelled or you'll be unable to travel. Step 3: You're directed to a fake website that closely mimics the real GOV.UK passport service, complete with the official logo and layout. Alternatively, you're asked to provide details directly via email or over the phone. Step 4: You enter personal information (passport number, date of birth, full address) and/or payment details on the fake site, or provide them verbally to the scammer. Step 5: If payment is requested, you're told to send money by bank transfer, buy iTunes or Google Play gift cards, or use a cryptocurrency payment method. Step 6: Once the money is sent or your data is collected, the scammer disappears. You may later discover the real HMPO has no record of your application, or that money has been taken from your account. Identity thieves may use your passport details to open accounts, take out loans, or commit fraud in your name.

How to verify if it is genuine

If you receive a message about passport renewal, stop and verify before taking any action. First, go directly to GOV.UK/passport-services in your web browser — do not click any links in the email or text, as these lead to fake sites. Log into your official account using the username and password you set up with HMPO. Your account will show the actual status of any application; if nothing is there, no action is needed. Second, check the sender's email address carefully — genuine HMPO emails come from addresses ending in @gov.uk only. Third, contact HMPO directly using the phone number on the official GOV.UK website (not a number provided in the suspicious message). Fourth, check if you actually submitted a passport application recently — if you didn't, the message is definitely a scam. HMPO will never ask you to pay by bank transfer, gift card, or cryptocurrency, and will never ask you to provide your full passport details via email. See our guide on /guides/is-this-website-a-scam/ for how to check if a website is legitimate.

What to do if you have already interacted

Act quickly if you've engaged with this scam. If you provided personal details (passport number, date of birth, address, NI number) but no payment: contact HMPO on 0300 222 0000 and tell them your data may be compromised — they can flag your account and watch for fraudulent applications. Contact Action Fraud at 0300 123 2040 and report the scam immediately; they will add it to their database. If you paid money: contact your bank or card provider immediately and tell them you've been scammed — many banks can reverse payments if you act within hours. Report the payment method to the platform (PayPal, bank, crypto exchange) to help freeze the scammer's account. Take a copy of all evidence (emails, screenshots, payment confirmations) before reporting. Place a fraud alert with Experian, Equifax, and TransUnion (the three UK credit reference agencies) to monitor for identity theft — visit Experian.com or call 0344 481 8000. Change your password for any government online accounts and enable two-factor authentication if available. Monitor your credit report for suspicious new accounts opened in your name.

Reporting this scam in the UK

Report passport renewal scams to multiple organisations to maximise the chance of stopping the scammers and protecting others. Contact Action Fraud on 0300 123 2040 or online at actionfraud.police.uk — they are the national fraud reporting centre and will log your report. If you received a phishing email, forward it to the NCSC Suspicious Email Reporting Service at report@phishing.gov.uk — they use this information to take down fake sites and alert internet providers. If you received a text message, forward it to 7726 (the number for reporting SMS scams) — your mobile provider will investigate. Call Citizens Advice consumer helpline on 0808 223 1133 for advice on next steps and what protection you're entitled to if money was taken. Report the fake website to the Internet Watch Foundation (IWF) at iwf.org.uk so they can remove it from search results and hosting providers. If the scammer called you, note the phone number and time of call when you report to Action Fraud — this helps them trace the source. Save all evidence including emails, screenshots, and transaction records; UK police may need these if the case is investigated.

Frequently asked questions