Starling Bank Scam UK: How to Spot and Stop Fake Starling Fraud
Starling Bank scammers are after your login details and security codes—here's exactly how to spot them before you lose money.
What is this scam?
Starling Bank scams are fraud attempts where criminals impersonate Starling (a UK digital bank) to steal your login credentials, security codes, or payment card details. The scammers contact you via SMS, email, or phone call, claiming there's suspicious activity on your account or an urgent security issue requiring immediate action. They may say your card has been blocked, a payment failed, or an unusual login was detected. The goal is to trick you into clicking a malicious link, calling a fake support number, or sharing sensitive information like your PIN, security codes, or biometric data.
Starling has no physical branches, so all legitimate contact should come through their official app or verified phone number. These scams are increasingly common because Starling's mobile-first approach means most customers expect digital contact, which makes fake notifications feel plausible.
Warning signs to look for
- The message asks you to click a link or call a number to 'verify' or 'unlock' your account—Starling will never ask this via unsolicited contact.
- The sender's phone number or email domain doesn't match Starling's official channels (starling.com or verified app notifications).
- Urgent language like 'Act now', 'Your card is blocked', or 'Unusual activity detected' designed to make you panic and skip safety checks.
- Grammar or spelling errors, mismatched logos, or slightly wrong branding—genuine Starling communications are polished and professional.
- Requests for your PIN, security code, or one-time password (OTP)—Starling staff will never ask for these under any circumstances.
- Links in the message that don't match Starling's official website (look carefully for slight variations like starling-secure.com instead of starling.com).
- Requests to enable remote access or install software on your device to 'fix' a problem with your account.
- Threats of legal action, account closure, or debt collection if you don't respond immediately.
How this scam works step by step
The Starling scam typically starts with you receiving a text message or email that appears to come from Starling. The message claims something urgent: your card has been suspended, unusual spending has been detected, or a payment failed due to account issues. It includes a link to 'verify your account' or 'confirm your identity' and a sense of urgency to make you act without thinking. When you click the link, you're taken to a fake Starling login page that looks almost identical to the real app. You enter your email or phone number and password, which the scammers now capture.
Many people stop here and think nothing has happened—but the criminals have your login details. They may then send you a second message asking you to 'confirm the security code sent to your phone' or 'approve a login attempt'. If you receive a genuine Starling notification (you will), you may automatically share the code thinking it's part of the verification process you started. With your login details and security code, the scammers can now access your account, change your password, and transfer your money out.
Some variants ask you to call a fake support number, where a scammer poses as Starling staff and convinces you to share codes or grant remote access to your phone or laptop.
How to verify if it is genuine
If you receive a message claiming to be from Starling, do not click any links or call any numbers provided in the message. Instead, open the Starling app directly on your phone (not via a link) and check your notifications there—genuine alerts always appear in-app first. You can also log into your account through the official Starling website (starling.com) without clicking any external links to see if there are any genuine security warnings. Call Starling directly using the number on their official website or the back of your Starling card, never a number from the suspicious message.
Starling's customer support team will never ask you for your PIN, full password, or one-time security codes over the phone or via message. If you're unsure whether a link is genuine, check our guide on how to spot fake websites at Is This Website a Scam? A Practical Checklist Before You Buy. You can also contact Starling through their official in-app chat or Twitter @StarlingBank to ask if a message is real. Be especially cautious of unsolicited contact asking you to verify codes—this is almost always a scam.
What to do if you have already interacted
If you clicked a suspicious link but did not enter any details, disconnect your device from the internet and monitor your Starling account closely for the next 48 hours for any unauthorised transactions. If you entered your login details on a fake website, open the real Starling app immediately and change your password to something completely new. Do this while logged into the genuine app only, never through a link or website. Then turn on two-factor authentication if it's not already active.
If you shared a one-time security code (OTP) with someone claiming to be Starling staff, or if they gained remote access to your device, your account is at immediate risk. Contact Starling urgently through the app or call them on 0330 128 6066 (number on their official website) to inform them of the breach and request they lock your account pending investigation. If money has already been transferred out of your account, Starling's fraud team may be able to recall it, but speed is critical—contact them immediately. Report the scam to Action Fraud (0300 123 2040) and the NCSC.
Keep records of all messages and screenshots as evidence.
Reporting this scam in the UK
Report the scam immediately to Starling Bank via their app or by calling 0330 128 6066 so they can lock your account and investigate. Forward any fraudulent text messages to 7726 (the UK's Phishing and Reporting Service, operated by mobile networks) to help block the sender and warn other users. Report the scam to Action Fraud (the UK's official fraud reporting centre) by calling 0300 123 2040 or visiting actionfraud.police.uk. They will record details and may investigate if the amount is significant.
If you received a phishing email, report it to the NCSC's Suspicious Email Reporting Service at report@phishing.gov.uk—this helps them identify and shut down scam infrastructure. Save all screenshots, message headers, and email content to share with these organisations. If you're unsure about anything, contact Citizens Advice consumer helpline on 0808 223 1133 for free guidance on next steps. Report the fake website or link to the NCSC as well, so they can request its removal. The more people report these scams, the faster authorities can shut them down and protect other Starling customers.
Frequently asked questions
Is Starling Bank itself a scam, or is it the contact that's fake?
Starling Bank is a legitimate, FCA-regulated UK digital bank. The scam is not from Starling; it's criminals pretending to be Starling. Starling will never contact you out of the blue asking you to verify details or click links. If you receive unsolicited contact claiming to be from Starling, it is almost certainly a scam.
What should I do if I already sent money to the scammers?
Contact Starling immediately through their app or on 0330 128 6066 and tell them you've been the victim of fraud. They may be able to block the outgoing payment if it hasn't cleared yet. Report it to Action Fraud (0300 123 2040) and your local police. Keep all evidence and records—you may be able to recover some funds through your bank's fraud reimbursement scheme, though this is not guaranteed.
Why do scammers specifically target Starling customers?
Starling is a mobile-first bank with no physical branches, so all legitimate contact is digital. This makes fake text messages and emails seem more credible to Starling customers, who are used to receiving alerts and notifications via their phone. Scammers also target Starling because its customers tend to be tech-savvy and manage money digitally, making them attractive targets for high-value frauds.
How do I report a suspicious Starling text message?
Forward the text message to 7726 (operated by UK mobile networks as the Phishing Reporting Service) by typing 'REPORT' and sending it to that number. Also report it to Starling directly via their app, then report the full incident to Action Fraud (0300 123 2040). Take a screenshot of the message before deleting it, as you may need it as evidence.