TSB Bank Scam Text Messages UK: How to Spot and Report Them
Criminals are sending fake TSB text messages that look almost identical to genuine bank alerts—here's how to tell the difference.
What is this scam?
TSB bank scam texts are phishing messages that pretend to come from TSB, one of the UK's largest high street banks. The scammer sends an SMS claiming there's unusual activity on your account, a payment pending, a security issue, or that you need to update your details urgently. The message typically includes a link or asks you to call a number. Once you click the link or call, you're taken to a fake TSB website or app that looks genuine, where you're asked to enter your online banking username, password, PIN, or card details.
TSB itself never asks customers to click links in texts or provide passwords via SMS. These scams are a form of "smishing"—SMS phishing—and they've become increasingly common as criminals impersonate trusted brands to exploit people's trust in their bank.
Warning signs to look for
- The message asks you to click a link or call a number to "verify" your account or confirm payment. TSB will never ask you to do this via text.
- The URL in the message doesn't match TSB's official domain (tsb.co.uk). Look for slight misspellings like "tsbbank.co" or "tsb-secure.com".
- The message creates artificial urgency with phrases like "act now," "verify immediately," or "unusual activity detected." Genuine TSB alerts don't usually demand instant action.
- Your name is missing or generic (e.g., "Dear Customer"). TSB uses your real name in genuine communications.
- The sender ID looks odd. Real TSB texts come from TSB or a numeric code, not random numbers or business names.
- Spelling or grammar errors are present. TSB's genuine communications are professionally written and checked.
- You didn't initiate any transaction or action that would trigger the alert. You receive a payment confirmation for something you didn't do.
- The message offers a suspicious solution, like clicking a link to "restore access" or "re-enable your card."
How this scam works step by step
The scam usually starts with a text message that appears to come from TSB. The message might say your account has been locked due to suspicious activity, a large payment is pending, or you need to verify your identity immediately. It includes a link (often shortened with URL-shortening services to hide where it actually goes) or a phone number to call. When you click the link, you're taken to a fake TSB login page or app that's visually almost identical to the real one. You enter your username and password, thinking you're logging into your genuine account.
The scammers capture these credentials instantly. Some scams go further: after stealing your password, they might ask for your PIN, card number, or security codes sent to your phone. Once they have these details, criminals can access your real TSB account and transfer money out, change your contact details to lock you out, or sell your information to other criminals. Some versions include a phone number instead of a link—when you call, you speak to a fraudster posing as TSB support who manipulates you into sharing sensitive information.
How to verify if it is genuine
If you receive a text claiming to be from TSB, never click any links or call numbers in the message. Instead, open your TSB mobile app directly (not via any link in the text) or go to tsb.co.uk in your browser by typing the address manually. Log in and check if there are any alerts or messages waiting for you in your secure inbox. Genuine TSB alerts will appear there.
You can also phone TSB's main customer service number on the back of your debit card or on your latest statement—this is the official number, not one from the text message. Ask if the alert is genuine. TSB will never ask you to click links in texts, call numbers from texts, or share your password or PIN via SMS. If you're uncertain about any security code or one-time password (OTP) message you've received, check our guide on Bank Text Messages Not Arriving? How to Fix It and Spot Scams for more information about genuine banking security procedures.
Always remember: your bank uses secure in-app messages or your online account portal for sensitive communications, never unsolicited text messages asking for action.
What to do if you have already interacted
Act quickly if you've already clicked a link, entered details, or shared information. First, do not send any money or agree to any further requests. If you clicked a link and entered your TSB username and password, go directly to the official TSB website or app and change your online banking password immediately. Use a strong, unique password. Next, contact TSB directly on 03456 12 34 56 (check your bank card or statement for the correct number) and tell them you may have been phished.
Ask them to check for suspicious activity and to add extra security to your account if possible. Check your recent transactions carefully for any unauthorized payments. If you see any, report them to TSB immediately. Monitor your account daily for the next few weeks for signs of fraud. If you shared your PIN, card number, or security details, tell TSB urgently—they may cancel your card and issue a replacement. If money has been taken, ask TSB about their fraud refund process and report it to Action Fraud.
Do not click any further links from the sender or engage with follow-up messages. Keep all messages as evidence for your report.
Reporting this scam in the UK
Report TSB scam texts through multiple channels to help protect others. Forward the original SMS to 7726 (Spam)—this is a free reporting service run by mobile networks. You can forward suspicious texts even if you don't know the sender's number. Report the scam to Action Fraud, the UK's national fraud reporting centre, by calling 0300 123 2040 (lines open 8am to 8pm Monday to Friday) or visiting actionfraud.police.uk online. You can also report the phishing link to the National Cyber Security Centre (NCSC) by emailing it to report@phishing.gov.uk—include the fake URL and the sender details.
If you've lost money, also contact your bank's fraud team and ask them to file a claim on your behalf. For advice on next steps, contact the Citizens Advice consumer helpline on 0808 223 1133 (free, phone or online chat). Keep copies of all messages, screenshots of the fake website (if you visited it), and records of any calls made. These help investigators understand the scale and tactics of the scam.
Frequently asked questions
Is TSB Bank a legitimate company, or should I ignore all TSB messages?
TSB is a genuine, regulated UK bank with millions of customers. You should not ignore all TSB messages—but you should always verify them independently. Never click links or call numbers in unsolicited text messages claiming to be from TSB. Instead, contact TSB directly using the phone number on the back of your card or your statement. If your account genuinely needs attention, TSB will also display messages in your secure online banking portal.
What should I do if I've already sent money or authorized a payment to the scammers?
Contact your bank immediately and report the fraud. Call TSB on 03456 12 34 56 and explain what happened. Many banks can reverse unauthorized payments or freeze fraudulent transfers if caught quickly enough. File a report with Action Fraud (0300 123 2040) and keep detailed records of everything—payment dates, amounts, recipient details, and screenshots. Your bank may be able to recover the money through a chargeback or fraud claim, but speed is essential.
Can scammers access my real TSB account if I only gave them my username and password but not my PIN?
Yes, they can cause serious damage with just your username and password. Once they log into your account, they can change your registered contact number, reset security questions, and update your payment details. This locks you out of your account and allows them to set up new payees or transfer money. Some TSB accounts don't require a PIN for every transaction. Contact TSB immediately if you've shared your login details and change your password from a different device.
How do I report a TSB scam text, and who should I report it to?
Report through three channels: forward the SMS to 7726 (the free Spam reporting service), report the phishing link to the NCSC at report@phishing.gov.uk, and report the scam to Action Fraud by calling 0300 123 2040 or visiting actionfraud.police.uk. If money was stolen, also contact your bank's fraud team directly. Each report helps law enforcement understand fraud patterns and take action against criminals.