Hooked: The Scams Landing in Your Inbox and on Your Phone

The message arrives at a bad moment: a parcel you half remember ordering, a parking fine from last week, a bank warning that seems to match the day you are having. That is the point. Modern scams are designed to slip into ordinary life, and the people who fall for them are often careful, sensible and busy rather than careless.

Why Fraudsters Are Winning on the Details

Scammers have always relied on pressure, but their tools have improved. Stolen data from past breaches, convincing copies of official websites and cheap software for faking phone numbers all help them sound credible. The result is a message that uses your real name, mentions a company you actually use and asks you to act quickly.

The common thread is urgency. Whether the story is a frozen account, an unpaid fine or a family emergency, the aim is to stop you thinking and checking. Slowing down is the single most effective defence.

The Tricks Doing the Rounds

Phishing emails and texts

Phishing remains the workhorse of online crime. Typical themes include missed deliveries, failed subscription payments, unusual sign-in alerts and tax or benefit refunds. Text versions, often called smishing, now regularly impersonate parking authorities, energy suppliers and even government services. The links lead to lookalike pages built to harvest passwords, card numbers or identity details.

A newer wrinkle is the unsolicited calendar invitation. It looks like a meeting request from a stranger, but interacting with it can confirm to the sender that your address is active, which invites more targeted attacks. Deleting it without touching any of the buttons is the safer option.

Spoofed calls and impersonation

Criminals can make a call appear to come from a genuine number, including those of banks and police forces. Police have warned about a spike in reports of calls using spoofed police numbers. A caller ID is no proof of identity. Neither a real bank nor a real police officer will ask you to move money to a “safe account”, hand over your PIN or pass your card to a courier.

That last scenario is known as courier fraud, and it continues to cost victims millions, often targeting older people. Someone claiming to be an officer asks you to withdraw cash or hand over bank cards, then sends a courier to collect them.

‘Hi Mum’ messages and fake marketplace approaches

Another persistent trick arrives by WhatsApp or text from an unknown number, with a message that begins as though a child has lost their phone. It quickly moves to an urgent request for money. Similar approaches appear on online marketplaces, where a message about an item you never listed is used to lure you into sharing details or clicking a link.

Fake virus alerts

Pop-ups claiming your phone or computer is infected, often branded with a household name such as Apple or Microsoft, push you to call a number or install software. Genuine companies do not display alarms of this kind in a web browser.

Fraud Prevention You Can Start Today

Good fraud prevention rarely needs technical skill. It needs a few habits that become automatic.

• Pause before you click. Treat any unexpected message that demands action as suspect, however polished it looks.
• Go to the source. Instead of using a link, open the official app or type the website address yourself. For calls, hang up and ring the organisation on a number you trust, ideally from a different phone or after waiting a few minutes.
• Agree a family password. A simple shared word makes it easy to test a “relative” who suddenly needs money.
• Use passkeys or strong, unique passwords. Turn on two-step verification for email and social media, since a hijacked account can be used to scam your friends.
• Keep software updated. Updates close the security gaps that criminals exploit.
• Be wary of payment requests from strangers. Bank transfers are hard to reverse, so check who you are paying first.

If You Think You Have Been Caught Out

Speed matters. Contact your bank straight away using the number on your card or statement, and ask them to block payments and review the account. If you shared a password, change it on every service where you use it. Under UK rules in force since October 2024, banks must reimburse most victims of authorised bank-transfer fraud, up to a set limit, so always report the loss promptly.

Then report it. Many people still search for Action Fraud, but that service was replaced by Report Fraud, run by the City of London Police, from 4 December 2025. It covers England, Wales and Northern Ireland and can be reached online or by phone, while people in Scotland should contact Police Scotland on 101. Reports help investigators spot patterns and shut down criminal networks.

You can also help others by forwarding scam texts to 7726, which is free on UK networks, and sending suspicious emails to the National Cyber Security Centre at [email protected].

Why Staying Alert Matters

Fraud is not a niche problem. It touches every age group and every income bracket, and the shame that follows can stop victims speaking up, which only helps the criminals. Sharing what you have seen with friends, relatives and neighbours is one of the most practical contributions to online safety anyone can make.

The tactics will keep changing, but the principle holds: a genuine organisation will not mind if you stop, check and call back. A fraudster will. Trust that instinct, and let a moment of suspicion do its work.