The example
You receive an email or text that looks as though it comes from a company you use. It might mention a security problem or a failed payment. The message may say:
Your account will be suspended in 24 hours. To avoid this, verify your details here: [Fake URL].
The link can lead to a fake sign-in page that imitates the real service. It may ask for your username and password, payment details or a verification code. Giving those details to the scammer can put your account and personal information at risk.
Some versions ask you to install software or to speak to a supposed support agent. Whatever form the message takes, check the claim through the service’s official app or website rather than responding through the message.
Other ways this scam might appear
- A message claims a payment has failed and asks you to update billing details through a link to avoid your account being put on hold.
- Text message
- A short security alert says your account has been locked and demands an immediate verification through a link.
- Phone call
- A caller posing as a support representative asks for your password or payment details, saying they need them to prevent an account closure.
Warning signs
- The message creates urgency, such as a threat to suspend your account within 24 hours.
- It asks you to click a link, open an attachment or reply with sensitive information.
- The sender’s address or number does not match the service you normally use.
- The link’s destination does not match the service’s official website.
- It asks for a password, verification code, personal details or payment information.
- You were not expecting the message or the account warning.
- Spelling mistakes or unusual wording may be a clue, but a polished message can still be a scam.
What to do
- Do not click links, open attachments or reply to a message you cannot verify.
- Do not give the sender passwords, verification codes, personal information or payment details.
- Open the official app or type the website address yourself to check your account.
- Contact the provider through contact details you find independently, not those in the message.
- Forward suspicious emails to report@phishing.gov.uk. Forward suspicious texts to 7726, then delete the message.
- If you have entered a password, change it on that account and any other account where you use it.
- If you have shared banking details, contact your bank straight away. For further next steps, see our practical help guide.
