The scam where banks refuse to refund victims

As controls to prevent authorised push payment (APP) scams improve, criminals are changing tactics and increasingly tricking people into approving card payments instead. This leaves victims without the refund protections they expect.

The fraudsters might use similar tactics to APP fraud, such as posing as your bank to steal security codes, but getting your money back from your bank is much harder. Find out how to protect yourself from this latest evolution. 

Source: Which? (11 Aug 2026) 

Our latest scam warnings

Our team of fraud experts is always on the lookout for scams targeting people across the UK.

This week, watch out for an email that's impersonating Nationwide, and a TV Licensing scam. Check out the full list, based on your reports to our Which? Scam Action Alerts Facebook community and scam sharer tool. 

Source: Which? (12 Aug 2026) 

Amazon account hacked by TikTok Shop fraudster

We spoke to an Amazon customer whose account was hacked by a fraudster on TikTok Shop. She discovered 26 unauthorised Amazon orders had been placed without her knowledge, totalling £1,418.

This scam works by fraudsters setting up TikTok accounts and advertising products for sale. The criminals use compromised Amazon accounts to fulfil these orders, all at no cost to the scammer. Find how our scams expert, Tali Ramsey, helped get the customer's money back.

Source: Which? (12 Aug 2026) 

Warning to Holidaymakers: The Booking.com WhatsApp Scam Targeting Travellers

Planning your next getaway? Be on high alert for a sophisticated scam currently targeting travellers who use Booking.com.

How the Scam Works

Fraudsters are exploiting security breaches at the individual hotel level to access legitimate reservation details. Because the scammers know your full name, booking dates, hotel location, and reference number, their communications can appear remarkably convincing.

Here is how the fraud typically unfolds:

• Direct WhatsApp Messages: Victims are contacted on WhatsApp by someone claiming to represent their booked accommodation.

• Artificial Urgency: You will be told there is an issue with your payment card details and warned that your reservation will be cancelled within 24 hours unless you re-verify them.

• Cloned Web Links: You are sent a link to a website designed to look identical to the official Booking.com payment portal, where your bank and card details are stolen.

• 2FA Code Theft: In some cases, scammers may even phone you directly, posing as customer support, and ask you to read out a two-factor authentication (2FA) text code to compromise your accounts.

How to Protect Yourself and Outsmart the Fraudsters

Many genuine hotels do use WhatsApp to communicate with guests, so you shouldn't ignore messages automatically—but you must verify them using these quick checks:

1. Check the Country Code: Verify that the sender’s phone number matches the country code of your holiday destination. A message regarding a hotel in Spain sent from a South American country code is a major red flag.

2. Inspect the Link: Look carefully at any web address provided. Phishing links often feature extra hyphens, misspellings, or random sequences of letters attached to the domain name.

3. Cross-Reference Details: Search the telephone number on the hotel’s official site to see if it matches their contact information.

4. Phone the Hotel Directly: If in any doubt, do not click the link or reply on WhatsApp. Call the hotel directly using the telephone number provided on your original confirmation email or official website.

5. Never Share Verification Codes: No legitimate company will ever phone you and ask you to read out a security or two-factor authentication code sent to your mobile phone.

Bottom line: Always pause before acting on urgent payment demands, double-check web addresses, and contact your accommodation directly through verified channels if something feels amiss. Safe travels! 

Warning: Catalytic Converter Thieves Reported in Barnehurst (Black VW Golf - GL67 NXB)

An alert has been posted on the Barnehurst Gossip Facebook page regarding potential catalytic converter thefts in the area.

Incident Details

• Location: Barnehurst / Bexley area

• Activity: Masked individuals targeted for catalytic converter theft

• Vehicle Involved: Black Volkswagen Golf

• Registration: GL67 NXB (reported as potential cloned/fake plates)

Prevention & Action Advice

• Park Securely: Whenever possible, park in a garage or well-lit, busy area close to fences, walls, or other vehicles to restrict access underneath your car.

• Etch or Mark Your Converter: Consider getting your catalytic converter marked with a unique serial number or fitting an approved anti-theft device/cage.

• Report Suspicious Behaviour: If you see anyone acting suspiciously around parked vehicles or attempting a theft in progress, call 999 immediately. Do not confront the individuals yourself. Non-urgent reports or information can be submitted to the Metropolitan Police via 101 or online.

Grass fire - Bexleyheath 🔥

Four fire engines and around 25 firefighters tackled a grass fire near Martens Avenue in Bexleyheath.

Around 400 square metres of woodland was damaged by the fire.

Control Officers took the first of nine calls at 0751 and mobilised crews from Plumstead, Sidcup, Bexley and East Greenwich fire stations to the scene. The fire was extinguished by 0959.

Source: LFB ( 10/08/2026)

Hidden trap on BBC website

Rogue advertisers can camouflage their ads on your favourite websites to trick you into adding your card details. You might see a prompt urging you to 'Verify and Continue' or 'Download' a file, but it's actually a disguised ad designed to blend in seamlessly with a website’s normal content.

We expose how a hidden banner left one BBC user trapped in a monthly subscription to an obscure 'tech education' e-book business, and to escape the payments they had to cancel their bank card.

Source: Which? (06 Aug 2026)