Spotting Fake Booking Websites: What to Look Out For Before Booking Coach Trips & Local Tours

With community travel groups and coach excursions being so popular across the UK, fraudsters are increasingly targeting holidaymakers with convincing lookalike pages and counterfeit booking sites.

Recently, a suspicious site operating under the name "Emma's Explorers" (emmasgr8explore.netlify.app / linked via Facebook) came to light. While Facebook has been notified, the page and site may still be active.

To help protect our local community, here is a quick breakdown of the key red flags to look for before paying for any trip online.

Key Red Flags to Watch For

1. Free Developer Hosting Instead of a Custom Domain Legitimate travel agencies and tour operators use secure, professional domain names ending in .co.uk or .com. Be extremely cautious if a booking page uses a free web-builder or developer subdomain like .netlify.app, .wixsite.com, or .weebly.com.

2. Generic Email Addresses Established travel companies typically use email addresses tied to their registered business domain (e.g., info@companyname.co.uk). Relying strictly on a free Gmail or Hotmail address is a major warning sign.

3. Unverifiable ABTA / ATOL Numbers Scam sites often display fake or stolen ABTA or ATOL protection numbers to build trust. You should always verify any listed membership number directly on the official ABTA Registry or the CAA ATOL Database.

4. Unusual Payment Methods Be wary of any seller asking for payment via direct bank transfer, "Friends & Family" PayPal, or gift cards rather than a standard, secure card checkout. Bank transfers offer minimal buyer protection if the seller vanishes.

What to Do If You Spot a Suspicious Booking Site

• Report it to the NCSC: You can report suspicious web links directly to the UK National Cyber Security Centre via their Report a Scam Website tool.

• Report to Action Fraud: If you have lost money to a fake listing, report it to https://www.reportfraud.police.uk/ or call 0300 123 2040 (or Police Scotland via 101).

• Report Social Media Listings: Report suspicious posts or pages directly within Facebook (Report Page/Post > Fake Page or Scam).

Please share this post with friends or family members who regularly book local trips or coach excursions online!

🚨 Scam Warning: Watch Out for Fake DVLA "Road Usage" Emails in Bexley

scam DVLA email

scam DVLA email

A local Bexley resident has recently brought a suspicious email to light that is currently targeting drivers across the area.

Designed to look like an official notice regarding vehicle tax (Vehicle Excise Duty) or driving records, this email is a phishing scam aimed at stealing personal details and financial information.

Here is what you need to look out for to keep yourself and your family safe online.

What Does the Scam Look Like?

The email claims to be a "Road Use Record Review" from a fake authority called the "Motor Vehicle & Driver Records - Department".

Subject: A notice concerning the road usage cycle for your motor that lapsed in July 2026

Message: "We reviewed your transport record this very day and noted that the annual road use obligation ended on 28 July 2026. Please check your status soon to keep your ability to drive uninterrupted."

It includes a prominent button reading "Review Road Status", which links to a fraudulent site designed to harvest your bank details or personal credentials.

🚩 Dead Giveaways & Red Flags

If you receive a message like this, several clear warning signs reveal it to be fake:

• Suspicious Sender Address: Official correspondence from the DVLA will come from valid .gov.uk email domains. In this instance, the sender's address ends in @hotmail.com — a clear sign of fraud.

• Incorrect Official Terminology: The UK official body is the Driver and Vehicle Licensing Agency (DVLA). Phrases like "Motor Vehicle & Driver Records - Department", "road usage cycle", and "annual road use obligation" are awkward, unnatural translations intended to mimic official language.

• Vague Greetings & Artificial Urgency: Scammers rely on panic tactics, claiming your vehicle tax or licence has lapsed to trick you into clicking quickly without checking the details.

What Should You Do If You Receive It?

• Do NOT click any links or buttons: Do not press "Review Road Status" or follow any links within the body of the email.

• Do NOT reply or share personal information: Never provide payment details, national insurance numbers, or home address details via email links.

• Forward it to the NCSC: Report suspicious emails by forwarding them to the National Cyber Security Centre at report@phishing.gov.uk.

• Delete and mark as spam: Once reported, remove the email from your inbox.

What If You Have Already Clicked or Paid?

If you entered any sensitive information or financial details:

1. Contact your bank immediately: Tell them your card or account details may have been compromised so they can block pending transactions and secure your account.

2. Report to Action Fraud: Log the incident online or by calling 0300 123 2040.

3. Check your official status safely: If you are ever genuinely unsure about your vehicle tax or MOT status, check directly using the official government website at gov.uk/check-vehicle-tax.

Please share this alert with neighbours, friends, and family in the Bexley borough—especially older residents who might be vulnerable to digital scams.

Heads Up: Watch Out for This Fake RingGo Parking Fine SMS Scam

If you’ve recently received a text message claiming you have an "outstanding parking transaction" with RingGo, don't panic—and do not click the link.

A convincing new SMS scam is circulating across the UK, targeting motorists with fake unpaid parking fee notices designed to steal personal and financial details. Here is everything you need to know about how this scam works and how to protect yourself.

What the Scam Text Looks Like

The scam text attempts to create a false sense of urgency regarding late fees and administrative processing.

Scam Message Text:

"RingGo – Outstanding Parking Transaction Reminder

We identified an unpaid parking transaction during recent parking record reconciliation. Resolving this outstanding amount early avoids continuous late charges and extended administrative processing.

Access our official website, submit your vehicle registration number, check parking session logs and complete payment.

Official website link: https://ringgoiy-co[.]top/uk

(Simply reply with “Y”, then close this message and reopen it to activate the link. If the link still does not work, please copy it and paste it directly into Safari.)

Please settle payment soon to prevent further administrative processing as stated in our parking terms and conditions.

Thank you for your cooperation. RingGo Customer Services"

Red Flags to Watch Out For

While the formal language might look official at first glance, several clear warning signs give it away:

1. Suspicious Web Address (URL): The legitimate RingGo website is ringgo.co.uk. The scam message directs you to a fake domain (ringgoiy-co.top), which is designed to clone the real login page and harvest your card details.

2. The "Reply Y" Trick: Asking recipients to reply with a letter "Y" or a number is a common trick used by scammers to bypass automated spam filters on modern smartphones.

3. Vague Details: The text does not mention your actual vehicle registration, where you allegedly parked, or the specific date of the charge.

4. Urgency and Threats: Threatening "continuous late charges" is a standard high-pressure tactic used to make people act before thinking.

What to Do If You Receive This Text

• Do not click the link or copy it into your browser.

• Do not reply to the text message (even with "Y").

• Delete the message immediately.

• Verify directly: If you are genuinely unsure whether you owe a parking fee, open the official RingGo app installed on your phone or go directly to ringgo.co.uk by typing the address yourself.

How to Report It in the UK

Help stop these scammers by reporting the message:

• Forward the SMS to 7726: This is a free UK reporting service run by Ofcom. Forwarding suspicious texts helps mobile network operators investigate and block fraudulent numbers.

• Report to Report Fraud: You can report scam texts and phishing attempts online to Report Fraud (the UK’s national fraud reporting center) or forward suspicious texts to 7726..

Stay safe on the roads—and on your phone! Feel free to share this post with friends and family who use cashless parking apps.

Scam Alert: The Sneaky "Unpaid Parking Fine" Text Messages Targeting UK Drivers

Have you received a sudden text message warning you about an "unpaid parking fine"? If so, take a second before you tap that link. Consumer champion Which? has issued a major warning about a highly convincing, fast-growing SMS scam designed to steal your personal and financial details.

Here is what you need to know to keep your bank account safe.

What Does the Scam Look Like?

The scam arrives as a text message on your mobile phone, often spoofing official-looking sender IDs or appearing from a random mobile number.

The message claims that a record shows you have an outstanding Penalty Charge Notice (PCN) or an "unpaid parking fine." To make the threat feel urgent, the scammers include a tight deadline, warning that if you do not pay immediately, you will face:

• Increased court fees or legal action

• Bans from driving

• Negative impacts on your credit file

The message then directs you to click a link (often hidden behind URL shorteners like qrco.de or tinyurl) to settle the fee.

An example of the fake text message claiming a parking penalty charge is due.. Source: GOV.UK

 

The Trap: Copycat Government Websites

If you click the link, you are taken to a highly sophisticated copycat government website designed to look exactly like the official GOV.UK portal.

To trick you into lowering your guard, the fraudulent page links out to genuine government pages (such as actual challenge portals or public transport rules). However, once you click through to "pay," the site will ask you to input:

1. Your vehicle registration number (VRN)

2. Your full name, home address, and contact details

3. Your credit or debit card details

The only major giveaway is the URL (web address). While the page looks perfect, the address bar will not start with the official gov.uk domain.

Why Real Parking Fines Never Arrive by Text

The absolute simplest way to spot this scam is to understand how UK parking enforcement actually works:

Government bodies, local councils, and private parking companies will never contact you by text message to issue or chase a PCN.

They do not have access to your mobile number. Real parking tickets are either:

• Fixed physically to your vehicle’s windscreen in a yellow plastic packet.

• Sent strictly by post to the address of the Registered Keeper on file with the DVLA. Official letters will always contain your vehicle's make and model, specific details of the location, and photographic evidence of the alleged contravention.

What to Do If You Get One of These Texts

• Do not click the link: Even just clicking can let scammers know your number is active, leading to more targeted spam.

• Report the message: Forward the scam text to 7726 (a free UK reporting service). This helps mobile network providers investigate and block the sender.

• Report the website: You can report copycat or fraudulent websites directly to the National Cyber Security Centre (NCSC).

• Check securely: If you are genuinely worried you might have a real, outstanding fine, go directly to your local council’s official website or the government's official page by typing the URL into your browser yourself. Never use the link in the text.

If you have already entered your details: Contact your bank immediately using the trusted number on the back of your card to freeze your accounts and stop any fraudulent transactions.

Source: Which? (15 Jul 2026) 

Protect Your Inbox: A Quick Guide to Spotting Phishing Scams

Cybersecurity is a team effort. If you’ve recently spotted a suspicious email in your inbox, you aren’t alone. Scammers are becoming increasingly sophisticated, using convincing branding and urgent language to trick people into handing over personal details or financial information.

Here is what you need to know to stay safe and how to help the authorities fight back.

---

How to Spot a Phishing Attempt

Phishing emails often masquerade as legitimate organisations like HMRC, Royal Mail, your bank, or even popular streaming services. Look out for these common red flags:

• The "Urgent" Tone: Emails that threaten to close your account or fine you if you do not act immediately.

• Suspicious Sender Addresses: Check the actual email address, not just the "Friendly Name". If it’s a string of random characters or a personal account (like @hotmail.com or @gmail.com) claiming to be an official service, it’s a scam.

• Generic Greetings: Phrases like "Dear Customer" instead of your actual name.

• Dodgy Links: Hover your mouse over any links (without clicking!) to see the actual web address they lead to.

What to Do if You Receive One

1. Do Not Click: Avoid clicking links or downloading attachments, as these can install malware or lead to fraudulent websites.

2. Report It: Forward any suspicious emails to report@phishing.gov.uk. This goes to the National Cyber Security Centre (NCSC), which can take down malicious sites.

3. Delete and Block: Once reported, delete the email from your inbox and your "Deleted Items" folder.

Better Safe Than Sorry

If you are ever unsure, the safest route is to log in directly through an official app or website by typing the address into your browser yourself. Never use the links provided in a suspicious message.

---

Received a suspicious text? You can also report "smishing" by forwarding the message to 7726 (which spells 'SPAM' on most keypads). It is free of charge and alerts your mobile provider.

Phishing Email Scam

Phishing Email Scam

Phishing Email Scam

Phishing scam guide

[click the images above to view enlarged]

SCAM ALERT: Fake McAfee Invoice

Action Required: Do NOT call the phone number provided in this email. If you have already called them or provided bank details, contact your bank immediately on their official number (usually found on the back of your card).

Why this is a Scam:

• The Sender: The email comes from a personal-looking name (Kamari Wilkins) rather than an official @mcafee.com domain.

• High Pressure/Panic: They claim a large amount ($375.98) has been "Auto-Debited" to provoke an immediate emotional reaction.

• Poor Grammar & Logic: The text contains odd phrasing like "We appreciate you informing us that your... subscription is now active" and nonsensical terms like a subscription "lasting 24 hours" but renewing for "three years".

• The Hook: The primary "Call to Action" is a phone number. Real companies will typically direct you to your online account dashboard to manage subscriptions.

---

How to Report This

To help the authorities take down these scammers, please follow these steps:

1. Forward the email: Send the full original email to the National Cyber Security Centre (NCSC) at:

   report@phishing.gov.uk

2. Report the Phone Number: You can also report the fraudulent phone number to 7726 (a free service for reporting spam/scams via SMS).

3. Delete: Once reported, delete the email. Do not reply to the sender, as this confirms your email address is active.

---

Stay Safe: Always check your bank statement directly via your banking app or official website if you are unsure about a transaction. Never use contact details provided inside a suspicious email.

Alert: Phishing Scam Targeting Antivirus Users

There is a sophisticated new email phishing scam targeting UK consumers.

Fraudsters are sending emails that impersonate a generic antivirus billing department, alerting you to a fictitious failed subscription renewal. The email uses urgent language and fear tactics to manipulate you into clicking a link and providing your credit card details.

Key Signs to Watch For:

• The 'From' Address is a Giveaway: The email might display a name like "Antivirus Billing," but the actual email address is a random jumble of letters and numbers from a generic provider like Hotmail. This is a primary red flag.

• Created Sense of Panic: The subject line is often generic (e.g., "RE: System notifications"), while the email content is aggressive, using terms like "FINAL NOTICE" and warning of "CRITICAL" risk levels if you don't act immediately.

• Fake Urgency: The email lists multiple, made-up "failed" payment attempts to make the situation seem urgent.

• An Unsolicited 'Deal': In an attempt to further lure you, they may offer a large, unsolicited discount for "renewing" through their link.

What You Should Do:

Do not click on any links, open attachments, or reply to this email. If you receive this message, it should be deleted immediately. If you have an actual antivirus subscription, you can check its status by logging directly into your account on the official company website or by using your trusted, official contact information for their customer service.

This scam has been reported to the UK National Cyber Security Centre at report@phishing.gov.uk. If you have clicked on a link in a similar email or are worried about a potential payment, you should contact your bank immediately and report it to Action Fraud.

---

Infographic Guide: Don't Take the Bait! (pdf)

Spotting a Phishing Email

1. CHECK THE SENDER

• Red Flag: The name says "Antivirus Billing," but the email address is random gibberish: brnabawxfvf@hotmail.com.

• Safe: A legitimate email from a known company will match their official domain (e.g., billing@mcafee.com or support@norton.com).

2. READ THE SUBJECT LINE

• Red Flag: Generic or vague: "RE: System notifications."

• Safe: Specific to your account, such as "Your Antivirus Subscription is About to Expire."

3. WATCH OUT FOR URGENCY & THREATS

• Red Flag: High-pressure words in all caps: "FINAL NOTICE" or "CRITICAL RISK."

• Safe: Clear, informative language that isn't designed to make you panic.

4. VERIFY INFORMATION DIRECTLY

• Red Flag: A fake "Activity Log" of failed attempts created to pressure you.

• Safe: Log in to your actual antivirus provider's official website. Do not use any links in the email.

Report Scams to: report@phishing.gov.uk

click image to view enlarged

Infographic Guide: Don't Take the Bait! (pdf)

Cyber Alert: Sophisticated "Cloud Storage Full" Phishing Scam

A new wave of phishing emails is targeting UK users, claiming their cloud storage is "100% Full" due to a failed subscription payment. This is a scam designed to steal your credit card details and personal information.

How the Scam Works

You receive an email with the subject line "RE: Storage Warning: Account at 100%". The email uses urgent language to panic you into acting quickly, claiming:

• Your subscription has been suspended.

• Your account has been downgraded to a 5 GB free tier.

• Your photos and videos are "at risk of deletion."

• There is a prominent "Renew Now" button.

Why It’s a Fake

Even though the graphics look professional, there are several "red flags" that give it away:

1. The Sender’s Address: In recent examples, the email came from a random Outlook address (e.g., giordano.629arny@outlook.com) rather than an official company domain (like @https://www.google.com/search?q=google.com or @apple.com).

2. Generic Greeting: It doesn't use your name, just "to me."

3. Artificial Urgency: Scammers love to threaten the loss of your data (especially photos) to make you click without thinking.

4. RE: in the Subject: Adding "RE:" makes it look like part of an ongoing conversation you never actually started.

What to Do If You Get This Email

• Do NOT click any links or the "Renew Now" button.

• Check your account manually: If you’re worried, go directly to the official website or app of your storage provider to check your status. Never use the links provided in an unexpected email.

• Report it: Forward the email to the National Cyber Security Centre at report@phishing.gov.uk.

• Delete it: Once reported, delete the email from your inbox and your "Deleted Items" folder.

Stay vigilant and keep your data safe!

scam email (click to view enlarged)

⚠️ SCAM ALERT: Fake PayPal 'iPhone 16' Invoice

We are seeing reports of a phishing scam circulating via email, designed to trick recipients into calling a fraudulent helpline. If you receive an email similar to the one shown in the attached screenshots, do not engage with it.

How the Scam Works

The email claims that an "unauthorised transaction" for an iPhone 16 Pro ($789.99) has been successfully charged to your PayPal account. It uses several tactics to pressure you:

• Urgency: It claims you will be charged "today" unless you call immediately.

• The "Hook": It invites you to call a "Helpline Number" to cancel the order or get a refund.

• Professional Branding: It uses the PayPal logo and formal language to appear legitimate.

Red Flags to Look Out For

• Sender Address: The email comes from a random, personal account (e.g., "jossiejossie8745") rather than an official @paypal.com domain.

• Generic Greeting: It addresses you as "Dear PayPal Customer" instead of using your full name.

• Poor Grammar: Note the awkward phrasing and punctuation, such as "1 you're Billing Information" and "will be charge today".

• The Phone Number: PayPal does not typically ask you to call a mobile or random number to "cancel" a transaction found in an email.

What You Should Do

1. Do Not Call: Never call the phone number provided in the email. This connects you directly to scammers who will try to gain remote access to your computer or steal your bank details.

2. Check Your Account Separately: If you are worried, log in to the official PayPal app or website directly (never via a link in the email) to check your recent activity.

3. Report It: Forward the suspicious email to the National Cyber Security Centre at report@phishing.gov.uk.

4. Delete: Once reported, delete the email from your inbox.

​Scam Alert: Don’t Fall for This Fake ‘Cloud Storage Full’ Email

​

A new phishing scam is currently hitting UK inboxes, masquerading as a "Delivery Status Notification" or a storage alert from Google. It’s a clever attempt to trick you into handing over your payment details or login credentials.

We’ve already reported this to report@phishing.gov.uk, but here is what you need to look out for to stay safe.

The Anatomy of the Scam

The email uses several tactics to create a sense of urgency and legitimacy:

• The Fake Warning: The email claims your cloud storage is 100% full and that your "access is at risk," threatening to pause your emails and file syncing.

• The "Bait": To make the offer tempting, it claims an "80% Loyalty Discount" has been applied to an upgrade.

• Official Branding: It uses the familiar Google Cloud/Drive logo and colours to appear authentic at a glance.

Why We Know It’s Fake

If you look closely at the screenshots, the red flags are everywhere:

1. The Sender Address: The email claims to be a "Delivery Status Notification," but the actual sender address is a random string of characters from a Hotmail account (aqhc1dxpetam0410yan@hotmail.com). Google would never send storage alerts from a Hotmail address.

2. Conflicting Info: The subject line says "Delivery Status Notification (Failure)," which has nothing to do with cloud storage limits.

3. Language Errors: Your email provider even flagged that the message appeared to be in French, despite the text being in English—a common sign of "masking" used by scammers.

4. Suspicious Company Name: The footer credits "2026 Cloud Storage Systems Inc." rather than Google or Alphabet.

What You Should Do

• Do Not Click: Clicking "Get More Storage" will likely take you to a fake payment page.

• Report It: Forward any similar emails to the National Cyber Security Centre at report@phishing.gov.uk.

• Check Locally: If you are worried about your storage, go directly to one.google.com or check your settings in the official app. Never follow a link from a suspicious email.

Scam Alert: New NHS Prescription Phishing Scam Sweeping Inboxes

 

It’s the start of the week, and scammers are already hard at work trying to exploit our trust in the NHS. We’ve seen a surge in a particular phishing email today that claims to offer a "simple" way to order NHS prescriptions online.

While the NHS does offer legitimate digital services, this specific email is a malicious scam designed to steal your personal information or financial details. Here is what you need to look out for.

---

The Anatomy of the Scam

The email, which often carries the subject line "TR: Save Time on NHS Medications IT," looks professional at a quick glance, but several red flags reveal its true nature:

• Suspicious Sender Address: The email claims to be from "UK Pharmacy Subscription Notice IT," but the actual email address is a random string of characters from a Hotmail account (avrom-158jerrold_145.carter@hotmail.com). Official NHS communications will always come from an @nhs.net or @nhs.uk domain.

• Vague Branding: While it mentions "NHS Prescriptions," the layout is generic. It lacks the official NHS logo, a registered pharmacy name, or a physical address—all of which are legal requirements for UK pharmacies.

• Urgency and Convenience: Phishing scams often use "Save Time" or "Register Now" buttons to rush you into clicking before you’ve had a chance to think.

• The "Unsubscribe" Trap: In many of these emails, even the "Unsubscribe" link is a trap used to verify that your email address is active, leading to even more spam.

---

Why is this dangerous?

If you click the "Register Now" button, you will likely be taken to a spoofed website that looks like an NHS login page. Scammers use these sites to harvest:

1. Your NHS login credentials.

2. Personal details (Name, DOB, Address).

3. Payment information for "delivery fees" or "pre-payment certificates."

---

How to Stay Safe

• Don’t Click: If you receive this email, do not click any links and do not download any attachments.

• Check the Sender: Always tap or click on the sender's name to see the full email address. If it’s a personal account (like Hotmail, Gmail, or Outlook), it is a scam.

• Use Official Channels: To order prescriptions online safely, always use the official NHS App or the website of a well-known, high-street pharmacy you trust.

• Report It: You can forward suspicious emails to the National Cyber Security Centre at report@phishing.gov.uk.

Stay vigilant and share this with friends or family members who might be less tech-savvy. Scammers rely on us being in a hurry—taking thirty seconds to check the sender's address can save a lot of heartache.

 

Warning: The 'Cloud Space' Storage Scam – Don’t Get Hooked

Have you recently received an email warning you that your "Cloud Space" is running low or that your files might be "lost" without an active subscription? If so, you aren't alone.

A new wave of phishing emails is hitting inboxes, preying on our fear of losing precious photos and documents. Here is a breakdown of how this specific scam works and the "red flags" you need to look out for.

The Anatomy of the Scam

The goal of this email is simple: to make you panic and click the "Increase Storage" button. Once you click, you are likely directed to a fake login page designed to steal your password, or a payment page intended to harvest your credit card details.

5 Red Flags Found in This Email

1. The "From" Address Doesn't Match The email displays the name "Cloud space," but look closely at the actual email address: alasteir_886aylmer-332... @outlook.com. A legitimate service like Google Drive, iCloud, or Dropbox will always email you from their official corporate domain (e.g., @https://www.google.com/search?q=google.com or @dropbox.com), never a random Outlook or Gmail account.

2. Artificial Urgency Phrases like "Without an active subscription, your files could be lost" are designed to make you act quickly without thinking. Scammers rely on fear to bypass your better judgement.

3. Vague Branding The email refers to "Cloud space" and "Drive Port access" rather than a specific company. Legitimate companies spend millions on branding; they won't forget to include their own logo or name in a billing alert.

4. Generic Greeting Notice that the email doesn't address you by name. It uses a blank "Customer" field or simply targets your email address. Real service providers usually address you by the name on your account.

5. Too Good to be True The offer in the screenshot claims a "10 TB Data" plan with an "80% Off" discount. If a deal for massive amounts of storage seems incredibly cheap and arrives out of the blue, it’s almost certainly a trap.

---

What to do if you get this email:

• Do NOT click any links: This includes the "Unsubscribe" link at the bottom, which is often used by scammers to confirm your email address is active.

• Check your account manually: If you’re worried about your storage, go directly to the official website (e.g., drive.https://www.google.com/search?q=google.com) or use the official app on your phone to check your status.

• Report and Delete: Mark the email as "Spam" or "Phishing" in your inbox settings, then delete it.

Stay safe online – if in doubt, check it out (properly)!

⚠️ Current UK Cyber Threat Landscape: Phishing Trends to Watch 2025 🇬🇧

While the classic "mailbox full" scam is still used, cybercriminals in the UK are using much more sophisticated tactics right now. The latest data shows that phishing remains the most common form of cyber attack across businesses and individuals.

Here are three major scam trends you need to be aware of:

1. Delivery & Parcel Scams (Smishing) 📦

Especially around the busy holiday seasons, fraudulent texts (called Smishing) and emails impersonating major couriers are rampant.

• The Scam: You receive an urgent text or email claiming there's an unpaid re-delivery fee (£1-£2), a problem with your address, or customs duty that must be paid immediately to release a parcel.

• The Goal: To get your bank card details for the small fee. Once they have those details, they can use them for other fraudulent transactions.

• How to Spot It:

  • The Fee is Fake: Major UK couriers will never charge a re-delivery fee via a text message.

  • Vague Details: The message rarely includes your name or specific order details (e.g., what you ordered).

  • Action: If you are expecting a parcel, never click the link. Go to the official courier website or app and use your genuine tracking number to check the status.

2. AI-Powered Impersonation (Deepfakes & BEC) 🤖

Phishing is getting harder to spot because AI tools are eliminating the classic red flags like poor spelling and grammar. This is a huge threat to businesses, but individuals are also at risk.

• The Scam: Scammers use AI to craft highly convincing, flawless messages. For businesses, this includes Business Email Compromise (BEC) where they impersonate a CEO, CFO, or a trusted vendor, often with details scraped from LinkedIn or public profiles.

  • The scammer might even use deepfake voice technology to call an employee, sounding exactly like a senior leader, and demand an urgent, secret bank transfer.

• The Goal: High-value fraud, like large bank transfers or the theft of sensitive company data.

• How to Spot It:

  • Verify Out-of-Band: Always verify an unusual or urgent financial request through a secondary method. If your CEO emails asking for a transfer, call them on their known phone number to confirm—don't reply to the email.

  • Question the Urgency: Scammers rely on panic. Any request for an immediate, large, or unusual transfer should be a major warning sign.

3. HMRC & Government Refund Scams 💰

These scams are perennial but remain highly effective, often peaking around tax deadlines.

• The Scam: You receive an email or text claiming you are entitled to a tax refund or rebate from HMRC and must click a link to input your details to claim the money.

• The Goal: To steal your financial and personal information, which is then used for identity theft.

• How to Spot It:

  • HMRC's Rule: HMRC will never notify you of a tax rebate or ask for personal details via email, text message, or WhatsApp. They will always use official correspondence (like a letter) first, or tell you to check your Government Gateway account.

  • Suspicious Phone Calls: Be wary of automated calls threatening a lawsuit or arrest over unpaid tax—these are aggressive scams designed to scare you into making an immediate payment (often via gift cards or bank transfer, which HMRC would never request).

What to Do: Remember the Reporting Numbers

You did exactly the right thing with your suspicious email. Keep these essential UK reporting contacts handy:

Type of Scam	What to Do	Reporting Contact
Suspicious Email	Forward it. DO NOT click any links.	report@phishing.gov.uk
Suspicious Text (Smishing)	Forward the whole message.	7726 (Free service)
Lost Money or Hacked	Report the crime immediately.	Action Fraud (England/Wales) or Police Scotland (Scotland)

Reporting Fraud and Cyber Crime in the UK

The service for reporting fraud and cyber crime in England, Wales, and Northern Ireland has been transitioning from Action Fraud to a new service called Report Fraud.

• For England, Wales, and Northern Ireland:

  • Online: Visit the new service at reportfraud.police.uk.

  • Phone: Call 0300 123 2040.

  • Note: All traffic to the old Action Fraud website is automatically redirecting to the new Report Fraud service.

• For Scotland:

  • Continue to report to Police Scotland by calling 101.

• If you or someone else is in immediate danger or risk of harm, always dial 999.

What to do if you have suspicious messages or websites:

• Suspicious Emails: Forward them to the Suspicious Email Reporting Service (SERS): report@phishing.gov.uk.

• Suspicious Text Messages: Forward them free of charge to 7726.

• Suspicious Phone Calls: You can report scam call numbers free of charge by texting 7726 with the word 'Call' followed by the scam caller's number.

• Suspicious Websites: You can report a scam website to the National Cyber Security Centre (NCSC) directly to help them investigate and remove it.