Stay Safe Online: Essential Scam Alerts & How to Protect Yourself

Cybercriminals are constantly finding sneaky new ways to target consumers—taking advantage of system outages, impersonating trusted brands, and exploiting family trust. Here is a roundup of the latest scam warnings you need to know about right now, along with steps you can take to keep your personal details secure.

1. Bank Impersonation & System Outages

Scammers are currently exploiting recent Google outages to impersonate banks and major financial organisations.

• The Risk: You may receive urgent requests asking you to verify account details or share sensitive personal information.

• What to Do: Never share financial details over unsolicited messages. If you need to contact your bank, use the phone number on the back of your payment card or dial 159 to connect directly to their fraud department. Keep in mind that customer service lines may be busier than usual, so only call if it is urgent.

2. Fake Apps on Google Play

Cybersecurity firm McAfee has identified nearly 1,000 fraudulent apps on the Google Play Store targeting British consumers.

• The Risk: These apps fake the identity of well-known brands—including PayPal, Apple Pay, and Netflix. One fake PayPal app was downloaded over 10,000 times, and several apps tricked users into fraudulent subscriptions costing up to $49.99 a month.

• What to Do: Only download apps directly from official developer sites or verified links, check publisher reviews carefully, and monitor your bank statements for unauthorized recurring payments.

3. Cold Calls Impersonating Which?

Be on guard against cold calls claiming to represent the consumer group Which? regarding home roofing insulation.

• The Danger: Which? is not making these calls. Engaging with the caller will likely expose you to an insulation or home improvement scam.

• What to Do: Hang up immediately without giving away any personal information. Report suspicious text or call numbers by forwarding them via text to 7726 (a free reporting service).

4. The 'Hi Mum / Hi Dad / Friend' Messaging Scam

The classic family impersonation scam is circulating again across SMS, email, and messaging platforms like WhatsApp.

• How It Works: Scammers pose as your adult children or a friend in distress. They often claim their phone is broken, or give an excuse like "I can't talk on the phone right now, I have laryngitis," to prevent you from calling to verify their voice.

• The Goal: They aim to manufacture urgency and panic before asking you to transfer money or order items online for them.

• What to Do: Pause and verify. Always try calling your relative or friend on their original, known phone number before taking any action or sending money.

5. Spam Calendar Invitations on iPhone & Outlook

A growing phishing tactic involves sending unsolicited calendar invitations via email. Tapping Accept, Maybe, or Decline on your device sends an automatic reply to the scammer, confirming that your email account is active and inviting more spam.

If an invitation gets stuck in your Apple Calendar app via an Outlook account, follow this quick step-by-step fix:

1. Disable Outlook Calendar on iPhone: Go to Settings > Apps > Calendar > Calendar Accounts. Select your Outlook account, toggle off Calendars, and choose Delete from My iPhone when prompted.

2. Clean Up via Web Browser: Log into your Outlook account on a web browser (outlook.live.com). Locate the spam email, right-click, select Report > Report phishing, and then permanently delete it from your Deleted Items folder.

3. Re-enable Calendar: Go back to your iPhone settings and toggle your Outlook Calendars back on. Your calendar will resync without the offending invitation.

Quick Rules to Remember

• Never rush: Urgency is a scammer’s strongest tool.

• Verify independently: Use official numbers on cards or trusted websites.

• Report suspicious activity: Text spam numbers to 7726 and report phishing emails directly within your email app.

A nasty WhatsApp takeover scam

Scammers are attempting to take control of people's WhatsApp accounts by luring you into following a dodgy link. It starts with an innocent-looking WhatsApp message from one of your contacts, asking you to vote in a fake competition.

If you click the link to vote, you're then asked to provide your mobile number and to enter a code you're sent. Doing this will link your WhatsApp account to the scammers' computer, and they'll be able to spread their scams to your contacts. 

Source: Which? (03 Nov 2026)

Scammed by fake Sky customer support

When you've had a problem with a company, contacting customer support is a first step to resolving your issue. However, scammers are setting up fake accounts on Facebook and WhatsApp to try to trick people into contacting them, rather than genuine customer services.

We spoke to one Sky customer who was targeted by fraudsters after he posted on what he believed was an official Sky Facebook page. Our fraud expert Faye Lipson explains how this scam works and what to do if you're targeted.

Source: Which? (29 Oct 2026)

7 easy ways to outsmart scammers

Protecting yourself from scammers doesn't necessarily mean spending hours changing passwords or digging through your phone's settings. Sometimes, a small change to your everyday habits can make a big difference.

We asked Which? experts to share the precautions they take in their own lives, including one colleague whose family came up with a secret code for their messages after a particularly frightening WhatsApp scam.

Source: Which? (20 Oct 2026) 

Scammers are thriving on Meta's social media platforms

Platforms including Facebook, Instagram and WhatsApp remain squarely at the centre of the UK’s scam epidemic, as our survey of victims has shown.

While the tech giants profit, consumers are paying the price for a relentless wave of fraud. We expose how criminals operate, why reimbursement remains a postcode lottery and why urgent reforms are needed to tackle this crime.

Source: Which? (09 Sep 2026) 

The most common WhatsApp scams

Messages promoting a sham service called 'WhatsApp Gold' are recirculating. This scam claims to offer special features to users that can be unlocked by clicking a link – instead, the link leads to malware being downloaded onto your device.

To help you stay protected, our experts have rounded up the most common scams you're likely to come across on WhatsApp, plus tips on how to spot and report them. 

Source: Which? (30 Jul 2026) 

Fact Check: Debunking the 'Home Affairs' Door-to-Door Census Scam Message

If you have recently seen a warning circulating on Nextdoor, WhatsApp, or Facebook about fake "Home Affairs Officers" collecting fingerprints and photos for an upcoming census, you are not alone. The notice warns residents that thieves with laptops and biometric readers are posing as officials to break into homes.

However, you can rest easy: this viral post is a hoax.

Where Did the Hoax Come From?

This message first surfaced around 2017 in South Africa, where the national government does indeed include a "Department of Home Affairs". Over the years, the exact text has been copy-pasted across North America, Australia, and the UK without modification.

How to Spot Why It Doesn't Apply to the UK:

• Incorrect Terminology: The UK government uses the Home Office, not the "Home Affairs Department".

• No Biometric Census: Official UK censuses are managed by the Office for National Statistics (ONS). Government field officers will never ask to capture your fingerprints or take your photograph on your doorstep.

• Chain Mail Dynamics: The post ends with classic viral chain-letter phrases urging you to "Send this to all your community groups."

How to Handle Doorstep Safety

While this specific message is fake, staying vigilant about genuine doorstep callers is always sensible practice:

• Always check ID: Genuine officials carry official photo identification and will never mind waiting outside while you verify their details.

• Use a door chain: Speak to unknown callers through a window or with a door chain engaged.

• Report suspicious activity: If someone is acting suspiciously at your door, report it to Action Fraud or call 101 (or 999 in an emergency).

Instead of forwarding the hoax warning, feel free to share this article with your local neighborhood groups to set the record straight!

Fake hoax scam warning

 

Essential WhatsApp Update – How to Lock Down Your Security and Stop Scammers in Their Tracks

If you use WhatsApp regularly, a brand-new security feature has just been released that fundamentally changes how your privacy and personal data are protected online.

Historically, sharing your WhatsApp details meant giving out your actual mobile phone number. Because your mobile number is often linked to sensitive personal accounts—such as online banking, email logins, and government services—handing it over to strangers, new acquaintances, or online sellers carried inherent security risks. Once cold callers, spammers, or fraud syndicates got hold of your number, your handset could easily be bombarded with unwanted calls and phishing texts.

WhatsApp's latest update fixes this major flaw by introducing usernames and an optional security PIN system, removing the need to share your primary phone number ever again.

Key Features Explained

• Custom Usernames: Instead of revealing your personal mobile number, you can now create a unique username to share with people you wish to connect with on WhatsApp. Anyone who has your username can message or call you on the app, while your real phone number remains completely hidden.

• Easy Username Management: Unlike a phone number—which is difficult and inconvenient to change if compromised—you can update or edit your WhatsApp username at any time if you want to block unwanted contact.

• PIN Protection ("Contact Me by Username"): For an additional layer of crime prevention, you can restrict who can initiate a conversation using your username by enabling a PIN. Even if a scammer discovers your username, they will be unable to contact you unless you have provided them with this specific security PIN.

Step-by-Step Setup Guide

1. Open WhatsApp on your smartphone.

2. Tap the three dots in the top right-hand corner (or go to your app options) and select Settings.

3. Tap on Account, then look for the new Username option.

4. Select Create Username, choose a unique and memorable name, and check its availability. Once selected, save it to reserve your handle.

5. To restrict unknown contacts further, tap Contact Me by Username and select People who know my key.

6. WhatsApp will generate a secure PIN code. Share this PIN alongside your username only with people you explicitly wish to permit to contact you. You can review or change this PIN in your Settings whenever needed.

Security, Privacy & Crime Prevention Advice

• Minimise Phone Number Exposure: Your main mobile number is key identity data. Keep it strictly private and restrict its use to trusted institutions (like your bank or healthcare providers). Use your WhatsApp username for day-to-day networking, online marketplaces, and new acquaintances.

• Enable Two-Step Verification: In addition to setting up a username PIN, ensure you have enabled WhatsApp’s built-in Two-Step Verification (found under Settings > Account > Two-step verification). This prevents account takeover attacks if someone attempts to register your phone number on another device.

• Watch Out for Phishing & Impersonation Scams: Scammers frequently use WhatsApp for "Hi Mum/Dad" impersonation frauds or malicious link sharing. Never share security PINs or verification codes with anyone, even if they claim to be from WhatsApp support or a family member in distress.

• Keep the App Updated: Cyber threats evolve constantly. Always update WhatsApp via the official Google Play Store or Apple App Store to ensure you have the latest security patches and privacy features.

By taking a couple of minutes to set up your username and security PIN today, you significantly reduce your risk of targeted spam, identity theft, and messaging scams.

Source: The Phone Guardian

Warning to Holidaymakers: The Booking.com WhatsApp Scam Targeting Travellers

Planning your next getaway? Be on high alert for a sophisticated scam currently targeting travellers who use Booking.com.

How the Scam Works

Fraudsters are exploiting security breaches at the individual hotel level to access legitimate reservation details. Because the scammers know your full name, booking dates, hotel location, and reference number, their communications can appear remarkably convincing.

Here is how the fraud typically unfolds:

• Direct WhatsApp Messages: Victims are contacted on WhatsApp by someone claiming to represent their booked accommodation.

• Artificial Urgency: You will be told there is an issue with your payment card details and warned that your reservation will be cancelled within 24 hours unless you re-verify them.

• Cloned Web Links: You are sent a link to a website designed to look identical to the official Booking.com payment portal, where your bank and card details are stolen.

• 2FA Code Theft: In some cases, scammers may even phone you directly, posing as customer support, and ask you to read out a two-factor authentication (2FA) text code to compromise your accounts.

How to Protect Yourself and Outsmart the Fraudsters

Many genuine hotels do use WhatsApp to communicate with guests, so you shouldn't ignore messages automatically—but you must verify them using these quick checks:

1. Check the Country Code: Verify that the sender’s phone number matches the country code of your holiday destination. A message regarding a hotel in Spain sent from a South American country code is a major red flag.

2. Inspect the Link: Look carefully at any web address provided. Phishing links often feature extra hyphens, misspellings, or random sequences of letters attached to the domain name.

3. Cross-Reference Details: Search the telephone number on the hotel’s official site to see if it matches their contact information.

4. Phone the Hotel Directly: If in any doubt, do not click the link or reply on WhatsApp. Call the hotel directly using the telephone number provided on your original confirmation email or official website.

5. Never Share Verification Codes: No legitimate company will ever phone you and ask you to read out a security or two-factor authentication code sent to your mobile phone.

Bottom line: Always pause before acting on urgent payment demands, double-check web addresses, and contact your accommodation directly through verified channels if something feels amiss. Safe travels! 

How to spot fake or fraudulent websites

Fraudsters can create fake websites that appear extremely convincing to the untrained eye. Recently, we've seen a rise in sites impersonating WhatsApp, encouraging users to download fraudulent apps or visit dangerous links via text, email and ads.

Here's what you need to know to stay safe, and nine expert-approved ways to spot whether a website is a scam or the real deal.

Source: Which? (30 Mar 2026)

How to spot a WhatsApp scam

Messages promoting a sham service called 'WhatsApp Gold' are recirculating. This scam claims to offer special features to users that can be unlocked by clicking a link – instead the link leads to malware being downloaded onto your device.

To help you stay protected, our experts have rounded up the most common scams you're likely to come across on WhatsApp, plus their tips on how to spot and report them. 

Source: Which? (10 Feb 2026) 

Cadbury's WhatsApp scam warning

A WhatsApp message offering a Cadbury hamper giveaway is recirculating in the run-up to Christmas. The message claims to offer a hamper of goodies and encourages you to complete a quiz, which is actually an attempt to steal your personal information.

The message might include your name and address, adding an air of credibility, but the link leads to a dodgy website. Find out what the message looks like so you can avoid this and similar WhatsApp scams.

Source: Which? (08 Dec 2025)

Meta earning billions from scam adverts

Meta users are exposed to 15 billion scam ads every day and Meta projected that 10% of its earnings in 2024, or $16bn, came from fraudulent ads for scams and banned goods, leaked documents show.

We examine why scams are so prevalent on Meta platforms, and reveal three recent fraud tactics used on Facebook, Instagram and WhatsApp.

Source: Which? (12 Nov 2025)

How to spot a WhatsApp scam

There are reports of a resurgence in WhatsApp scam messages, which contain dodgy links that lead to malware being downloaded onto your device.

To help you stay protected, our experts have rounded up the most common scams you're likely to come across on WhatsApp, plus their tips on how to spot and report them.

Source: Which? (15 Oct 2025)

Convincing Whatsapp delivery scams

Watch out for WhatsApp messages from compromised verified business accounts, telling you that your delivery has ‘failed’ with links to copycat Evri websites.

We've recently found four new examples. So find out what these delivery scams look like – and how to spot and avoid them.

How to spot a Whatsapp scam

 

Source: Which? (12 Aug 2025) 

Why you can’t trust that ‘Booking.com’ message

Booking.com users should remain on high alert for fake messages from fraudsters posing as their accommodation providers.

The slickest examples we've seen appear within the platform’s own messaging system, but scammers may contact you by email, text, telephone or a messaging platform like WhatsApp. 

Find out how to spot these very convincing scams.

Source: Which? (10 Jul 2025)

Latest scams doing the rounds

Stay in the know about recent scams that are targeting people across the UK.

The latest warnings to be aware of include a surge in Whatsapp scams, dodgy Facebook posts and a fake Screwfix email. Take a look at the full list based on your reports to our Which? Scam Action Alerts Facebook community and to our scam-sharer tool.

See the trending scams

 

Source: Which? (10 Apr 2025)

How to spot a WhatsApp scam

WhatsApp allows users to message friends and family all over the world for free, but these features are sometimes exploited by scammers. In fact, fraud on the app accounted for 21% of all reported scams in the UK in 2024 according to recent data analysed by Revolut.

If you haven't done so already, add an extra layer of security to your WhatsApp by setting up two-step verification. Check out our step-by-step instructions on how to do so, and take a look at the top six most common scams on the app.

What to watch out for

 

Source: Which? (01 Apr 2025)

WhatsApp delivery scam

Delivery scams are some of the most common and often most convincing scams, especially if you were expecting a parcel to arrive.

The latest example we've spotted begins with a WhatsApp message telling you that Evri has failed to deliver your parcel, with a link to reschedule your delivery that leads to a malicious website. Take a look at this example so you know what to do if you receive a similar scam message.

How to spot a delivery scam

Source: Which? (12 Feb 2025)

Ask Silver Scam Checker

Ask Silver is a simple tool that anyone with a smartphone can use to protect themselves from scams.

All you need to do is upload a screenshot of any text, email or website you’re suspicious about. Using the power of AI, Ask Silver will instantly check on the communication in question and indicate whether it’s safe or a ‘Red Flag’, also suggesting next steps to stay safe.

To use Ask Silver, start by signing up at www.ask-silver.com. It’s available inside WhatsApp, just like any of your other contacts that you can message. Once you sign up, you’ll receive a one-time email with a QR code to scan, which opens the WhatsApp chat. You then simply send through a screenshot of anything you want to check, and you can even report scams to the authorities with one tap at the end of the check.

If Ask Silver doesn’t automatically appear in your WhatsApp contact list, open WhatsApp, then press New chat > Options > Reload contacts.

 Source: https://www.getsafeonline.org/asksilver/