Scams and fraud can drain savings quickly and create long-term stress. This hub brings together the key UK guidance for spotting threats early, protecting vulnerable relatives, and taking the right reporting and recovery steps if money is lost.
Use this as the central page for the PocketWise scams and fraud cluster.
Where to start
Most readers should work through this route:
- learn the common scam playbooks and red flags
- understand APP fraud and payment-verification controls
- review specialist scam patterns like romance fraud
- put identity-theft protections in place
- build a protection plan for elderly relatives
- act fast using the correct reporting channels
Scams and fraud overview
| Topic | Main question | Start here |
|---|---|---|
| Core scam patterns | What are the most common UK scam types and warning signs? | Common Scams Guide |
| APP fraud | How do authorised push payment scams work, and can funds be recovered? | APP Fraud Explained |
| Romance scams | How can I spot and avoid emotionally manipulative fraud? | Romance Scams Guide UK |
| Protecting older relatives | How can families reduce scam risk for elderly relatives? | Protecting Elderly from Scams |
| Identity protection | How do I prevent identity theft and limit damage quickly? | Protecting Your Identity |
| Reporting and recovery | Who should I contact first when fraud happens? | How to Report Fraud |
Scam risk framework: before, during, after
Most people only think about fraud when something already went wrong. The more useful approach is to treat scams as a three-stage risk process.
| Stage | What to do | Why it matters |
|---|---|---|
| Before contact | Build verification habits, account controls, and family protocols | Reduces probability of first loss event |
| During contact | Slow down, verify independently, refuse pressure tactics | Interrupts social engineering at the decision point |
| After suspected fraud | Act quickly with bank, Action Fraud, and account lockdown | Improves recovery chance and limits secondary loss |
This framework helps because scammers rely on urgency and confusion. A fixed process beats memory in high-stress moments.
Common scam playbooks and trigger phrases
Different scam categories use different emotional triggers, but the language patterns are often similar.
| Scam type | Typical trigger phrase | Real risk |
|---|---|---|
| Bank impersonation | “Your account is under attack, move money now” | APP loss and account takeover |
| HMRC/police impersonation | “Immediate action required or legal consequences” | Forced transfer under intimidation |
| Romance scam | “I cannot access my money, I just need temporary help” | Repeated transfer losses over time |
| Invoice/supplier fraud | “Our bank details changed, please pay this account” | Business or household payment diversion |
| Purchase scam | “Limited stock, pay now to reserve” | Payment for non-existent goods |
| Investment fraud | “Guaranteed returns with low risk” | Large irreversible capital loss |
If a request combines urgency, secrecy, and a payment method that is hard to reverse, treat it as high-risk by default.
Household anti-fraud controls that work
Fraud prevention is strongest when controls are simple and repeatable.
Core controls
- use a 2-channel verification rule for payment changes: verify via a known phone number, not the incoming message
- enable transaction alerts on all primary accounts
- keep a separate spending account with limited float and no major savings balance
- lock down email and cloud accounts with strong passwords and app-based 2FA
- set internal transfer friction rules for large payments: wait period plus second-person review when possible
Family protocol controls
- set a family verification phrase for urgent “I need money now” messages
- agree that no one sends money on first contact
- keep a written contact list for banks and key providers to avoid search-engine phishing pages
These controls are boring by design. Boring controls are exactly what disrupt high-pressure scams.
APP fraud: practical payment verification checklist
Authorised push payment fraud is often a process failure, not a technical failure.
Before sending a high-risk transfer, run this checklist:
- Verify payee identity through an independent channel.
- Confirm account details from a known prior record, not a forwarded message.
- Use a small test payment where appropriate.
- Re-check payment purpose and timing pressure. Urgent same-day requests are high risk.
- Screenshot and store verification evidence in case reimbursement is needed.
| Payment context | Risk level | Extra control |
|---|---|---|
| New payee, urgent request | High | Mandatory phone verification and delay |
| Existing payee, unchanged details | Medium | Confirm invoice chain and reference |
| First property/legal transfer | High | Verify via known solicitor office number |
| Marketplace purchase | Medium to high | Buyer protection and trusted payment route |
Protecting older relatives without removing independence
Family protection plans work best when they are collaborative, not controlling.
| Approach | Better practice |
|---|---|
| Hard takeover of finances | Use gradual safeguards and shared review instead |
| One-off warning conversation | Build regular check-ins with examples |
| Generic “be careful” advice | Use clear scripts for calls, texts, and doorstep contact |
| Reactive support after loss | Pre-agree actions before a scam occurs |
Practical setup for families:
- review communication settings (call blocker, spam filters, known-contact lists)
- create a “pause rule” for unexpected payment requests
- maintain a visible fraud-action card near phone or computer with emergency contact sequence
- discuss common scam narratives monthly so patterns are familiar
Identity theft: first 24-hour containment plan
If identity compromise is suspected, speed matters more than perfection.
| Time window | Priority action |
|---|---|
| First hour | Change email and bank credentials, enable/verify 2FA |
| First 4 hours | Contact banks/cards, secure mobile account, review recent transactions |
| First day | Report fraud, check credit files, add protective alerts where appropriate |
| First week | Replace compromised documents/accounts and monitor new-account activity |
Use a single incident log with timestamps, contact names, and case references. This record is often essential for complaints and recovery.
Reporting path: who to contact first
Reporting order should match risk type.
| Situation | First contact | Second contact | Third contact |
|---|---|---|---|
| Money left your bank account | Your bank fraud team | Action Fraud | Credit reference agencies if identity risk |
| Account takeover attempt blocked | Bank security team | Provider support (email/mobile) | Action Fraud if persistent |
| Romance/investment/purchase scam | Bank (if paid) | Action Fraud | Platform or marketplace operator |
| Vulnerable-person targeting | Bank plus safeguarding support | Action Fraud | Local support network/family contacts |
The key rule: contacting Action Fraud does not replace urgent bank action when money movement is involved.
Recovery expectations and complaint routes
Recovery outcomes vary by scam type, payment method, and response speed.
| Factor | Usually improves outcome |
|---|---|
| Fast reporting | Better chance of freezing or tracing funds |
| Strong evidence trail | Improves complaint and reimbursement review |
| Clear verification attempts | Helps show reasonable care |
| Early account lockdown | Reduces follow-on fraud losses |
If you disagree with your bank outcome, use formal complaint channels and escalate where required. Keep written records from day one.
Core scams and fraud articles
- Common Scams Guide
- APP Fraud Explained
- Romance Scams Guide UK
- Protecting Elderly from Scams
- Protecting Your Identity
- How to Report Fraud
Cross-topic links
FAQ
What should I do first if I think I have been scammed?
Contact your bank immediately if money or account access is involved, then report to Action Fraud and secure related accounts and devices.
Can scams be prevented completely?
No system is perfect, but layered checks such as call-back verification, payment delays for unusual transfers, and account-monitoring alerts significantly reduce risk.
Which scam type causes the largest single losses?
Investment and impersonation-based APP scams frequently cause the largest one-off losses because payments are often high-value and difficult to reverse.
Should I report if no money was lost?
Yes. Reporting attempted scams still supports pattern detection and helps protect other households.
What is the most important prevention habit?
Independent verification before sending money is the single most effective habit, especially for new payees or changed account details.