Before you click anything
"Your account will be closed today", "unusual sign-in", "your parcel is held": pressure is the most common sign of a scam.
Look at the full email address or phone number, not just the name. Watch for small misspellings and odd domains.
On a computer, hover over the link. On a phone, press and hold it. If the address doesn't belong to the company, don't open it.
Real banks and companies don't ask for your password or a one-time code by message or phone call.
Don't open attachments you weren't expecting, and treat QR codes in emails and letters like links.
Prizes, refunds, crypto returns, and jobs that pay well for very little work.
If you're not sure
Use their app or type their web address yourself, or call the number on your card or bill, never the one in the message.
If you already clicked
Our guide "Report a scam" shows where to send it.
Your ticks are kept on this device. Sign in and they are kept on your account too, on every device. Sign in
Last checked 2 November 2026 · Something wrong?