Banks (Barclays, HSBC, Lloyds, Santander and others) scam texts: how to spot and check them

Bank scam texts are the most dangerous category because the follow-through is immediate: a fake "did you make this payment?" alert, a "new payee added" warning, or a security check, each pushing you to a link or a phone number where the real attack happens.

Got one right now? Check it

Paste the message below and ONSIM AI will give you a verdict in seconds - the scam signals, any link domains checked at the registry, and the sender number checked against our database.

ONSIM AI text check

AI

This check analyses the message content, link domains and sender against known scam patterns. It is provided for information only and is not advice: see our terms and privacy policy. Personal details are removed before anything is stored.

What the scam looks like

Typical formats currently circulating (these are scams, not real messages):

Scam example

BARCLAYS: a new payee JAMES WILSON was added to your account. If this was NOT you, cancel immediately: barclays-security-check.com

Scam example

HSBC: did you attempt a payment of £320.00 to Argos? If NOT, visit: hsbc-fraud-review.com

Scam example

Santander alert: your account has been restricted due to unusual activity. Verify your identity: santander-verify-uk.com

The text is often only step one. Click the link or call the number and you reach a calm, professional "fraud team" that knows whatever you just typed. They will tell you your account is compromised and your money must be moved to a "safe account" - which is the scammer's account. This is authorised push payment fraud, and it takes some UK victims for life-changing sums. Sender-ID spoofing means the text can even appear in the same thread as genuine messages from your bank.

The tells

  • ✗Any link in a bank text. UK banks overwhelmingly direct you to their app, not to links.
  • ✗A phone number in the text. Call your bank only via the number on your card or 159, the industry anti-scam line.
  • ✗Anyone, ever, telling you to move money to a safe account. No bank does this. It is always fraud.
  • ✗Requests for your full PIN, password, or a one-time code.

What the real Banks does

Genuine fraud checks exist - banks do text "was this you?" messages - but they never contain links to enter details and never lead to moving your money. When in doubt: hang up, wait a few minutes, and call 159 or the number on your card. A real bank is never offended by verification.

If you get one

Do not click, reply or call any number in the message. Forward it for free to 7726 so your mobile network can block the campaign, then delete it. If a call or text claims to be your bank, hang up and dial 159 - the UK anti-fraud line that connects you to your real bank. If you have already entered card details, tell your bank immediately; if you have lost money, report it to Action Fraud. You can also check the sender's number to see what has been reported about it.

Banks (Barclays, HSBC, Lloyds, Santander and others) scam text questions

What is 159 and when should I use it?

159 is the UK anti-fraud phone service: dial it and you are connected to your own bank through a verified route. Use it whenever a call or text claims to be your bank and you feel any doubt. It exists precisely so you never have to trust a number contained in a message.

The text appeared in the same thread as real messages from my bank. How?

Sender-ID spoofing: the alphanumeric sender name on a text can be forged, and phones group messages by that name. Appearing in the genuine thread is therefore no proof at all - judge every message by what it asks you to do, not where it appears.

I moved money after a call from my "bank". Can I get it back?

Contact your real bank immediately - via 159 or the number on your card - and report the fraud. UK reimbursement rules for authorised push payment fraud mean many victims are refunded, and speed improves both recovery and reimbursement. Report to Action Fraud as well, and do not be embarrassed: these operations are professional and take in careful people every day.

Other scam texts going around

Royal Mail Evri DPD DVLA HMRC PayPal Amazon Hi Mum / Hi Dad O2 EE Three Vodafone Netflix Apple Wrong number / friendly stranger