financial-safety

UK Financial Fraud and Scams 2026: How to Protect Your Money

SYM

Financial fraud cost UK consumers over £1.1 billion in 2024, with authorised push payment (APP) fraud — where victims are tricked into sending money themselves — accounting for £459 million alone. New rules introduced in October 2023 now require banks to reimburse most APP fraud victims, but prevention is still better than cure. Understanding how the most common scams work is the most powerful protection you have.

The Most Common Financial Scams in the UK

APP (Authorised Push Payment) fraud is now the UK's biggest fraud type — where criminals convince victims to voluntarily transfer money. The main variants are: purchase scams (fake online sellers who take payment but send nothing), romance scams (fake online relationships that progress to requests for money), investment scams (promises of high returns from fake investment platforms), impersonation scams (criminals posing as banks, HMRC, police, or couriers), and invoice fraud (intercepting legitimate invoices and changing payment details). The Investment Fraud Action Centre reports that the average investment scam victim loses £28,000 — far higher than most other fraud types.
  • •APP fraud: £459m lost in 2024 alone
  • •Investment scams: average loss £28,000
  • •Impersonation fraud: banks, HMRC, police, courier companies
  • •Romance scams: fake online relationships progressing to money requests
  • •Invoice fraud: criminals intercepting legitimate payment communications

Investment Scam Warning Signs

Investment scams are particularly dangerous because they target financially literate people seeking genuine returns. Warning signs include: unsolicited contact (cold calls, social media DMs, WhatsApp messages) about investments; promises of guaranteed high returns (no legitimate investment guarantees returns); pressure to act quickly or keep the investment secret; requests to transfer money to overseas accounts or cryptocurrency wallets; platforms not registered with the FCA; and 'clone firm' scams where fraudsters impersonate legitimate FCA-regulated companies. Always check the FCA register (register.fca.org.uk) before investing. If it's not there, or if it's a clone of a real firm, don't invest.
  • •Check FCA register: register.fca.org.uk — every legitimate investment firm is listed
  • •Guaranteed returns: a red flag — no legitimate investment guarantees this
  • •Pressure tactics: 'this offer ends today' or 'keep this secret'
  • •Requests for cryptocurrency or overseas bank transfers: major red flag
  • •Clone firms: verify phone numbers and email domains independently

Your Rights When You're a Scam Victim

From October 2023, the Payment Systems Regulator introduced mandatory reimbursement rules for APP fraud. Banks are now required to reimburse most APP fraud victims who weren't found to have been grossly negligent, up to £85,000 per claim. Both the sending and receiving bank share responsibility for the loss. Report fraud to your bank immediately — the quicker you act, the higher the chance of recovery (some frauds can be reversed if reported within 24 hours). Also report to: Action Fraud (actionfraud.police.uk or 0300 123 2040), the FCA (Financial Conduct Authority) for investment fraud, and HMRC for tax scams. Keep all evidence — screenshots, emails, transaction records.
  • •Mandatory bank reimbursement for APP fraud (from Oct 2023): up to £85,000
  • •Report to your bank immediately — speed increases recovery chances
  • •Report to Action Fraud: 0300 123 2040 or actionfraud.police.uk
  • •FCA report: for investment or financial services fraud
  • •Keep all evidence: screenshots, emails, call logs, bank transfers

How to Protect Yourself

The most effective personal protections: use Confirmation of Payee (CoP) — when making bank transfers, this verifies the account name matches the sort code and account number; never transfer money based on a phone call alone, even if the caller seems convincing — hang up and call back on a verified number; set up a dedicated password with your bank that callers must use to prove their identity; use strong, unique passwords and two-factor authentication (2FA) on all financial accounts; never share one-time passcodes or passwords (banks will never ask for these); and use the CHAPS payment system (via your bank) rather than Faster Payments for large one-time transfers to businesses you don't know well — it has more protection.
  • •Use Confirmation of Payee for all bank transfers
  • •Never transfer money based solely on a phone call
  • •Set up a bank password that staff must use to authenticate to you
  • •Two-factor authentication on all financial accounts — especially email
  • •Never share one-time passcodes or full passwords with anyone

Frequently Asked Questions

HMRC called me about a tax debt — is it real?+

HMRC never calls unexpectedly about arrest warrants or demands immediate payment over the phone. Hang up and verify any communication via the official GOV.UK contact details.

My bank says they won't reimburse me — what can I do?+

Escalate through your bank's complaints process, then take the case to the Financial Ombudsman Service (FOS) if unresolved. The FOS can compel reimbursement in cases that meet the criteria.

A friend asked me to receive money in my account and forward it on — is this OK?+

Never do this — it's likely money mule activity, which is a criminal offence. You could be prosecuted even if you didn't know the money was fraudulent.

Is cryptocurrency investment always a scam?+

Not always, but unregulated crypto investment platforms advertised on social media are disproportionately fraudulent. Only use FCA-registered platforms and understand the risks before investing.

#financial scams uk#bank fraud uk#app fraud#protect savings from scams

Start Your Savings Journey Today

20+ savings challenges, daily tracking, and achievement badges -- all free.

Download on the App Store