The rise of ‘bank spoofing’ and how to avoid it

Fraud is on the rise. In the past year, as many as one in seven people have lost money due to fraud.

A recent survey by financial insights company TransUnion, found that half of respondents had experienced a fraud attempt in the past three months.

How much do people lose?

On average, victims lose around £1,400 per scam. Unfortunately, only 18% of those affected manage to recover all their money.

What is bank spoofing?

Bank spoofing — also called vishing or remote bank fraud — is a growing type of scam.

Scammers pretend to be your bank to trick you into sharing your banking details.

Examples of bank spoofing scams:

• Someone calls claiming to be from your bank, saying your account has been compromised and asks you to transfer money to a ‘safe account’.
• You get an email with a link that looks like your bank’s login page, asking you to update your details.
• A text message appears to be from your bank, warning of suspicious activity and asking you to call a phone number.

How to spot bank spoofing 

It can be tricky, but watch out for:

Suspicious sender or caller information

• Emails with addresses similar to your bank’s but with small spelling errors.
• Calls or texts showing your bank’s name or number, but these can be faked.

Urgent or threatening language

• Messages saying your account is ‘suspended’, ‘compromised’, or needing ‘immediate action’.
• Scare tactics trying to rush you.

Unusual requests

• Asking for sensitive info like PINs, credit card numbers or passwords.
• Remember: real banks never ask for this information by email or unsolicited calls.

Links to fake websites

• Links that look real but lead to fake sites.
• Hover over links to check the real web address.
• Watch for small typos in the website domain.
• Look for HTTPS and a padlock icon — but remember, even these can be faked.

Generic greetings and poor grammar

• Emails that say ‘dear customer’ instead of your name.
• Spelling and grammar mistakes.

How to protect yourself

• Don’t click on suspicious links or download attachments.
• Always type your bank’s website address directly into your browser.
• Call your bank using its official number — never use numbers from unexpected messages.
• If you get an unsolicited call and feel unsure, hang up and call your bank to check.
• Enable two-factor authentication (2FA) on your banking accounts for extra security.

How to report bank spoofing

• Report the incident to Action Fraud on 0300 123 2040.
• Contact the police.
• Inform your bank immediately if you believe your account has been compromised. 
• Report suspicious websites to the National Cyber Security Centre (NCSC). 
• Citizens Advice can provide information on whether you can get your money back after a scam. 

Stay alert and protect yourself, scammers are always finding new tricks. If you’re ever unsure, check directly with your bank before taking any action.