What is Identity Fraud?

Identity fraud refers to scammers impersonating people you trust. They may impersonate your bank, police, HM Revenue and Customs (HMRC), your GP clinic, courier services like Royal Mail or DPD, or even your phone or broadband service provider.

These scams typically begin with telemarketing, SMS, or phishing emails. For example, you might receive a phishing email from Royal Mail or a fraudulent SMS from your bank claiming suspicious activity. The scammers may already know your name, phone number, or email address (often due to data breaches), making their tactics more convincing.

The methods vary depending on the type. They may:

Impersonate bank employees, asking you to transfer money to a "safe account" (sometimes via fraudulent SMS from Santander Bank);

They may claim you owe HMRC taxes, such as HMRC fraud or HMRC phone scams.

They may ask you to pay a small shipping fee to release a package, which is common in fraudulent courier SMS messages impersonating Royal Mail or DPD.

Once they've gained your trust, their goal remains the same: to steal your money or personal information.

How to Identify Identity Fraud

Scammers are sophisticated, but there are some warning signs to watch out for:

Strangers contacting you claiming an emergency: Be wary of anyone who suddenly calls, emails, or texts you, especially those urging you to act quickly. Reputable organizations won't pressure you into making immediate decisions. For example, scammers impersonating police officers or fraudulent calls from the police often pressure you to transfer money.

Spelling and grammar errors: Fraudulent emails often contain errors or poor wording. Professional organizations are unlikely to send poorly written emails.

Requests for money or personal information: No reputable company will ask for your PIN, password, or complete banking information via email, text message, or unsolicited call. Be wary of fraudulent text messages and calls asking for security information.

Remote access requests: Scammers may ask you to install software to "fix" problems. This allows them to control your device and potentially access sensitive information. Never grant remote access if you are unsure of the other party's identity.

Requesting payment in cryptocurrency: Reputable companies will not request payment in cryptocurrency. This is a common tactic used by scammers to evade detection.

Common Types of Identity Fraud

Bank Fraud

Scammers may claim there is suspicious activity on your account and ask you to transfer funds to a "safe account." This is a lie—this "safe account" actually belongs to the scammers. Many victims have reported receiving fraudulent text messages impersonating reputable banks such as Santander, Barclays, and Revolut.

Police Fraud

Scammers may impersonate police officers, warning you that your bank branch is under investigation and suggesting you transfer money. These scam or police calls are common and easy to fall for. The police will never ask you to transfer money.

HMRC (Her Majesty's Revenue and Customs) Fraud

This is one of the most common scams. Victims are tricked into believing they owe taxes and need to transfer money immediately, or that they are about to receive a tax refund and need to provide payment details. Never reply without verifying directly with HMRC.

Courier Scams

You might receive a message asking you to pay a small fee for package delivery. Scammers often impersonate Royal Mail or DPD in these fraudulent text messages or phishing emails. Once you pay, they typically use your bank card information to steal hundreds or even thousands of pounds.

Service Provider Fraud

Scammers impersonate your internet or telephone service provider, claiming to be experiencing technical problems. They may request remote access to your device to steal data, install malware, and access your banking apps and passwords.