The criminals targeting Britain's bank accounts no longer need a mask. They sit at keyboards, often offshore, running operations that have evolved from opportunistic theft into a multi-billion-pound shadow industry. Banks log millions of suspicious transactions a day, and the techniques on display are increasingly psychological rather than technical, designed to exploit trust rather than defeat security software.
Lenders, including Barclays and HSBC, say five categories of fraud account for the bulk of consumer losses. All share a common thread: the victim authorises the payment.
Purchase scams
The most common fraud by volume involves goods that never arrive. Sellers post heavily discounted listings on Facebook Marketplace, Gumtree and eBay, advertising concert tickets, designer items, second-hand cars or last-minute holidays at prices well below market. The seller invents a reason that payment cannot run through a protected channel, requesting a direct bank transfer instead. Once the funds clear, the listing disappears.
Impersonation scams
A caller, text, or email purports to be from a bank, HMRC, the police, or a high-profile retailer. The pretext is urgent: a compromised account, an unpaid tax bill, a suspicious transaction. The fraudster then instructs the victim to move money into a so-called safe account. Real banks and police forces do not operate this way, and neither will request a PIN, password or one-time passcode.
Investment scams
By volume, investment fraud sits below purchase scams. By loss per victim, it tops the table. Targets receive unsolicited approaches offering guaranteed returns, typically tied to cryptocurrency, property bonds or pre-IPO equity. Operators clone the websites of regulated firms and build convincing dashboards on which paper profits accumulate. The illusion holds until the customer requests a withdrawal.
Advance fee scams
The victim pays first for something that does not exist. A recruiter demands a fee for a background check tied to a fictitious job. A fraudulent lender requests an insurance premium before releasing a loan. A notification announces a lottery win contingent on an administrative charge. The pattern is the same: money out, nothing back.
Pension scams
The most damaging frauds target retirement savings. Approaches come via cold call, text or social media, offering free pension reviews or, more dangerously, promising access to a pension before the legal minimum age of 55. Victims are persuaded to transfer accumulated funds into unregulated schemes, which are then misappropriated or routed into collapsing, high-risk assets. The damage compounds when HMRC issues an unauthorised payment charge, which can reach 55 per cent of the withdrawal.
How to protect yourself
The defences are simple, but they require pausing at the moment a transfer feels urgent.
Verify through a channel you control. If a message claims to come from your bank, hang up and call 159, the cross-industry hotline that routes directly to your provider. Treat phone numbers, links, and email addresses provided in the suspicious message as untrustworthy.
Pay through protected rails. Credit cards and regulated processors offer chargeback rights. Direct bank transfers to strangers do not.
Check the regulator. Before committing capital to any investment, search the firm against the Financial Conduct Authority's warning list and its register of authorised firms.
Resist urgency. Fraudsters manufacture time pressure precisely because deliberation defeats them. A legitimate counterparty will accept a delay while you verify.
Refuse upfront fees. Regulated lenders, established employers, and genuine prize agencies do not collect money from consumer accounts before delivering a service.
Mandatory reimbursement rules introduced by the Payment Systems Regulator in October 2024 have shifted part of the cost back onto banks. Recovery, however, remains uneven, and the most reliable defence still sits with the customer at the screen.
Members Discussion