Scams in 2026: the current tricks and how to get your money back
Fake parcel texts, bank impersonation, QR code fraud and investment ads, plus the £85,000 reimbursement rule and the 159 number
Scams have moved from clumsy emails to polished texts, cloned bank phone lines and adverts that look like the real thing. This guide covers the patterns doing the rounds in 2026, the protections you have if money leaves your account, and exactly who to contact when it happens.
The patterns to recognise
- Fake parcel texts. A message says a delivery could not be made and asks for a small fee. The link leads to a copy of a courier site that harvests card details. Real couriers do not ask for money by text.
- Bank impersonation. A caller says your account is compromised and you must move money to a new safe account. They may already know your name and part of your card number, and the caller display can be spoofed to show the bank's real number. No bank will ever ask you to move money.
- Investment adverts. Social media ads promising steady returns, sometimes using a famous face or a well-known firm's logo. The site is fake or clones a real company. The FCA warning list at fca.org.uk lists known clones.
- QR codes. Stickers placed over real codes on parking meters, menus and posters. Scanning takes you to a payment page that steals card details or signs you up to a subscription. Check the code is printed, not stuck on, and look at the web address before paying.
- Purchase scams. Cars, concert tickets and puppies advertised at below-market prices with pressure to pay by bank transfer. Bank transfer is the payment method with the fewest protections.
The reimbursement rule
Since October 2024, banks and payment firms must refund victims of authorised push payment fraud, where you were tricked into sending the money yourself. The main terms:
| Rule | Detail |
|---|---|
| Maximum | £85,000 per claim |
| Timescale | Within 5 working days of the claim, unless the bank needs more time to investigate |
| Excess | The bank may deduct up to £100, though not from vulnerable customers |
| Time limit | Claim within 13 months of the final payment |
| Exception | Gross negligence, or the customer was part of the fraud |
Gross negligence is a high bar. Ignoring a specific written warning from your bank about that exact payment might count. Being convinced by a convincing fraudster does not.
The rule covers payments in pounds between UK accounts. It does not cover card payments, cash, international transfers or payments where you got what you paid for but later regretted it.
Card payments have their own routes: chargeback, and Section 75 for credit card purchases over £100.
What to do in the first hour
- Stop. Do not send any further payment, even to "recover" money.
- Call 159. This routes you to your bank's fraud team without needing to find the number. It works for most major banks.
- Say clearly that you have been the victim of a scam and want the payment recalled. Banks can sometimes freeze funds if told quickly.
- Change passwords on any account you used during the scam.
- Report it. In England, Wales and Northern Ireland use Action Fraud. In Scotland call Police Scotland on 101.
Reporting the attempt
Reports help stop the next person even if you lost nothing.
- Forward scam texts to 7726, free on all networks.
- Forward suspicious emails to report@phishing.gov.uk.
- Report fake adverts to the platform they appeared on and to the FCA if they involve investments.
- Report scam calls to your phone provider.
Watch out for
- Recovery scams. After a loss, someone calls offering to get your money back for a fee. It is the same gang.
- Pressure. Every scam relies on urgency. Hang up, wait ten minutes, and call the organisation back on a number from its website.
- Family members. Older relatives are targeted with bank impersonation and younger ones with purchase and investment scams. Talk about it before it happens.
- Claims firms. Reimbursement is free to claim from your bank. Do not pay anyone to do it for you.
Information only, not personal advice.