According to UK Finance's annual fraud report, fraud cost UK consumers and businesses over £1.1 billion in 2024, with authorised push payment (APP) fraud, where victims are tricked into sending money themselves, accounting for over £450 million. Rules introduced on 7 October 2024 now require banks to reimburse most APP fraud victims, but prevention is still better than cure. Understanding how the most common scams work is the most powerful protection you have.
The Most Common Financial Scams in the UK
APP (Authorised Push Payment) fraud is now the UK's biggest fraud type — where criminals convince victims to voluntarily transfer money. The main variants are: purchase scams (fake online sellers who take payment but send nothing), romance scams (fake online relationships that progress to requests for money), investment scams (promises of high returns from fake investment platforms), impersonation scams (criminals posing as banks, HMRC, police, or couriers), and invoice fraud (intercepting legitimate invoices and changing payment details). Investment and romance scams tend to involve the largest individual losses, because victims are often drawn in over weeks or months.
- APP fraud: over £450m lost in 2024 (UK Finance)
- Investment scams: often the largest individual losses
- Impersonation fraud: banks, HMRC, police, courier companies
- Romance scams: fake online relationships progressing to money requests
- Invoice fraud: criminals intercepting legitimate payment communications
Investment Scam Warning Signs
Investment scams are particularly dangerous because they target financially literate people seeking genuine returns. Warning signs include: unsolicited contact (cold calls, social media DMs, WhatsApp messages) about investments; promises of guaranteed high returns (no legitimate investment guarantees returns); pressure to act quickly or keep the investment secret; requests to transfer money to overseas accounts or cryptocurrency wallets; platforms not registered with the FCA; and 'clone firm' scams where fraudsters impersonate legitimate FCA-regulated companies. Always check the FCA register (register.fca.org.uk) before investing. If it's not there, or if it's a clone of a real firm, don't invest.
- Check FCA register: register.fca.org.uk — every legitimate investment firm is listed
- Guaranteed returns: a red flag — no legitimate investment guarantees this
- Pressure tactics: 'this offer ends today' or 'keep this secret'
- Requests for cryptocurrency or overseas bank transfers: major red flag
- Clone firms: verify phone numbers and email domains independently
Your Rights When You're a Scam Victim
From 7 October 2024, the Payment Systems Regulator introduced mandatory reimbursement rules for APP fraud made by Faster Payments or CHAPS. Banks are now required to reimburse most APP fraud victims who weren't found to have been grossly negligent, up to £85,000 per claim. Both the sending and receiving bank share responsibility for the loss. Report fraud to your bank immediately — the quicker you act, the higher the chance of recovery (money can sometimes be frozen before it is moved on). You can call 159 to be put through to your bank's fraud team. Also report to: Report Fraud, which replaced Action Fraud in England, Wales and Northern Ireland in December 2025 (reportfraud.police.uk or 0300 123 2040; in Scotland call Police Scotland on 101), the FCA (Financial Conduct Authority) for investment fraud, and HMRC for tax scams. Keep all evidence — screenshots, emails, transaction records.
- Mandatory bank reimbursement for APP fraud (from 7 Oct 2024): up to £85,000
- Report to your bank immediately (call 159) — speed increases recovery chances
- Report to Report Fraud: 0300 123 2040 or reportfraud.police.uk (Police Scotland 101 in Scotland)
- FCA report: for investment or financial services fraud
- Keep all evidence: screenshots, emails, call logs, bank transfers
How to Protect Yourself
The most effective personal protections: use Confirmation of Payee (CoP) — when making bank transfers, this verifies the account name matches the sort code and account number; never transfer money based on a phone call alone, even if the caller seems convincing — hang up and call back on a verified number; agree a family code word so you can check whether an urgent message from a relative is genuine; use strong, unique passwords and two-factor authentication (2FA) on all financial accounts; never share one-time passcodes or passwords (banks will never ask for these); and pay by credit card for online purchases from sellers you do not know, as Section 75 and chargeback give extra protection that a bank transfer does not.
- Use Confirmation of Payee for all bank transfers
- Never transfer money based solely on a phone call
- Agree a family code word for urgent requests for money
- Two-factor authentication on all financial accounts — especially email
- Never share one-time passcodes or full passwords with anyone
- Pay by credit card rather than bank transfer when buying from unknown sellers
Frequently Asked Questions
HMRC called me about a tax debt — is it real?
My bank says they won't reimburse me — what can I do?
A friend asked me to receive money in my account and forward it on — is this OK?
Is cryptocurrency investment always a scam?
- financial scams uk
- bank fraud uk
- app fraud
- protect savings from scams