Online Scams in the UK: HMRC, Royal Mail, and NHS Fraud
UK Finance reported authorised push payment (APP) fraud losses of £485 million in 2025, while Action Fraud received over 400,000 reports of fraud and cybercrime. Total fraud losses in the UK exceeded £2.3 billion. From HMRC tax rebate phishing to Royal Mail delivery scams and NHS impersonation, UK residents face targeted attacks that exploit the country's specific institutions and payment systems.
HMRC Tax Scams
HMRC impersonation is the most reported scam in the UK. Scammers send emails, texts, and make phone calls claiming you're owed a tax refund, you owe back taxes, or your National Insurance number has been compromised. The volume spikes during Self Assessment season (January-February) and after the end of the tax year in April.
"HMRC Tax Refund Notification: You are eligible for a tax refund of £384.50 for the 2024-25 tax year. To claim your refund, verify your identity and bank details at: [phishing link]. Ref: HMRC-2026-TX-839201." — A classic HMRC phishing text. HMRC never sends refund notifications via text or email with links.
HMRC will never email or text you about tax refunds. Refund claims are processed through your Personal Tax Account on GOV.UK. If you're unsure about a communication claiming to be from HMRC, forward suspicious emails to phishing@hmrc.gov.uk and texts to 60599.
Royal Mail and Delivery Scams
With the UK's massive online shopping volume, delivery scams are epidemic. "Royal Mail: Your parcel cannot be delivered. Pay a redelivery fee of £1.45" messages lead to phishing sites that collect full payment card details. The small amount makes victims less cautious, but the scammer captures the card for future fraud.
Think it might be a scam?
Paste it here for a free, instant verdict.
Free · No signup required · Cmd+Enter to scan
Similar scams impersonate DPD, Hermes/Evri, DHL, and Amazon. Royal Mail will never ask for payment via text to redeliver a parcel. Check delivery status directly at royalmail.com/track-your-item.
Banking and Authorised Push Payment (APP) Fraud
The UK's Faster Payments system, while convenient, has become a vector for fraud because transfers are instant and difficult to reverse. APP fraud — where victims are tricked into voluntarily sending money to scammers — is the UK's fastest-growing fraud category.
Common scenarios include fake bank fraud team calls ("We've detected suspicious activity — transfer your money to this safe account"), invoice redirection (where scammers intercept business email and change payment details), and purchase scams on social media marketplaces.
Under UK regulations introduced in 2024, banks must reimburse APP fraud victims in most cases. However, prevention is still critical. No bank will ever ask you to transfer money to a "safe account" — this is always a scam.
NHS Scams
Since the COVID-19 pandemic, NHS impersonation scams have remained prevalent. In 2026, scammers send messages about vaccination appointments, prescription charges, NHS app verification, and test results — all leading to phishing pages.
The NHS will never ask for payment card details via text or email. NHS services in England are free at the point of delivery. Any message requesting payment for NHS services is a scam.
Energy and Utility Scams
With energy prices remaining a concern, scammers impersonate British Gas, EDF, Octopus Energy, and other providers. "You're owed an energy rebate" messages, fake smart meter installation appointments, and bogus door-to-door "energy auditors" all target UK households.
Energy rebates are applied automatically through your provider. You should never need to click a link or provide bank details to receive one.
Council Tax and Local Authority Scams
Fake council tax rebate emails and texts have surged since the government introduced energy bill support through local councils. Scammers create fake council websites to harvest personal and banking information.
Council tax rebates are processed through your local council. If you receive a message about a rebate, go directly to your council's official website rather than clicking any links.
TV Licensing Scams
TV Licensing phishing remains common. "Your TV Licence payment has failed" emails direct victims to fake payment pages. TV Licensing contacts are easily verified at tvlicensing.co.uk.
How to Report Scams in the UK
- Action Fraud: actionfraud.police.uk or call 0300 123 2040
- Forward phishing emails: report@phishing.gov.uk
- Forward scam texts: 7726
- HMRC phishing: phishing@hmrc.gov.uk
- Financial Ombudsman: For disputes with banks about fraud reimbursement
- Citizens Advice: citizensadvice.org.uk
The UK has strong consumer protection laws and a growing framework for fraud reimbursement. But reporting is essential — it helps authorities identify trends and shut down operations.
Whenever you receive a suspicious text, email, or call claiming to be from HMRC, your bank, Royal Mail, or the NHS, check it with IsThisAScam before clicking any links or providing any information.
Got a suspicious HMRC, Royal Mail, or banking message? Check it instantly with IsThisAScam →