ScamLens
Guides 18 min read

The Complete UK Anti-Scam Handbook: Every Step from Identifying Fraud to Recovering Your Money

Covers every official UK anti-fraud channel (Action Fraud, Police Scotland, NCSC, FCA, Trading Standards, Citizens Advice, HMRC), with detailed guidance on the APP reimbursement rules, Section 75 credit card protection, cryptocurrency tracing, and how to get scam websites taken down. Includes an evidence collection checklist and mental health support resources.

The United Kingdom is one of the countries hardest hit by online fraud in the world. In 2025, total fraud losses in the UK exceeded £2.3 billion, with over 11,000 scam incidents reported every day. If you have fallen victim to an online scam in the UK, or suspect you are being targeted, this handbook will guide you through every step from identifying the fraud to recovering your funds.

1. The State of Online Fraud in the UK (2026)

Key Statistics

The UK has the highest fraud losses in Europe. Here are the latest key figures:

Metric Data
Annual fraud losses Over £2.3 billion
Daily reported cases Approximately 11,000
APP fraud losses Over £580 million
Average investment scam loss Approximately £14,000 per case
Average romance scam loss Approximately £8,000 per case
Fraud reporting rate Only about 13% of victims report to police

Most Common Scam Types in the UK

1. Authorised Push Payment (APP) Fraud — The UK's Biggest Scam Problem

APP fraud occurs when victims are tricked into voluntarily transferring money into accounts controlled by criminals. This is a particularly severe problem in the UK, accounting for the largest share of all financial fraud losses. Common forms include:

  • Impersonating banks/police: Scammers claim to be from your bank or the police, stating your account has been compromised and asking you to transfer funds to a "safe account."
  • Impersonating solicitors/estate agents: During property transactions, scammers impersonate solicitors and send fake bank transfer details to steal house purchase funds.
  • Invoice fraud: Scammers impersonate suppliers and send fake invoices with altered payment account details.

2. Investment Scams

With the UK's well-developed financial markets, investment scams are particularly rampant:

  • Fake cryptocurrency trading platforms (most common)
  • Celebrity-endorsed fake investment adverts (frequently appearing on social media)
  • Forex/binary options scams
  • Clone firms: Scammers clone the names and registration numbers of FCA-registered companies
  • High-return bonds/property investment scams

3. Romance Scams

Criminals build romantic relationships through dating apps (Tinder, Bumble, Hinge) or social media, then request money transfers for various reasons:

  • Claiming illness and needing medical expenses
  • Claiming to be stranded abroad and needing travel money
  • Suggesting investment opportunities to "make money together" (the UK variant of pig butchering scams)

4. Shopping Scams

  • Fake e-commerce websites (mimicking well-known brands like John Lewis, Argos)
  • Social media advertising scams (fake products on Facebook/Instagram)
  • Second-hand marketplace scams (Facebook Marketplace, Gumtree)
  • Ticket scams (concert tickets, football match tickets)

5. Other High-Frequency Types

  • HMRC impersonation scams: Claiming you owe tax or are due a refund, requesting bank details.
  • Delivery scams: Impersonating Royal Mail, DPD, or Hermes, claiming there's a problem with a parcel.
  • Energy bill scams: Impersonating Ofgem or energy suppliers offering fake refunds.
  • NHS scams: Sending fake appointment or fee notifications impersonating the NHS.

2. How to Use ScamLens to Determine If You're Being Scammed

Before taking any action, you first need to confirm whether you are actually dealing with a scam. ScamLens provides several tools to help you make a quick assessment.

1. Domain Safety Check

Visit ScamLens Domain Check and enter the URL of the suspicious website:

  1. Enter the full web address in the search box (e.g., suspicious-investment.co.uk).
  2. ScamLens will query over 90 threat intelligence sources within seconds.
  3. A Trust Score is generated for the website, ranging from 0–100:
    • 0–30: High risk — very likely a scam website
    • 31–50: Suspicious — proceed with caution
    • 51–70: Noteworthy — some risk signals detected
    • 71–100: Relatively safe

2. AI Risk Analysis

Every scan report includes an AI-generated risk summary that will:

  • Analyse the website's registration date, hosting location, and SSL certificate status
  • Identify whether the website is impersonating a well-known brand (such as fake Barclays, HSBC, or other UK banks)
  • Check whether the website appears in known scam databases
  • Provide an overall assessment and recommendations

3. Community Reviews

ScamLens has an active user community:

  • View other users' reviews and reports about the website
  • Read shared experiences from other victims
  • Learn about the scam tactics associated with the website

4. Cryptocurrency Address Check

If cryptocurrency is involved, use ScamLens Cryptocurrency Check:

  • Enter the wallet address provided by the other party
  • Check whether the address is linked to known scams
  • View the address's transaction history and risk labels

3. Search and Report Suspicious Websites on ScamLens

Searching for Suspicious Websites

  1. Visit ScamLens.
  2. Enter the suspicious domain name or cryptocurrency address in the homepage search box.
  3. View the scan report, including trust score, threat intelligence hits, AI analysis, and community reviews.
  4. If other users have already filed reports, you can see the website's "scam vote" status.

Reporting Suspicious Websites

If you have confirmed or suspect a website is a scam:

  1. On the website's ScamLens report page, click the "Report as Scam" button.
  2. Select the scam type (investment scam, phishing site, fake shop, etc.).
  3. Describe your experience (briefly explain how you were scammed or what raised your suspicion).
  4. Submit the report.

Your report will help ScamLens's community and AI system identify scam websites more accurately, protecting other users.

4. Evidence Collection Checklist

Before reporting to the police or other agencies, collect as much evidence as possible. Do not delete any communication records, even if you think they are irrelevant.

Essential Evidence to Collect

Category Specific Items How to Save
Communication records All emails, texts, WhatsApp/Telegram messages with the scammer Full screenshots (including timestamps and the other party's account)
Transaction records Bank transfer records, credit card statements, PayPal transactions Banking app screenshots + PDF statements
Website information Full URL of the scam website, webpage screenshots, site claims Browser screenshots (including address bar)
Scammer details Scammer's name/alias, phone number, email address, bank account, cryptocurrency address Written notes + screenshots
Advertisement screenshots How you originally found the scam (social media advert, search result, email) Screenshots
Account information Your registration details on the scam platform, login page Screenshots
Phone records Call logs with the scammer (time, duration) Mobile call history screenshots
Physical evidence Fake contracts, letters, parcels received Photos

Evidence Preservation Principles

  • Take complete screenshots: Include dates, times, sender information, and full conversation context.
  • Back up in multiple locations: Local computer + cloud storage (Google Drive/iCloud) + USB drive.
  • Do not modify: Do not crop, edit, or annotate original evidence.
  • Timeline: Organise all evidence chronologically and create a brief incident timeline.
  • ScamLens report: Scan the scam website on ScamLens and use the generated report PDF as supplementary evidence.

5. Reporting Channels (UK)

The UK's anti-fraud system is spread across multiple agencies. Different types of scams should be reported to different channels. Here is the complete guide.

1. Action Fraud — The Primary Reporting Channel

Coverage: England, Wales, Northern Ireland

Contact details:

  • Website: actionfraud.police.uk
  • Phone: 0300 123 2040 (Monday–Friday, 8:00–20:00)
  • Online reporting: Available 24/7

Steps:

  1. Visit actionfraud.police.uk and click "Report fraud."
  2. Create an account or report as a guest.
  3. Select "I am a victim" or "I want to report something suspicious."
  4. Follow the prompts to provide the scam type, what happened, and the amount lost.
  5. Upload the evidence you have collected.
  6. After submission, you will receive a Crime Reference Number — make sure to save it.
  7. Your report will be forwarded to the National Fraud Intelligence Bureau (NFIB) for analysis. If the case meets investigation criteria, it will be assigned to the local police force.

Important notes:

  • Action Fraud is a reporting centre, not an investigation body. It collects information, and the NFIB decides whether to launch an investigation.
  • Not all reports will be investigated, but every report enters the national fraud intelligence database, used to identify scam patterns and criminal networks.
  • If you are in immediate danger (e.g., the scammer is threatening you), call 999 directly.

2. Police Scotland — Scotland

Coverage: Scotland

Contact details:

Steps:

  1. Call 101 and tell the operator you want to report a fraud case.
  2. The operator will record your details and what happened.
  3. You will receive a Crime Reference Number.
  4. Depending on the nature of the case, you may need to visit a local police station to make a formal statement.

Important notes:

  • Scotland does not use the Action Fraud system; all fraud cases are reported directly through Police Scotland.
  • Wait times on 101 may be long, but please be patient.
  • If a scam is in progress (e.g., you are on the phone with the scammer or being coerced into making a transfer), call 999.

3. National Cyber Security Centre (NCSC) — Phishing Reports

Scope: Suspicious emails, text messages, websites

Contact details:

Steps:

Reporting suspicious emails:

  1. Do not click any links in the email.
  2. Forward the entire suspicious email to [email protected].
  3. The NCSC's automated system will analyse the email. If confirmed as a scam, action will be taken to block the associated websites.

Reporting suspicious texts:

  1. Long-press the suspicious text and select "Forward."
  2. Send it to 7726 (spells "SPAM").
  3. Your network provider will ask you to provide the sender's number.
  4. The provider will investigate and may block the number.

Reporting suspicious websites:

  1. Visit the NCSC website's reporting page.
  2. Enter the full URL of the suspicious website.
  3. The NCSC will assess it and may add the website to its blocklist.

4. Financial Conduct Authority (FCA) — Investment Scams

Scope: Investment scams, unauthorised financial services, clone firms

Contact details:

Steps:

  1. First, use the FCA's ScamSmart tool to check:
    • Enter the company name or individual's name.
    • Check whether the firm is registered with the FCA.
    • Check the FCA's Warning List for the company.
  2. Submit a report on the FCA website:
    • Provide the scam company's details, contact information, and your experience.
    • Upload relevant evidence.
  3. The FCA will investigate and may add the company to its warning list or take enforcement action.

Important notes:

  • The FCA does not handle individual compensation, but its investigations help stop scammers from continuing to operate.
  • If the firm claims to be FCA-registered, always verify on the FCA Register (scammers frequently use clone firms).
  • Cryptocurrency investment scams should also be reported to the FCA.

5. Trading Standards — Consumer Rights

Scope: Shopping scams, counterfeit goods, misleading advertising, unfair trading practices

Contact details:

Steps:

  1. Contact Citizens Advice Consumer Service (0808 223 1133).
  2. They will record your complaint and assess whether it falls under Trading Standards' jurisdiction.
  3. If so, they will refer the case to your local Trading Standards office.
  4. Trading Standards may investigate the business and take enforcement action.

6. Citizens Advice — General Guidance

Scope: All types of scam enquiries, rights guidance, next-step advice

Contact details:

  • Phone: 0800 144 8848 (freephone, Monday–Friday, 9:00–17:00)
  • Website: www.citizensadvice.org.uk
  • Online chat: Available via the website

Steps:

  1. Call 0800 144 8848 or visit the website.
  2. Describe your situation to an adviser.
  3. The adviser will tell you which agency to report to, how to recover funds, and what your legal rights are.
  4. If needed, they will help refer you to the appropriate organisation.

Important notes:

  • Citizens Advice is an excellent "first step" — if you are unsure whom to contact, start here.
  • They can also help you draft complaint letters and manage disputes with your bank.

7. HMRC Scam Reporting — Tax Authority Impersonation

Scope: Calls, emails, and texts impersonating HMRC

Contact details:

Steps:

  1. Received a suspicious email: Do not click any links. Forward the email to [email protected], then delete it.
  2. Received a suspicious text: Forward it to 60599, then delete the text.
  3. Received a suspicious call: Note the caller's number. Do not provide any personal information. Hang up and report it on GOV.UK.
  4. If you have already suffered financial loss from an HMRC scam, also report it to Action Fraud.

How to identify HMRC scams:

  • HMRC will never demand immediate payment over the phone.
  • HMRC will never threaten you with arrest.
  • HMRC will never ask you to pay tax using gift cards.
  • HMRC will never send tax refund links via WhatsApp or text message.

Reporting Channels Summary

Scam Type Preferred Reporting Channel Phone
All scams (England/Wales/Northern Ireland) Action Fraud 0300 123 2040
All scams (Scotland) Police Scotland 101
Phishing emails NCSC [email protected]
Scam texts Network provider 7726
Investment scams FCA + Action Fraud 0800 111 6768
Shopping/consumer scams Trading Standards 0808 223 1133
Not sure who to contact Citizens Advice 0800 144 8848
HMRC impersonation HMRC + Action Fraud [email protected]
Emergencies Police 999

6. Complaining to Website Service Providers to Take Down Scam Sites

After reporting to the police, you can also take proactive steps to get scam websites taken down, cutting off the criminals' tools.

1. Look Up Website Registration Information (WHOIS)

  1. Visit who.is or ICANN Lookup.
  2. Enter the scam website's domain name.
  3. Record the following information:
    • Registrar: e.g., GoDaddy, Namecheap, 123-Reg
    • Hosting Provider: may require a reverse IP lookup
    • Registration date: Scam websites are usually recently registered
    • Registrant information: May be hidden behind privacy protection

2. File an Abuse Report with the Domain Registrar

  1. Find the "Abuse Contact Email" in the WHOIS results.
  2. Send a complaint email including:
    • The scam website's full domain name
    • A description of the fraudulent activity
    • Your evidence (screenshots, victim account)
    • A request to take down the domain
  3. Most registrars have dedicated abuse reporting pages, such as:

3. Complain to the Hosting Provider

  1. Using the IP address from WHOIS, look up the hosting provider at iplocation.net.
  2. Find the hosting provider's abuse contact and submit a complaint.
  3. Common hosting provider abuse contacts:

4. Nominet — .uk Domain Complaints

If the scam website uses a .uk, .co.uk, .org.uk, or other UK domain:

  1. Visit www.nominet.uk.
  2. Use Nominet's complaint process to report that the domain is being used for fraudulent activity.
  3. Nominet has the authority to suspend or delete .uk domains used for criminal purposes.
  4. You can also submit a DRS (Dispute Resolution Service) complaint if the domain infringes a trademark.

5. Report to Google and Bing

Get the scam website removed from search results:

6. ICANN Complaint

If the domain registrar does not respond to your complaint:

  1. Visit www.icann.org/compliance/complaint.
  2. Submit a complaint about the registrar's failure to act on the abuse report.
  3. ICANN will require the registrar to respond and take action.

7. SSL Certificate Revocation

If the scam website uses HTTPS:

  1. Click the padlock icon in your browser to view the Certificate Authority (CA).
  2. Contact the CA to report the certificate is being used for fraud:

8. Payment Processor Complaints

If the scam website accepts online payments:

  • PayPal: Report via the Resolution Center
  • Stripe: Report at stripe.com/docs/disputes
  • Visa/Mastercard: Initiate a dispute through your card issuer

7. Recovering Your Money

1. APP Reimbursement — Mandatory PSR Rules from 2024

From October 2024, the UK Payment Systems Regulator (PSR) implemented mandatory APP fraud reimbursement rules — one of the strongest victim protection measures globally:

Key rules:

  • Banks must reimburse APP fraud losses within 5 working days.
  • The reimbursement cap is £415,000.
  • For APP fraud claims over £100, the sending bank and receiving bank each bear 50% of the cost.
  • Banks cannot refuse reimbursement on the grounds that "you were too careless," unless you demonstrated "gross negligence."

Steps:

  1. Contact your bank immediately: Call the number on the back of your bank card and explain that you are an APP fraud victim.
  2. Explain when you made the transfer, to which account, and how much.
  3. The bank will initiate the reimbursement process and may request your Action Fraud Crime Reference Number.
  4. The bank should provide a reimbursement decision within 5 working days.
  5. If the bank refuses reimbursement or the amount is incorrect, you have the right to complain to the Financial Ombudsman Service (FOS).

Financial Ombudsman Service:

2. Section 75 — Credit Card Protection

If you paid between £100 and £30,000 using a credit card:

Eligibility:

  • Payment made by credit card (not debit card)
  • Amount between £100 and £30,000
  • The merchant breached the contract or made false representations

Steps:

  1. Contact your credit card issuer.
  2. Make a Section 75 claim (under the Consumer Credit Act 1974).
  3. Explain that the merchant failed to deliver the agreed goods/services or committed fraud.
  4. The bank is jointly liable with the merchant and must refund you.

3. Chargeback — Debit Card/Low-Value Credit Card Protection

If Section 75 does not apply (e.g., payment by debit card or amount under £100):

Steps:

  1. Contact your bank and request a chargeback.
  2. You must submit the request within 120 days of the transaction.
  3. The bank will contact the merchant's bank and attempt to recover the funds.
  4. Chargeback is not a statutory right (unlike Section 75), but most banks will assist.

4. Cryptocurrency Tracing — ScamLens Crypto Trace

If you were tricked into transferring cryptocurrency, recovering funds is more challenging but not impossible:

  1. Use ScamLens Crypto Trace and enter the address you sent funds to.
  2. ScamLens supports 18 blockchains (including Ethereum, Bitcoin, Tron, Solana, and more).
  3. The system will trace where the funds went, showing which exchanges or mixers received them.
  4. A professional forensic report is generated, which can serve as evidence for police reports and legal proceedings.
  5. If the funds reached a regulated exchange (such as Binance or Coinbase), the police can request the exchange to freeze the relevant accounts.

Fund Recovery Methods Comparison

Method Applicable Scenario Time Limit Success Rate
APP Reimbursement (PSR) Bank transfer fraud Within 13 months High (banks are obligated to reimburse)
Section 75 Credit card payment £100–£30,000 Within 6 years High (statutory right)
Chargeback Debit card/low-value credit card Within 120 days Moderate
Crypto Trace Cryptocurrency transfer The sooner the better Depends on whether funds reached a regulated exchange
Financial Ombudsman When bank refuses reimbursement Within 6 months of bank refusal Moderately high

8. Beware of Recovery Scams

This is the cruellest form of secondary victimisation. After being scammed and seeking help publicly, another group of criminals may contact you, claiming they can help recover your stolen funds.

Common Tactics

  • Posing as "recovery companies": Claiming they are professional fund recovery firms that can get your money back.
  • Impersonating law firms: Claiming they can recover your money through legal channels, demanding upfront legal fees.
  • Impersonating law enforcement: Claiming to be "senior investigators" from Action Fraud or the FCA, saying you must pay "processing fees" to release frozen funds.
  • Impersonating platforms like ScamLens: Claiming to be staff from a security platform who can directly recover your funds.

Identifying Recovery Scams

  • Anyone who asks you to pay before recovering your money is a scammer. No exceptions.
  • Legitimate law firms do not proactively contact scam victims.
  • Action Fraud and the FCA will never ask you to pay.
  • ScamLens is a detection tool and will never contact you to request payment for fund recovery.
  • If someone claims "we've found your money" but you need to pay a "release fee" — it is 100% a scam.

How to Respond

  1. Do not reply to any unsolicited "recovery" messages.
  2. Do not publicly share detailed information about being a scam victim on social media.
  3. If someone contacts you claiming they can recover your funds, report them to Action Fraud immediately.
  4. Only seek help through the official channels listed in this guide.

9. Prevention Tips + ScamLens Tools

Daily Prevention Habits

  1. Verify before you act: When you receive any request to transfer money, call back using a known contact number (not the phone number from the email/text) to confirm.
  2. Don't rush: The most common tactic scammers use is creating urgency. "You must transfer immediately or..." — legitimate organisations will never pressure you this way.
  3. Check websites: Before entering personal information or making payments, use ScamLens to check the website's trust score.
  4. Enable bank notifications: Ensure your banking app has all transaction alerts turned on.
  5. Two-factor authentication: Enable two-factor authentication (2FA) for all financial accounts.
  6. Regularly check your credit report: Use Experian, Equifax, or TransUnion to view your credit report for free, spotting any unauthorised account applications.

Using ScamLens Tools

Tool Purpose Link
Domain Check Check whether a website is safe scamlens.org/en/check-website
Cryptocurrency Check Check wallet address risk scamlens.org/en/check-crypto
AI Chat Assistant Get personalised anti-scam advice Built into every report page
Community Reporting Report scam websites Within report pages
Crypto Trace Trace cryptocurrency fund flows scamlens.org/en/check-crypto
Browser Extension Real-time website safety alerts scamlens.org/en/extension

Tips Specifically for UK Users

  • Check the FCA Warning List regularly: Always check the FCA Warning List before investing.
  • Take Five — Stop and Think: Remember the "Take Five" campaign promoted by UK banking — Stop, Challenge, Protect.
  • Strong Customer Authentication (SCA): Ensure your bank has SCA enabled — this is an additional verification layer required by UK financial regulation.
  • Register with the Telephone Preference Service (TPS): Register at tpsonline.org.uk to reduce marketing calls (scammers also frequently operate via phone).

10. Mental Health Support

Being scammed is not just a financial loss — it is also a serious psychological blow. Many victims feel shame, self-blame, anger, and anxiety. Please remember: being scammed is not your fault. Scammers are professionally trained criminals whose carefully designed schemes can deceive anyone.

Mental Health Support Resources

Organisation Contact Details Services
Samaritans Phone 116 123 (24/7, free) Listening and emotional support, available around the clock
Mind Phone 0300 123 3393 Mental health information and support
Victim Support Phone 08 08 16 89 111 Professional support for crime victims
Age UK Phone 0800 678 1602 Support for elderly scam victims
NHS Talking Therapies Via GP referral or self-referral Free psychological therapy (if the scam caused anxiety/depression)

Samaritans — The Most Important Helpline

Phone: 116 123 (24 hours, 365 days, completely free)

  • No appointment needed — just pick up the phone and call.
  • They will not judge you or ask you to do anything.
  • They simply listen to how you feel and help you through the hardest moments.
  • You can also email [email protected] (reply within 24 hours).

Victim Support — Professional Support for Crime Victims

Phone: 08 08 16 89 111

  • Provides practical help: assisting with police communication, court accompaniment.
  • Provides emotional support: delivered by trained volunteers.
  • Can help you apply for Criminal Injuries Compensation (if applicable).
  • The service is completely free and confidential.

A Message for Victims

  • You are not alone: Millions of people in the UK fall victim to scams every year, including doctors, lawyers, professors — anyone can be a target.
  • Do not blame yourself: Scammers exploit the human instinct to trust — that is a strength, not a weakness.
  • Speak up: Talk to a trusted family member or friend about your experience. Silence only adds to the psychological burden.
  • Seek help: If you are experiencing insomnia, anxiety, depression, or other symptoms due to your scam experience, contact your GP or access free psychological therapy directly through NHS Talking Therapies.
  • Turn your experience into strength: Share your story on the ScamLens community — your account may help others avoid the same fate.

Summary: After being scammed in the UK, the correct course of action is —

  1. Contact your bank immediately (request a freeze/reimbursement)
  2. Collect evidence (follow this guide's checklist)
  3. Report to Action Fraud or Police Scotland
  4. Report to the relevant regulatory bodies (FCA/HMRC/NCSC)
  5. Complain to get the scam website taken down
  6. Recover your funds (APP reimbursement/Section 75/Chargeback)
  7. Seek mental health support (Samaritans 116 123)

Save this handbook — we hope you never need it. But if you or someone you know unfortunately falls victim to a scam, this guide can help you take the right action at the most critical moment.

Related Articles

Guides

Smart Contract Red Flags: How to Spot a Rug Pull Before It Happens

· 8 min read
Guides

How Scammers Use Multiple Wallets — and How to Connect Them

· 8 min read
Guides

Understanding Crypto Risk Scores: What Makes a Wallet Suspicious?

· 8 min read
Back to Blog

Chrome Companion for Safer Browsing

Save useful links, spot risky sites before you open them, and keep important research easy to find across devices.

Get Free Extension

Available on Chrome Web Store. Works on all Chromium browsers.