Scam or not?

Ten messages. Spot the fakes.

Farms get more than their share: fake Rural Payments emails, invoices with “new bank details”, calls from “Microsoft”. Every message here is made up for the game, but each one is modelled on the real thing. How many would get past you?

  1. 1 of 10

    EmailExample

    From: Rural Payments <payments@rural-payments-uk.co>

    Subject: Action required: your 2026 payment is on hold

    Dear Claimant, we were unable to process your scheme payment due to outdated bank details. To avoid your payment being cancelled, please confirm your details within 48 hours using the secure link below.

    Scam or genuine? Reveal the answer

    It's a scam.

    The real Rural Payments service never asks you to confirm bank details by email link, and that sender address isn't a gov.uk one.

    • The address isn't gov.uk
    • A deadline to rush you
    • 'Dear Claimant', not your name
    • A link to 'confirm' bank details
  2. 2 of 10

    EmailExample

    From: Mark at Fosse Haulage <accounts@fossehaulage.co.uk>

    Subject: Re: invoice 4471

    Hi, just a heads up that we've changed banks, so please pay invoice 4471 to the new account below rather than the old one. Thanks, Mark

    Scam or genuine? Reveal the answer

    It's a scam.

    Invoice fraud: someone has got into a supplier's email, or copied it, and changed the bank details. The email can look completely genuine.

    • New bank details by email
    • Replies to a real conversation
    • Small, ordinary, believable
  3. 3 of 10

    Text messageExample

    From: HMRC

    HMRC: You are due a tax refund of £318.40. Claim before midnight at hmrc-refund-claim.uk or it will be returned to the Treasury.

    Scam or genuine? Reveal the answer

    It's a scam.

    HMRC never tells you about refunds by text, and its website is gov.uk, nothing else.

    • Refund by text
    • Not a gov.uk address
    • 'Before midnight'
  4. 4 of 10

    Text messageExample

    From: +44 7700 900877

    Your parcel could not be delivered due to an unpaid fee of £1.45. Pay now to rearrange: parcel-redeliver.info

    Scam or genuine? Reveal the answer

    It's a scam.

    A tiny fee is the hook. The page asks for card details, and the real prize is your card.

    • A small fee to unlock it
    • An odd website
    • From a mobile number
  5. 5 of 10

    Phone callExample

    From: Withheld number

    "Hello, I'm calling from Microsoft technical department. We've detected viruses on your computer. I need you to go to your computer so I can help you remove them."

    Scam or genuine? Reveal the answer

    It's a scam.

    Microsoft never rings anyone about their computer. The caller wants remote access, then your bank login.

    • They rang you
    • Urgent problem you didn't know about
    • Wants to get on your computer
  6. 6 of 10

    EmailExample

    From: Daniel at Milsch <daniel@milsch.co.uk>

    Subject: Booked with Milsch: MLK-7K4QX

    Hello Sarah, thanks for booking. It's reached Daniel, and he'll ring you back the same day. Your reference is MLK-7K4QX, in case you need it.

    Scam or genuine? Reveal the answer

    It's genuine.

    You booked, and this is the confirmation you were told to expect: no link to click, nothing to pay, nothing to enter.

  7. 7 of 10

    Phone callExample

    From: Your bank's number (it says)

    "This is the fraud team. Your account has been compromised. To keep your money safe, we need you to move it to a secure account we've set up for you."

    Scam or genuine? Reveal the answer

    It's a scam.

    No bank ever asks you to move money to a 'safe account'. Caller ID can be faked to show your bank's real number.

    • 'Safe account'
    • Panic and urgency
    • Caller ID can be faked
  8. 8 of 10

    EmailExample

    From: Microsoft <microsoft-noreply@microsoft.com>

    Subject: Your Microsoft 365 subscription renews on 1 November

    This is a reminder that your Microsoft 365 Business Standard subscription will renew automatically. No action is needed. To review your subscription, sign in to your account at admin.microsoft.com.

    Scam or genuine? Reveal the answer

    It's genuine.

    A routine renewal notice from a real Microsoft address, asking you to do nothing. Even so, sign in by typing the address yourself, never from the email.

  9. 9 of 10

    Text messageExample

    From: Unknown number on WhatsApp

    Hi Mum, I've dropped my phone down the loo, this is my new number. Can you do me a massive favour, I need to pay a bill today and my banking app won't work on this phone x

    Scam or genuine? Reveal the answer

    It's a scam.

    The 'Hi Mum' scam. Ring the old number, or ask something only they'd know, before sending a penny.

    • New number, urgent money
    • Can't talk on the phone
    • Emotional pull
  10. 10 of 10

    LetterExample

    From: Your phone provider, by post

    About: Your landline is moving to Digital Voice

    We're upgrading your home phone to our digital service on 14 December. You'll need to plug your phone into your broadband router. If you use a telecare alarm, please call us on the number on your bill.

    Scam or genuine? Reveal the answer

    It's genuine.

    Genuine: providers must write before moving your line. Check it by ringing the number on your bill, not one in a message, and see Daniel's landline page.

If you get a real one

Don't tap. Forward it, then delete it.

  • Texts

    Forward to 7726. It’s free, and the networks block the sender.

  • Emails

    Forward to report@phishing.gov.uk, the National Cyber Security Centre’s service.

  • Lost money?

    Ring your bank first, straight away, on the number on your card. Then report it to Action Fraud.