Staying vigilant to impersonation fraud and the use of fake websites

Fraudsters are becoming increasingly sophisticated, and impersonation scams are on the rise across the industry, with around 4.2 million¹ fraud incidents recorded in the UK in 2025. While this may sound concerning, there are simple steps you can take to stay protected and in control.

These scams typically involve criminals pretending to be a trusted organisation – such as a bank or fraud team – to try and gain access to your personal or financial information.

And one tactic we’re seeing more frequently is the use of convincing fake websites.

How scammers operate – beware of fake websites

Scammers may contact you by phone, using numbers that appear genuine, and claim they’re investigating suspicious activity on your account.

To build trust, they might share some of your personal details, making the interaction feel legitimate.

You may then be directed to a website that looks very similar to a real banking or support site. From here, you could be asked to enter information or take steps that allow fraudsters to access your accounts.

In some cases, you may receive a one-time passcode (OTP) and be asked to share it. This is often presented as part of stopping fraud, but in reality, it can allow criminals to authorise transactions.

How to stay protected

We are all at risk of being targeted by a scammer, but the good news is that a few simple habits can greatly reduce your risk:

1. Verify who you’re talking to

Don’t hesitate to question the authenticity of who you are speaking with. If you’re unsure, you can end the communication and contact the organisation or your friend/family member using a method you know and trust.

Remember:

• We will NEVER ask you for a full one-time passcode (OTP) or full PIN
• We will NEVER ask you to move money to a new account for security reasons

2. Do not click on links you don’t trust

We know that scammers can also access an account remotely, so never open a link you do not know or trust. You should also never give anyone access to your personal devices or share your passwords.

Remember:

• We will NEVER ask you to click a link or visit a website to resolve fraud
• We will NEVER ask you for passwords or security information

If you’re ever unsure, we’re here to help

If you ever have any questions on protecting yourself from fraud, or you think you may have fallen victim to fraud, please contact us on +44 (0)1624 645000 between Monday and Friday, 7am to 6pm (UK time), except for UK public holidays.

For all other times, please call +44 (0)20 8167 3223.

For more information on how you can protect yourself against fraud, please click here.