Money WaffleZero waffle. Real financial literacy for the UK.

Education, not financial advice. No ads, no affiliate links, ever.

Made in the UK · Figures for the 2026/27 tax year

MoneyWaffle

Phishing · 4 min

That text from your bank isn't from your bank.

Phishing is a message pretending to be someone you trust, so you hand over your details or your money yourself. It works because it catches you when you're busy.

10 secs

is all it takes to check. The rush in the message is there to stop you taking them.

The 10-second version

  • 159Hang up and dial this. It puts you through to your bank's real fraud team.
  • 7726Forward scam texts here for free. It gets numbers shut down.
  • £85kis the most a bank must refund if you're tricked into a transfer.

Every fake has the same three parts.

Spot the pattern once and you'll see it everywhere, whoever the message claims to be from.

A phishing message
  • A name you trust

    Your bank, HMRC, Royal Mail, your boss, your mum.

  • A reason to hurry

    Payment blocked. Parcel returned. Account closing today.

  • A simple next step

    Tap this link, call this number, read me the code.

The name on the screen proves nothing. Scammers can make a call or text show your bank's real name.

"Evri: we missed you. Pay £1.45 to rebook."

You are waiting for a parcel. What do you do?

Been caught? Speed gets money back.

It happens to careful people. Don't let embarrassment slow you down, because the first hour matters most.

Do these now
  • Call your bank on 159

    They can freeze cards and try to stop or recall the payment.

  • Change your passwords

    On that account, and anywhere else that shares the password.

  • Ask about a refund

    Banks must refund most scam transfers, and unauthorised payments.

Watch for round two: a "recovery" firm asking for a fee is the same scammers.

Congrats, you made it to the end!

Ready to dive deeper? The full Phishing guide has the mechanics, worked examples and fine print.

Dive deeper

Drag, use the buttons, or press ← →