Spot the scam
Pause before you click. Check through a route you trust.
Press play when you’re ready. The next lesson won’t start automatically.
Pause. Check. Then decide.
An unexpected message asks for money or account details. A moment to pause can help you decide what to do next. Phishing means a message or call designed to trick you into giving away information.
Remember these three things
- An urgent message is a reason to pause, not rush.
- Check using an app you already trust, a saved bookmark or a website address you already know. Avoid the link in the unexpected message.
- Do not send payment details or login codes to someone who contacts you unexpectedly.
Further guidance: NCSC: spot and report phishing scams. Written guidance checked against this source on .
Try the three-question quizRead the transcript
Sam, I've got a message saying my account is locked.
It wants me to sign in now.
Before you touch it, did you expect that message?
But it has the right logo.
That means it's real, doesn't it?
No. Scammers copy logos and names.
The rush is often part of the trick.
Logos can be copied.
Urgency makes you rush.
Don't use that sign-in link.
So I shouldn't use the link in the message?
If you're unsure, open the real app or website yourself, or contact the organisation using details you already trust.
Check independently.
Now you try. A delivery text asks for a fee.
Use its link or check the official app?
Check the official app.
Open it yourself, never through the text's link.
Visual description
A fictional bank text says an account is restricted, asks the recipient to verify their details, and creates a 30-minute deadline. Its logo is highlighted as something scammers can copy. A phone demonstration leaves the message, opens the bank app independently and asks the organisation's own support chat whether it sent the text. Support confirms it did not. A second fictional delivery text asks for £1.99 to book redelivery. The on-screen question offers A: use its payment link, or B: check via the official app. B is revealed as the safer answer. The example addresses and companies are demonstrations, not links to visit. The final portrait card repeats: Check independently. Open the official app yourself.
Next: Password protection
A different strong password for every account.