Common types of scam – and how to protect yourself

It’s easy to think that scams always ‘happen to someone else’, that it’s just the vulnerable or those that aren’t paying attention who fall victim to such things.

However, according to research from Age UK, four over 50s are the victim of fraud every minute, leaving millions fearful of attacks.

Sadly, the perceived stigma of ‘falling for’ a scam means that only a small percentage are reported (even though fraud is the most common crime in the UK), making it harder for the authorities to catch the criminals behind them.

“Frauds and scams are the only sort of crimes we’d say you’d ‘fall for’. That’s quite shaming,” says Paul Maskall, UK Finance’s Fraud and Cybercrime Lead.

“But I wouldn’t turn round and say: ‘I can’t believe you fell for that burglary.’ A criminal has targeted you to manipulate and steal something.”

We’ve been speaking to several experts and researching the biggest scams (especially those that often target the over 50s) to find the common red flags that you can learn to spot.

With a little understanding of the warning signs, you can help minimise your chances of being affected by fraudulent schemes.

The expert sources have also shared their tips to help you stay safe and more easily spot attempted fraud, whether you’re checking your emails, scrolling through social media, picking up the phone or answering the door.

10 expert tips to protect yourself from scammers

One of the most common tips from experts is: stop, take a breath and challenge the situation if you’re feeling worried. Consider the ways it could be potential fraud and, if you can, ask someone you trust what they think.
Never share details in response to a phone call, email or social media message from someone you don’t recognise. If you receive unsolicited contact from a person claiming to be someone you know, or a company, bank or authority out of the blue, call them back using a number you know to be real (rather than one they provide) and ask whether they’re trying to reach you, no matter how ‘official’ the original contact is.
Be suspicious if someone is urging you to take swift action or is manipulating your emotions in some way. This is a common ploy from fraudsters to force you to act on impulse and make a bad decision. Don’t be afraid to put the phone down if you’re feeling unsure and give yourself time to reflect.
Never click on links in messages or emails from people that you don’t know. They could direct you to websites that will try to steal your details, or download dangerous malware (software designed to gain access to your device) to your computer, tablet or phone.
If you’re taken to a website, stop and check the URL (the website’s address). Look for a padlock symbol, an address that begins with ‘https://’, or you can use the Get Safe Online ‘Check a website’ tool to verify it’s safe. If a website or app ever asks for personal details, stop and check it’s genuine before you input any information.
Be suspicious of any requests for money from someone you’ve never met in person, particularly if you're online. Profile photos may not be genuine, so perform a reverse image search first. This is where you copy the photo and upload it through Google (click the camera icon to begin your search) – you should quickly see if the picture has been used elsewhere under another name.
If you see an amazing deal online for anything – whether that’s holidays, technology or insurance quotes – always pause and verify the company you’re dealing with is real before sharing details or parting with cash. Never be shy of checking with companies through a simple phone call first.
When you’re using an ATM, always scan the area carefully. Check the machine for anything that looks unusual, and never let anyone distract you while using it.
While it may be tempting to confront a scammer, or ‘play along’ to outsmart them, it's better to put the phone down and leave the conversation. By engaging, you might unwittingly disclose personal information.
If you’ve lost money in a scam, always tell your bank as soon as you can, using a phone number you know to be correct. Report any scams – even if you weren’t caught by them – to the relevant authorities. Action Fraud, the UK’s national fraud and cybercrime centre, has clear instructions on what to do if you get suspicious emails, calls or texts.

Car parking scams

A row of classic cars — Shutterstock / topseller

These scams are run using QR (quick response) codes, which are little black and white grids of pixels that look a touch like barcodes.

Scanning these with a smartphone camera should take you through to a legitimate payment website – but identical-looking stickers are being placed over the genuine QR code, redirecting you to more nefarious destinations online.

Drivers being caught by this scam will click on bogus links to fake websites – run by fraudsters, they’ll request your card details to make a payment and then use them to spend money from your account.

Senior consumer expert at Citizens Advice, Kate Hobson, told Saga Money that the easiest thing motorists can do is to check the code itself: has it been tampered with? Does it look like it’s been stuck over another one?

“If you do scan the code and provide the information asked for, you’re at risk of handing over personal details, losing money and, as you won’t have paid the real company, you even could end up being hit with a parking ticket too,” she adds.

“Or you may have downloaded malware that scammers can use to steal your personal information.”

How can I protect myself?

Always check to see if a QR code you’re about to scan is a sticker or not.
Use your phone’s camera, which has an inbuilt scanner, rather than downloading an external app to scan the code.
If you get taken to a website, check the URL (the website’s address) has a padlock symbol and begins with ‘https://’, as this shows it’s secure.

A man putting his card in an ATM machine — Shutterstock / AlessandroBiascioli

One of the more sophisticated scams is known as ‘skimming.’ This involves a scammer fitting a specialist device in the ATM, which records the details from the magnetic strip of your card, while a hidden camera, installed above the keypad, captures your Personal Identification Number (pin) as you enter it.

Once the thieves have this information, they’re able to load your stolen data onto a new card and start spending your money.

Another, less sophisticated, type of ATM fraud is known as ‘card trapping’. Here, a device is fitted to the slot that prevents your card being returned to you.

Again, a hidden camera will likely record your pin as you enter it. After you’ve walked away in frustration, the fraudster returns to the ATM, removes the device and steals your card with your details recorded.

Alternatively, fraudsters might use fake keypads, fitted over the real one, to record your pin as you enter it. In some cases, this information is then sent to awaiting criminals over Wi-Fi.

Link’s Director of Strategy, Graham Mott, told Saga Money: “The good news is that long term, we are seeing a decline in ATM fraud cases. However, we always ask customers to remain vigilant.

“Make sure you always protect your pin, and if you ever see anyone acting suspiciously around a cash machine – or you think it’s been tampered with – please do not use it. Contact the police or Crimestoppers.”

How can I protect myself?

If you see anyone suspicious hanging around a cash machine, don’t use it and find a different one.
Inspect the ATM carefully – look at the card slot to check for any scratches, bulky or loose attachments and watch out for PIN pads that feel looser or spongier than normal. If anything looks even slightly suspicious, alert the bank straightaway.
Always shield your pin as you enter it – if there’s a concealed camera fitted to the ATM, it can’t capture your number if your hand is in the way.
If your card isn’t returned from the ATM, report it to your bank immediately – ideally while still at the cash machine so nobody can come and take your card.

A man sat wirh his chin resting on his hand. He looks sad. — Shutterstock / Inside Creative House

Romance fraud – where someone is persuaded to give money to a person they’ve never met but believe they’re in a relationship with – has soared for those aged 55 to 64.

According to new data from Lloyds Bank, the scam is mostly perpetrated online. Victims are targeted on dating sites (and social media) and from there, fraudsters use manipulative language to trick those looking for love, before eventually convincing them to send money.

UK Finance found that, in the last year there’s been a 29% increase in people who had met someone online being asked to give or lend money without meeting them in person.

From there, half of them agreed to do so, losing £18.5m in the first six months of 2023.

Metro Bank’s Head of Fraud & Investigations, Baz Thompson, told us of one 73-year-old customer who sadly lost many thousands to a woman he’d built a relationship with over email and telephone.

“The first payment request was for a few hundred pounds – he was happy to help as she seemed in genuine need. By the time he started to get suspicious, he had made over 80 payments in less than six months and had lost nearly £57,000.”

The bank was able to help him recover £31,000, but he lost the rest.

How can I protect myself?

Stay on the dating site’s messaging service until you’re confident the person is who they say they are, as these sites have moderation and reporting processes in place to protect daters and remove scammers.
Never give money to someone you haven’t met in person, however close you may feel.
If you meet someone face-to-face, ensure meetings take place in bright public spaces and tell a friend or family member where you’re going.

Tax scams

We all want to pay our tax correctly, but this is something criminals look to exploit by sending sudden demands for payment.

An HMRC spokesperson told Saga Money: “Criminals are great pretenders. They use emails, phone calls and texts to try and dupe citizens and often mimic government messages to make them appear authentic.

“Around the end of the tax year, some people might expect to hear from HMRC and so can be tricked into sharing their details, or even money, with fraudsters.”

These criminals, looking to steal your personal details, will often require you to act within a very short period of time.

The messages may look or sound genuine, using an address that appears to be from HMRC, but don’t click on any attachments or links. These may take you to a fake website that steals your details or infects your tech with damaging malware.

How can I protect myself?

Log into your HMRC account (if you’ve set one up) or call HMRC to see if you are genuinely due a refund or owe any money.
Never respond to requests for information over the phone, text or on email.
Visit the page on avoiding and reporting scams at gov.uk
There’s also a checklist of genuine HMRC contacts on the website.
If you’re unsure about a text claiming to be from HMRC, forward it to 60599. You can do the same with emails to phishing@hmrc.gov.uk.

A man sat at his kitchen counter looking at his laptop screen. He has his head in his hands and looks worried — Shutterstock / Prostock-studio

Pension scams are often highly sophisticated, complex...and can be truly devastating. Scammers may try and tell you that they can help you access your pension before the age of 55, often in the form of a ‘loan’ or other way to get the cash out, without mentioning it could come with a hefty tax bill.

You could also be approached out of the blue with the offer of a ‘free’ pension review. Should you accept this, you may be encouraged to transfer your pension into a higher-risk scheme, investing in things like overseas property, bio-fuels, storage units – even care homes – for high, or ‘guaranteed’, returns.

However, if you’re caught in one of these schemes, you could be hit with a huge tax bill or have your funds stolen or lost in worthless investments.

“If you fall victim to scams, you can lose a lifetime’s savings in a couple of seconds. We’ve seen scammers clone websites of reputable firms and if you don’t do your homework, and check if they’re legitimate, you could end up losing money,” Mike Broomfield, Head of Intelligence at The Pensions Regulator, told us.

“Scammers are shapeshifters, they’re smart and they’re always one step ahead.”

How can I protect myself?

Cold calls, emails, texts or messages from social media about pensions are illegal – do not engage with any unsolicited offers to boost your pension.
Check the company you’re dealing with is FCA registered.
Pause and think about what you're doing and, if you're uncomfortable, don't communicate further with the people who are calling or messaging you.
If you’re worried about your pension, The Money and Pensions Service and MoneyHelper are good places to go for free, impartial advice.
If you think you’re being targeted by fraudsters you can also try the FCA’s scam checker tool on its website.

A man sat looking at his smartphone — Shutterstock / goodluz

However confident you might feel using WhatsApp, it’s a popular way for fraudsters to find victims – capitalising on your familiarity with the messaging service and hoping to catch you off guard.

Scams are varied, but almost all will be attempting to get money paid to a fraudster, steal your details or even take over your account (and lock you out).

These attempts can be from a loved one messaging from a ‘new’ number, a hacked friend asking for a code (to steal your account details) or even a stranger pretending to know you.

“If a message is unexpected, if it makes you feel something – like sympathy for someone or that you’re missing out on something, and if it asks you to do something – like click on a link, provide personal information [or pay money], these are the big red flags,” Dr Jessica Barker, CEO of cybersecurity firm Cygenta, told Saga Money.

How can I protect myself?

If you get a message asking for help from someone who claims to be friend or family member, call them on a number you've got saved for them to verify the message is real.
Never give out codes sent to you to anyone, even if you think it’s someone you know.
Don't click on links in messages from people you’ve not met or from new numbers.
Block and report WhatsApp users that you're suspicious of by clicking on their name at the top of the message history. This alerts WhatsApp to the types of scams circulating.

Holiday scams

In 2023 there were 6,640 reports of holiday fraud (where you pay for a getaway, only to find that some or all of it is fake), costing holidaymakers a combined £12.3 million.

These could be presented in the shape of bargain holiday packages, time-limited discounts, or last-minute availability in an otherwise fully-booked hotel or resort. You could also book through a website you think is legitimate, only to find it’s been cloned and is actually set up to steal your details.

Alternatively, scammers can pose as travel agents and let you book a villa or airline tickets, but the money is taken and your tickets or booking confirmation never turn up.

“Scammers are always looking to tap into people's emotions to make their schemes more plausible and likely to work,” says Jenny Radcliffe, Director of Social Engineering at Human Factor Security.

“Holidays, whether bookings or searches, are a rich target area in this regard as people are looking for good deals, but are unfamiliar with what might be ‘normal’ for different locations, events and activities.”

How can I protect myself?

Verify any deal or company’s credentials before sharing details or parting with cash. Don’t be afraid of phoning the company in question to check before clicking through.
Always use secure payment methods when paying for a holiday – if you’re asked to do a bank transfer, this could be a red flag.
Confirm the address of the website you’re using is what you expected – if it’s been subtly changed (i.e. from ‘.com’ to ‘.org’) it could be fake.

Gift card scams

While most people know to guard their bank details, they’re less protective over gift cards, which makes them an easy target for fraudsters.

You might get a message from someone you know over text or social media, telling you they’re using a ‘new’ number because of an issue with their phone.

They’ll need you to purchase a gift card urgently and send them the codes, before emptying them of funds instantly.

Another version is through ‘advance fee scams’, where you must pay upfront to ‘unlock’ a gain or reward – a gift card often being the way you’ll be required to send the funds.

“You might have ‘won’ a prize or a lottery and the scammers will say you need to authenticate this, so go and buy a certain amount of gift cards and then give us the codes to unlock your prize,” says Paul Maskall from UK Finance.

“So, you get people turning up to retail establishments buying boatloads of gift cards in order to ‘verify’ themselves.”

How can I protect myself?

If you’re suddenly asked for gift cards from someone you know, stop and take a moment. Find another way to speak to them to check it’s correct.
If an organisation like HMRC or the DVLA contacts you and asks you to pay through gift cards, you’re right to question it, as no such body will ever ask you to pay a fine or bill in this way.
If you need to enter a competition by buying a gift card, it’ll likely be a scam.

A person holding a smartphone with a warning triangle above — Shutterstock / 1st footage

Scammers are using bogus life-insurance claims and offers to gain access to your details or steal your cash.

They may say they can lower your premiums, or that your policy needs to be reviewed for an official-sounding reason.

Bereavements are, sadly, also a time when scammers are likely to attack, tricking people into paying a fee or handing over their personal details by saying they may be due a large payout from the recently-deceased's life insurance.

Paula Llewellyn, Chief Marketing Officer and Direct MD at Legal & General Retail, says: “A suspicious scam email will sometimes – though not always – have spelling mistakes and may ask you to click on a link and enter your bank details, which should definitely be avoided.”

How can I protect myself?

Don’t click on any links in unsolicited messages regarding life insurance payouts, and never hand over personal information.
Call the insurance company, using a number you’ve found yourself, and ask if they’ve contacted you – don’t engage with the scammer.
If someone calls you from an insurance firm to tell you that you’re to receive a payout, ask for a reference number and call the company back on a verified number.