Cyber scams in the UK are becoming more convincing, more personal and far more difficult to spot. Criminals are using AI-generated voices, fake QR codes, cloned websites and social engineering tactics to target ordinary families rather than just businesses.

From parking scams to fake HMRC messages, many attacks now rely on panic, urgency and trust instead of technical hacking.

Here are 10 scams currently affecting UK households and what you can do to stay safe.

1. Fake HMRC Tax Refund Texts

One of the most common scams in Britain involves fraudsters pretending to be HMRC. Victims receive a text or email claiming they are owed a tax refund or face a penalty.

The message usually includes a link to a fake GOV.UK-style website that asks for bank details, passwords or payment information. HMRC has repeatedly warned that it will never ask for personal or financial information via text message or WhatsApp. (GOV.UK)

How to avoid it

• Never click links in unexpected tax messages
• Go directly to the official HMRC website manually
• Forward suspicious texts to 60599
• Be wary of messages creating urgency or fear

2. QR Code Parking Scams

Known as “quishing”, this scam has exploded across UK cities and tourist areas. Criminals place fake QR code stickers over legitimate parking machine signs. Drivers scan the code thinking they are paying for parking, but are instead sent to a fake payment website. (Sunderland City Council)

Some victims have had thousands stolen after entering card details.

Councils in Sunderland and Leeds have both issued warnings after fake QR codes appeared on parking machines. (Sunderland City Council)

How to avoid it

• Avoid scanning QR codes on parking meters
• Use official parking apps such as RingGo or PayByPhone
• Check stickers for signs of tampering
• Always inspect the web address before entering payment details

3. WhatsApp Family Impersonation Scams

This scam usually begins with a message saying:

“Hi Mum, this is my new number.”

Fraudsters pretend to be a child or relative who has lost their phone and urgently needs money transferred.

The messages are often emotionally manipulative and designed to pressure parents into acting quickly before thinking clearly.

How to avoid it

• Call the person directly using their old number
• Ask a question only your relative would know
• Never transfer money based solely on WhatsApp messages
• Enable two-factor authentication on messaging apps

4. AI Voice Clone Scams

AI-generated voice technology is now being used to imitate family members. Criminals can clone a voice from only a short online video clip.

Parents and grandparents are being targeted with fake emergency calls claiming a loved one has been arrested, injured or stranded abroad.

Cybersecurity researchers and fraud experts have warned that AI impersonation scams rose sharply during 2025. (Tom’s Guide)

How to avoid it

• Hang up and call the person directly
• Create a family “safe word” for emergencies
• Be suspicious of emotional pressure and demands for secrecy
• Limit public videos containing clear speech online

5. Fake Delivery Text Messages

Scammers impersonate delivery firms including Royal Mail, Evri and DPD. The message claims a parcel cannot be delivered until a small fee is paid.

The payment is usually only a few pounds, but entering card details gives criminals access to banking information.

How to avoid it

• Never pay delivery fees through text links
• Track parcels through official apps or websites
• Check the sender address carefully
• Delete unexpected delivery messages

6. Streaming Service Password Scams

Fake emails pretending to be from Netflix, Disney+ or Amazon Prime claim your account has been suspended due to a failed payment.

Victims are directed to cloned login pages designed to steal passwords and payment information.

Once criminals gain access, they often reuse the same credentials on banking or shopping websites.

How to avoid it

• Never log in through email links
• Use unique passwords for every account
• Enable two-factor authentication
• Use a password manager

7. Facebook Marketplace and Gumtree Fraud

Families buying second-hand items are increasingly targeted by fake sellers offering discounted electronics, concert tickets or furniture.

The seller often pressures the buyer to pay by bank transfer before disappearing.

In other cases, scammers send fake courier links or QR codes designed to steal payment information.

How to avoid it

• Avoid bank transfers to strangers
• Use secure payment systems with buyer protection
• Be suspicious of prices that seem too good to be true
• Meet locally where possible

8. Fake Bank Fraud Calls

Victims receive calls from someone claiming to work for their bank’s fraud department. The caller may already know partial account details, making the scam seem genuine.

The scammer then persuades the victim to:

• transfer money to a “safe account”
• reveal one-time passcodes
• approve fraudulent payments

How to avoid it

• Banks never ask customers to move money to a safe account
• Hang up and call the bank directly using the number on your card
• Never share banking passcodes
• Take time before acting

9. Romance and Investment Scams

Often called “pig butchering” scams, these schemes combine emotional manipulation with fake cryptocurrency or investment platforms.

Victims build online relationships over weeks or months before being persuaded to invest money into fraudulent trading apps. Research published in 2025 found these scams rely heavily on trust-building and psychological pressure. (arXiv)

How to avoid it

• Be cautious of online relationships involving investment advice
• Never invest through platforms recommended by strangers
• Research companies independently
• Speak to family members before sending money

10. Fake Tech Support Pop-Ups

A sudden pop-up appears on a laptop or phone warning that the device has been hacked. Victims are urged to call a support number immediately.

The scammers then convince users to install remote access software or pay for unnecessary “security fixes”.

These scams often rely on fake browser alerts and typosquatting websites. (arXiv)

How to avoid it

• Never call numbers shown in browser pop-ups
• Close the browser tab immediately
• Use trusted antivirus software
• Restart the device if necessary

Final Thoughts

Modern cyber scams are no longer easy to spot. Many look professional, sound convincing and exploit everyday situations such as parking, online shopping or family emergencies.

The most effective defence is slowing down before reacting. Most scams rely on urgency, panic or emotional pressure.

If something feels suspicious:

• stop,
• verify independently,
• and never rush financial decisions online.

Reporting scams to Action Fraud and legitimate organisations such as HMRC also helps prevent others becoming victims.

to learn more about staying safe online check out our helpful courses, or to stay up to date with us follow on linkedin.