Scam Spotter A to Z

An unfamiliar word should not stop you checking a suspicious message or asking for help. This glossary explains scam terms in plain English, with warning signs, steps you can take and UK reporting routes. Start with the word you saw, or the situation that feels familiar.

By Secordit. Last checked: 7 November 2026.

Has money gone, or is someone in danger?

  • Money sent or banking details shared? Contact your bank using the number on your card. Or call 159 if your bank participates.1
  • Fraud or hacking in England, Wales or Northern Ireland: Report Fraud. In Scotland, call Police Scotland on 101.2
  • If someone is in danger, call 999.3

You do not need to know the scam’s technical name before reporting it.

Find the situation first

A to Z

A · B · C · D · F · H · I · L · M · O · P · Q · R · S · T · V · W

Some letters do not have an entry in this first batch.

A

  • Account takeover: Account takeover is when someone gains control of an online account without your permission, perhaps through stolen passwords or tricks involving security codes.
  • Authorised push payment (APP) fraud: Authorised push payment fraud is a scam where you are tricked into sending money by bank payment.

B

  • Bank and police impersonation scam: A bank or police impersonation scam is when a criminal claims to represent your bank or a police force.
  • Binary options scam: A binary options scam takes money through a supposed fixed-odds investment platform.
  • Boiler room scam: A boiler room scam uses pressured sales contact to sell worthless, overpriced or nonexistent shares or bonds.
  • Business email compromise (BEC): Business email compromise is a scam that misuses a business email identity to make a request look genuine.

C

  • Clone firm: A clone firm is a fraudulent business identity that copies a genuine financial firm’s details.
  • Courier fraud: Courier fraud is a scam where a criminal persuades you to hand money, a bank card or valuables to a collector.
  • Credential stuffing: Credential stuffing is an attack that tries stolen usernames and passwords on other services, relying on people reusing the same sign-in details.

D

  • Data breach: A data breach is a security incident in which information is exposed, lost or accessed without permission, through an attack or a mistake.
  • Deepfake voice scam: A deepfake voice scam uses artificial intelligence to create or alter speech for a fraudulent request.

F

  • Fake online shop: A fake online shop is a website set up to take payments or personal details under false pretences.
  • Forex trading scam: A forex trading scam uses a supposed foreign-exchange investment service to take your money.

H

  • HMRC scam: An HMRC scam is a fake call, message or letter that pretends to come from the tax authority.
  • Holiday fraud: Holiday fraud is a scam that takes payment for a trip or accommodation that does not exist or is not booked.
  • Looking for Hi mum? See WhatsApp “Hi mum” scam.

I

  • Identity fraud: Identity fraud is when someone uses your personal details to commit fraud, perhaps opening an account or obtaining products in your name.
  • Identity theft: Identity theft is the theft of personal information that can be used to impersonate you.
  • Inheritance fraud: Inheritance fraud invents an inheritance and asks you to pay fees before receiving it.
  • Insurance fraud: Insurance fraud involves dishonest information or claims connected with insurance.
  • Investment and crypto scam: An investment scam uses a false or misleading opportunity to take your money, sometimes involving shares, trading or cryptocurrency.
  • Investment grooming (“pig butchering”): A “pig butchering” scam builds a personal connection over time before introducing a fake investment.
  • Invoice and mandate fraud: Invoice fraud is a scam that tricks you into paying a false invoice or using false bank details.

L

  • Land banking scam: A land banking scam sells plots using misleading claims about future development or value.
  • Loan fee fraud: Loan fee fraud is a scam that asks you to pay a fee for a loan you never receive.
  • Lookalike domain: A lookalike domain is a web address designed to resemble one you recognise, perhaps by changing a letter or adding familiar brand words.
  • Lottery scam: A lottery scam tells you that you have won a prize, then requests information or money to release it.

M

  • Money mule: A money mule is someone whose account is used to receive and move criminal money.

O

  • One-time passcode (OTP) scam: A one-time passcode scam tricks you into sharing a security code that may approve a sign-in, payment or account change.

P

  • Looking for pig butchering? See investment grooming.
  • Parcel delivery text scam: A parcel delivery text scam invents a delivery problem to obtain money or information, perhaps requesting a redelivery fee, address correction or tracking-app download.
  • Pension scam: A pension scam uses a misleading offer to persuade you to move or release pension savings.
  • Phishing: Phishing is a scam that uses a fake message to make you reveal information or do something unsafe.
  • Ponzi scheme: A Ponzi scheme pays apparent investment returns using investors’ own money or money from newer investors.
  • Purchase scam: A purchase scam uses an online sale to take your money or personal details dishonestly.

Q

  • QR code scam (quishing): A QR code scam uses a scannable code to lead you into a fraudulent request, such as a fake payment or harmful download.

R

  • Ransomware: Ransomware is harmful software that prevents access to a device or its files, usually by encrypting them.
  • Recovery scam: A recovery scam targets someone who has already lost money, offering to recover it in exchange for fees or banking information.
  • Recruitment scam: A recruitment scam offers you a job that does not exist to obtain money or personal information.
  • Rental fraud: Rental fraud is a scam that takes an upfront payment for a property that does not exist or is not available to rent.
  • Romance scam: A romance scam is fraud built around a supposed romantic relationship, where a criminal gains your trust before asking for money or financial help.

S

  • Sextortion: Sextortion is blackmail involving threats to share real, altered or invented intimate images or videos.
  • SIM swap fraud: SIM swap fraud happens when a criminal gets your mobile number moved to a SIM or eSIM they control.
  • Smishing: Smishing is phishing sent through a text message from a criminal pretending to be a delivery company, bank or another trusted contact.
  • Spoofing: Spoofing means making a communication appear to come from somewhere it did not, perhaps by disguising a phone number or email identity.

T

  • Tech support scam: A tech support scam uses a false computer or account problem to obtain money, information or device access.
  • Ticket fraud: Ticket fraud is a scam that sells you tickets which never arrive or turn out to be fake.

V

  • Vishing: Vishing is phishing carried out over a phone call, using a false identity or story to obtain information, money or access.

W

  • WhatsApp “Hi mum” scam: The “Hi mum” scam is a message from someone pretending to be your child or another relative.
  • Work-from-home scam: A work-from-home scam offers paid work or a home business, then takes fees or avoids paying you.

Prefer to browse by a different name?

News Pulse

Account security, explained by email.

Read about News Pulse

Need the next step, not another definition?

Choose For me or my family or For my business. The kits page lists our self-serve digital guides. You can also use our resources to find reporting services and guidance.

General information, not legal, financial or personalised security advice. Secordit is not a police or bank reporting service.

Sources

  1. UK Finance, APP fraud and reporting; Stop Scams UK, 159. Accessed 7 November 2026 (Europe/London).
  2. Report Fraud, police impersonation alert and current reporting routes. Accessed 7 November 2026 (Europe/London).
  3. Police Scotland, reporting a crime. Accessed 7 November 2026 (Europe/London).