Protecting yourself from online fraud and scams

1. The scale of online fraud

Online fraud is the most commonly experienced crime in England and Wales. The Office for National Statistics estimates that millions of fraud offences are committed each year, with reported losses running into billions of pounds. Anyone can be targeted — fraud affects people of all ages, backgrounds and levels of technical experience.

This guidance explains the most common types of online fraud, how to recognise them and the steps you can take to protect yourself.

2. Online shopping fraud

Shopping fraud occurs when criminals set up fake websites, marketplace listings or social media advertisements to sell goods that do not exist or are significantly different from what was advertised.

2.1 Warning signs

• Prices that are significantly lower than other retailers for the same product.
• Websites with no physical address, telephone number or returns policy.
• Poor-quality website design, broken links or copied content from legitimate retailers.
• Sellers who insist on payment by bank transfer rather than credit card or a recognised payment platform.
• Social media advertisements for products from brands or retailers you have not heard of, particularly with "limited time" offers.

2.2 How to protect yourself

• Research the seller before purchasing. Search for reviews and check the company on Companies House.
• Use a credit card for online purchases over £100 where possible — Section 75 of the Consumer Credit Act provides additional protection.
• Check the website address carefully. Fraudulent sites often use addresses that are similar to legitimate retailers but with slight misspellings or different domain extensions.
• Be cautious of marketplace sellers with new accounts, no reviews or who want to take the transaction off-platform.

3. Romance scams

Romance fraud occurs when criminals create fake profiles on dating websites, apps or social media to build a relationship with a victim before asking for money. These scams can continue for weeks, months or even years, and victims often suffer significant emotional as well as financial harm.

3.1 Warning signs

• The person you are communicating with wants to move the conversation off the dating platform quickly (to WhatsApp, email or phone).
• They claim to be overseas — often working on an oil rig, serving in the military or working for an international charity — and cannot meet in person.
• They profess strong feelings very quickly and the relationship intensifies rapidly.
• After building trust, they ask for money, often for an emergency — a medical bill, travel costs to visit you, a business opportunity or customs fees.
• They may ask you to receive or transfer money on their behalf, which could implicate you in money laundering.

3.2 How to protect yourself

• Never send money to someone you have only met online, regardless of the reason they give.
• Use reverse image search tools to check whether their profile photographs appear elsewhere on the internet.
• Be wary of people who always have an excuse for not meeting in person or video calling.
• Talk to someone you trust about the relationship — friends and family can often provide a more objective perspective.

4. Investment scams

Investment fraud involves criminals persuading victims to invest money in schemes that are either non-existent or worthless. These scams have become increasingly sophisticated, often using professional-looking websites, fake trading platforms and impersonation of legitimate financial firms.

4.1 Warning signs

• Guaranteed high returns with little or no risk — all genuine investments carry some degree of risk.
• Pressure to invest quickly before the "opportunity" disappears.
• Unsolicited contact from someone offering investment opportunities, particularly via social media, messaging apps or cold calls.
• Requests to download a trading app or platform you have not heard of.
• Difficulty withdrawing your money or being told you must pay a fee or tax before funds can be released.

4.2 How to protect yourself

• Check the Financial Conduct Authority (FCA) register to confirm that the company and individual are authorised.
• Check the FCA's warning list of firms known to be operating without authorisation or running scams.
• Be extremely cautious of cryptocurrency investment schemes promoted on social media, particularly those endorsed by celebrities (whose images are almost always used without consent).
• Seek independent financial advice before making significant investment decisions.

5. Social media fraud

Social media platforms are increasingly used as a vehicle for fraud, including:

• Account takeover. Criminals gain access to a person's social media account and send messages to their contacts asking for money or promoting scams.
• Fake competitions and giveaways. Posts claiming you have won a prize and asking you to provide personal details or pay a fee to claim it.
• Impersonation. Criminals create fake profiles impersonating real people or organisations to build trust before defrauding victims.
• Marketplace fraud. Fake listings on Facebook Marketplace, Gumtree and similar platforms for goods that do not exist.

6. Identity theft

Identity theft occurs when criminals obtain enough of your personal information to impersonate you, often to open bank accounts, take out loans or make purchases in your name.

6.1 How to reduce the risk

• Be careful about what personal information you share online. Information such as your date of birth, address, mother's maiden name and pet's name can be used to answer security questions.
• Shred or securely dispose of documents containing personal information.
• Check your credit report regularly for accounts or applications you do not recognise. You can access your credit report free through services such as ClearScore, Credit Karma or Experian.
• Consider placing a CIFAS protective registration on your record if you believe your details have been compromised.
• Opt out of the open electoral register to reduce the amount of your information that is publicly available.

7. What to do if you have been a victim

1. Contact your bank immediately if you have made a payment or shared your financial details. Your bank may be able to stop the transaction or recover your money.
2. Report to Action Fraud at actionfraud.police.uk or by calling 0300 123 2040. Action Fraud is the UK's national reporting centre for fraud and cyber crime.
3. Change your passwords for any accounts that may have been compromised. Use strong, unique passwords and enable two-factor authentication.
4. Report to the platform. If the fraud occurred on a social media platform, marketplace or dating site, report the fraudulent account or listing.
5. Seek support. Being a victim of fraud can be distressing. Victim Support (0808 168 9111) provides free, confidential support to victims of crime in England and Wales.