How to spot online scams and protect your money

Online scams are designed to catch us off guard, especially when we’re busy, stressed or doomscrolling. If you’re staring at something, thinking “is this real… or is it a scam?” you’re not being overcautious. You’re being smart. 

We’ll explore how to spot online scams by checking for: 

• Urgency or pressure 
• Payment method red flags 
• Weird links and email addresses
• “Too good to be true” offers
• Impersonation 

And if you think you’ve been scammed, we’ll cover what to do next, too. 

The goal isn’t to make you feel anxious online. It’s to help you feel informed so you can feel calm, confident and in control. 

At a glance: 

• What is an online scam? 
• How to spot an online scam? 
• 5 common online scams
• How to check if a company is real
• I’ve already clicked/ sent money. What can I do now?
• Pause to protect your money and your peace

What is an online scam?

An online scam is a deliberate attempt to pressure or trick you into handing over something valuable like your money, personal data, or login details. 

Fraud is a broader term. It includes scams, but also covers things like identity theft, where someone uses your details without you knowing. 

And just to reassure you, not everything that gives you a “hang on…” moment is necessarily a scam. 

Sometimes things feel suspicious simply because they’re unfamiliar, especially if it's a product or service you haven’t used before. The smart move is to pause, read a little more about how it works, and check it properly before you decide. 

The key is knowing what a real scam looks like, and how to check what’s real before you click.

How to spot an online scam

Scammers rely on us being human: tired, busy and distracted. One of the most powerful things you can do to protect yourself is pause and take some time to spot the signs.

5 key signs that something’s a scam

Most scams use the same tricks:

Your “before you click” checklist

If something doesn’t feel right: 

• Don’t click on the link (or download attachments)
• Go direct to the app or website by typing it in yourself
• Check the web address matches the link exactly (no extra letters or symbols)
•  Search “[company name] scam” and see what comes up
• If it’s financial, check the FCA register
• If you're concerned, report it using official channels 

We’ll cover more about how to check if companies are legitimate, and how to report online scams, later on.

5 common online scams

1. Phishing scams (emails, messages and fake login pages)

Phishing scams often try to trick you into sharing your information by pretending to be someone trustworthy, like your bank or a delivery company. 

Scammers send 3.4 billion phishing emails every day. That’s enough for almost half the planet to get one daily. 

Common themes include: 

• “Verify your account”
• “Review unusual login attempt”
• “You missed a delivery”
• “You’ve been refunded” 

‍While poorly written emails can be a useful clue, with AI tools, phishing can sound and look a lot more convincing. So focus on the behaviour, as well as the spelling mistakes.

2. WhatsApp scams

WhatsApp scams often start with a message that looks innocent, like: “Hi Mum/Dad, I’ve got a new number”, that quickly turns into a request for money. 

Scammers rely on urgency and emotion: 

• “I’m stuck” 
• “I’m in danger” 
• “I need help now!” 

Their goal is to stop you from thinking things through. Some are even using AI to try to clone people’s voices, so it’s important to be careful. 

What to do: 

• Pause and check their identity: Try calling their old number, or ask a question only they would know 
• Don’t send money just because the message sounds convincing. Be particularly wary of unusual payment details 

‍Loqbox tip: Set a verbal codeword with family, friends and colleagues for money requests. If they can’t say it, it’s a guilt-free no.

3. Facebook Marketplace scams

Online marketplaces are great for finding second-hand bargains, but they’re becoming a playground for scammers. 

Common tricks include: 

• Fake sellers disappearing after payment
• Buyers sending fake payment links
• Delivery courier scams 

‍Loqbox tip: Use in-app payment methods where possible, or cash on collection, and don’t give into pressure to move the conversation to another platform.

4. TikTok scams

Social media is amazing for entertainment, finding ideas, and learning new things. But it’s also become a hotspot for fraud dressed up as “side hustles” or “giveaways”. 

Watch out for: 

• Fake giveaways 
• Money flipping (“Send me £100 and I’ll turn it into £1,000")
• Dodgy investment or Crypto opportunities promising quick results, guaranteed returns, or secret strategies 
• Finfluencers (financial influencers) giving misleading recommendations or advice 

Loqbox tip: Watch out for the warning signs we covered above, or read our article to find out how to use advice from Finfluencers.

5. Scams impersonating financial services, government departments and agencies, or major delivery companies

Some of the most convincing scams are the ones that look “official”. They might pretend to be a well-known brand or company like your bank, HMRC (His Majesty's Revenue and Customs), or a delivery company. 

Scammers often use real logos, familiar wording, or urgent warnings to push you into acting quickly and get you to drop your guard.

Common examples include:

• HMRC scams: text messages or emails pretending to be about tax refunds and penalties
• DVLA (Driver and Vehicle Licensing Agency) scams: telling you you owe tax, are due a refund, or need to update your details 
• Delivery scams: saying you need to pay a delivery charge to (like Royal Mail, DHL or another delivery company)
• Bank impersonation: someone pretending to be on your bank’s “fraud team” calls you and doesn’t go through security checks.
• Refund/chargeback scams: Emails and messages saying, “You’ve been refunded, click here”

Loqbox tip: Follow the “before you click” checklist, and keep reading to learn how to check the company is real. 

How to check if a company is real

Before you trust a company with your money or personal information, do a quick sense check: 

• Does it feel off? Any of the signs we mentioned earlier can be red flags
• Do their details, like the website or address, exist IRL? Google the company to see if there’s a genuine website, support email address, or FAQ pages that actually explain how the product or service works
• Do the reviews sound balanced? If they’re all 5-star, were all posted recently, or all sound like they were written by the same person, they could be fake 
• If it’s financial, check the Financial Conduct Authority (FCA)register. This is one of the best ways to confirm whether a company is authorised to operate in the UK. 
• If you’re speaking to your bank, hang up and dial 159. It’s a free way to securely call your bank. 

I’ve already clicked/ sent money. What can I do now?

The safest way to respond to any scam is to take action: 

• Stop replying
• Screenshot any details
• Contact your bank ASAP
• Change your passwords,starting with email, and set up Multi Factor Authentication

Report the scam: You can forward scam texts to 7726, emails to report@phishing.gov.uk, and report scams to Action Fraud.

Extra steps to protect yourself from follow-on scams

Unfortunately, if scammers are successful they’ll often try to scam you again. 

To protect yourself: 

• Don’t send more money to “recover” the funds
• Don’t share screenshots of what’s happened publicly, especially if they include personal data
• Don’t download support tools or remote access apps, even if someone sounds helpful or professional 
• Keep an eye on your accounts for unusual activity

Check your credit file for any unusual credit checks (especially if you shared personal details like your address, date of birth, or ID)

Pause to protect your money and your peace

We’re all human. So if you take one thing from what we’ve said, let it be this: it’s okay to slow down. 

Feeling more informed is one of the best ways to feel safer online. If you want to keep learning how to spot online scams, the National Cyber Security Centre has some great information about how to stay safe online.

What to do if someone claims to be Loqbox (or you’re worried about the safety of your membership)

If you ever get a message from someone claiming to be Loqbox and you’re unsure, it’s always okay to double-check. 

Loqbox will never ask you to: 

• Share your password 
• Send money to a new account to “keep it safe” 
• Download remote access tools so someone can “help” you 

If you’re worried, the safest thing to do is contact our friendly member support team who will be able to guide you about what to do next.