I've Received a Text Message Asking for Payment — What Should I Do?
Smishing attacks are surging in the UK, with 50% of mobile users receiving suspicious texts. Here's exactly what to do if you get a scam text asking for money.
If you've received a text message asking you to make a payment, click a link, or "verify" your account — stop. Don't tap anything. You may be the target of a smishing attack.
Smishing (SMS phishing) is one of the fastest-growing scam methods in the UK. 50% of UK mobile users received a suspicious text between November 2024 and February 2025, and reports of SMS scams rose by 40% between 2024 and 2025.
What is smishing?
Smishing is when criminals send text messages designed to trick you into:
- Clicking a malicious link that leads to a fake website designed to steal your login credentials or bank details
- Making a payment to a fraudulent account
- Calling a fake number where someone pretends to be your bank, HMRC, or another trusted organisation
- Downloading malware onto your phone
Common smishing scam texts in the UK
- "Royal Mail: Your parcel could not be delivered. Pay a £1.99 redelivery fee here..."
- "HMRC: You are owed a tax refund of £268.50. Claim here..."
- "Your bank: Unusual activity detected on your account. Verify here..."
- "Hi Mum/Dad, I've broken my phone. This is my new number. Can you send me £200 for..."
- "PayPal: Your account has been limited. Click here to restore access..."
The scale of the problem
- £11.4 billion was lost to scams in the UK in a 12-month period — equivalent to 0.4% of GDP (CIFAS/GASA, 2024)
- The average scam victim lost £1,443
- 100 million suspicious messages were reported to mobile operators via 7726 in the year to April 2025
- 71% of scam victims don't report the crime
What to do if you receive a suspicious text
Step 1: Don't click any links
No matter how urgent the message seems, do not tap on any links. Legitimate organisations will never ask you to enter sensitive details via a text message link.
Step 2: Don't reply
Replying confirms your number is active, which can lead to more scam messages.
Step 3: Report it
Forward the text to 7726 (spells "SPAM" on your keypad). This reports the number to your mobile operator, who can investigate and block it.
Step 4: Report to Action Fraud
If you've lost money or shared personal details, report it to Action Fraud on 0300 123 2040 or at actionfraud.police.uk.
Step 5: Contact your bank
If you've clicked a link and entered any banking details, call your bank immediately using the number on the back of your card.
Step 6: Check your accounts
Monitor your bank accounts and credit file for any unusual activity in the days and weeks following the incident.
How to tell if a text is genuine
- Your bank will never ask you to move money to a "safe account"
- HMRC will never text you about refunds — they use post
- Delivery companies will redirect you to their official website, not ask for payment via text
- Check the sender — scam texts often come from random mobile numbers, not named organisations
If you're asked to make a payment
If any communication — text, email, or call — asks you to send money to a bank account, verify who you're paying before you transfer anything.
WhoAmIPaying checks whether the bank account matches the claimed payee, verifies company details, and flags potential risks — all in seconds.