How to Investigate a Scam: Practical Steps for UK Victims
Discovering that you may have been scammed can be upsetting and stressful. Acting quickly can help limit further loss, protect your personal information and preserve evidence. Whether the scam involved an online purchase, an investment, a romance, a business transaction or someone impersonating a trusted organisation, a careful investigation starts with the facts.
What does it mean to investigate a scam?
Investigating a scam means gathering and checking information to understand what happened, who may have been involved and what steps could help prevent further harm. This might include reviewing messages and payment records, checking the details of a business or website, identifying links between accounts and reporting the matter to the appropriate organisation.
Some enquiries can be carried out safely by the victim. More complex cases may require advice from a solicitor, the police, a bank or a suitably qualified private investigator. No investigation can guarantee that a scammer will be identified or that lost money will be recovered.
What to do first
- Contact your bank or payment provider. Use the number on your bank card or the provider’s official website. Explain what happened and ask whether the payment can be stopped, recalled or disputed. If you shared card details or online banking credentials, ask the bank to secure your account.
- Stop communicating with the suspected scammer. Do not send more money, share verification codes or install software at their request. Be wary of anyone who contacts you claiming they can recover your money for an upfront fee.
- Secure your accounts and devices. Change compromised passwords from a trusted device, enable two-step verification and contact your mobile or email provider if you think an account has been taken over. If you installed remote-access software, seek trusted technical support.
- Preserve evidence. Save emails, messages, call logs, payment confirmations, receipts, website addresses, usernames and documents. Keep original files where possible and make a note of dates, times and what was said.
- Report the scam. In England, Wales and Northern Ireland, report fraud through the official Report Fraud service. In Scotland, contact Police Scotland or report through its official channels. Contact the police on 101 if you need to discuss a non-emergency crime; call 999 if someone is in immediate danger.
How to check a person, business or offer
Scammers may use real company names, convincing websites, copied photographs or the details of genuine employees. Check information independently rather than relying on contact details or links supplied by the person who approached you.
- Search for the business using a separate browser search, and compare its official contact details with the ones you were given.
- Check a company’s details on Companies House, but remember that registration alone does not prove a business is genuine or trustworthy.
- For financial services or investments, check the firm and its contact details against the Financial Conduct Authority’s official register and warning list. A clone firm may copy the details of a legitimate business.
- Look closely at the website address, email domain, payment instructions and any sudden changes to bank details.
- Be cautious of pressure to act quickly, guaranteed returns, secrecy, unusual payment methods or requests to move a conversation to a private messaging app.
Online searches can reveal useful clues, but a lack of negative results does not prove that an offer is safe. Reviews and social media profiles can be fabricated or manipulated.
Build a clear record of what happened
A simple timeline can make it easier to explain the case to your bank, the police or an adviser. Record when contact began, what was promised, what information was shared, how payments were made and when you first became suspicious.
Keep a separate list of people, phone numbers, email addresses, websites, bank account details and payment references connected with the incident. Do not alter screenshots or delete messages. If you need to share evidence, provide copies and retain the originals.
When to consider professional help
A solicitor may be able to advise on your legal position, while a specialist investigator may be able to conduct lawful enquiries to verify information or identify connections between people, companies and publicly available records. Before engaging an investigator, ask what methods will be used, what the work will cost, how information will be handled and what outcomes are realistic.
In the UK, private investigators do not have special powers to access private accounts, obtain confidential communications, impersonate officials or bypass security systems. Any enquiries should comply with relevant privacy and data-protection laws. Avoid anyone who promises guaranteed results, demands secrecy or suggests obtaining information unlawfully.
Beware of recovery scams
After a scam, victims may be targeted again by people claiming to be recovery agents, lawyers, officials or investigators. They may say they have located the money and ask for an advance payment, tax, insurance fee or access to your bank account. Treat unexpected recovery offers with caution and verify any organisation independently before responding.
Getting support
If you have lost money, contact your bank promptly and report the incident through the appropriate official service. You may also wish to speak to a trusted person or a recognised support organisation. Being scammed is not a reason for embarrassment; reporting what happened can help establish a record and may assist with wider enquiries.
A calm, evidence-led approach is usually the safest way to investigate a scam. Preserve what you have, report it promptly, protect your accounts and be cautious of anyone promising an easy fix.
7 Tips for Investigating and Reporting Suspected Scams
- Check the sender’s address and website URL carefully.
- Search for the organisation using trusted sources.
- Verify claims by contacting the organisation directly.
- Look for spelling errors and unusual pressure tactics.
- Check reviews, warnings and scam reports online.
- Never share passwords, codes or bank details.
- Save evidence and report suspected scams to the proper authorities.
Check the sender’s address and website URL carefully.
Check the sender’s email address and website URL carefully before replying, clicking a link or sharing information. Scammers often use addresses and web pages that imitate trusted organisations, with small changes such as extra words, swapped letters or unusual domain endings. Rather than using links in an unexpected message, visit the organisation’s official website directly or contact it using details you find independently.
Search for the organisation using trusted sources.
Search for the organisation using trusted, independent sources rather than relying on links or contact details provided in an unexpected message. Check its official website and, where relevant, verify its registration or regulatory status through the appropriate UK register. Compare phone numbers, email addresses and website URLs carefully, as scammers may imitate genuine organisations or use small variations in their details. Remember that appearing on a register does not, by itself, guarantee that an organisation or offer is safe.
Verify claims by contacting the organisation directly.
Verify claims by contacting the organisation directly using details from its official website, app or documents you already trust—not a phone number, email address or link provided in a suspicious message. Ask whether the request, payment or offer is genuine, and take time to check before sharing personal information or sending money.
Look for spelling errors and unusual pressure tactics.
Look closely at messages, websites and documents for spelling mistakes, awkward phrasing or inconsistent branding. These clues do not prove something is a scam, but they can warrant caution. Be especially wary of unusual pressure tactics, such as demands to act immediately, keep the offer secret or pay before you can verify the details. Take time to check claims using contact information from an independent, trusted source.
Check reviews, warnings and scam reports online.
Check reviews, warnings and scam reports online before dealing with a person, business or website. Search for its name alongside terms such as “scam”, “fraud” or “complaint”, and look for reports from reliable sources, including official regulators and consumer-protection organisations. Treat reviews with care: they can be fake, outdated or deliberately misleading, and finding no warnings does not prove an offer is genuine. Verify important details independently using official contact information rather than links or numbers provided by the person who approached you.
Never share passwords, codes or bank details.
Never share your passwords, one-time passcodes or full bank details with someone who contacts you unexpectedly, even if they claim to be from your bank, the police or a trusted company. Genuine organisations will not ask you to reveal your password or verification code. If you are unsure, end the conversation and contact the organisation using a phone number or website you have found independently. If you have already shared any details, contact your bank straight away and change your passwords from a trusted device.
Save evidence and report suspected scams to the proper authorities.
Save all evidence relating to a suspected scam, including emails, messages, call logs, receipts, payment confirmations, website addresses and usernames. Keep original files where possible, note key dates and events, and avoid editing or deleting anything. Report the incident promptly to your bank or payment provider and to the appropriate authorities, using their official contact details. Clear, well-organised evidence can help them assess what happened and decide what action to take.