Banking Scam Email Checker
Check if a bank email is real or a scam — covers HSBC, Barclays, Lloyds, NatWest, Halifax, Santander and Monzo impersonation, plus the verification rule that defeats almost every banking phishing email.
Last reviewed: 9 May 2026 · ScamSupport research
Real Banking Scam Email Examples
Banking phishing emails are some of the most dangerous scams, giving criminals direct access to your money. UK banks including Barclays, HSBC, Lloyds, NatWest, and Nationwide are the most commonly impersonated. Scammers often combine urgency with financial fear tactics to trick you into revealing passwords and One Time Passcodes (OTPs).
Example 1: Suspicious Activity Alert
From: security@barclays-alerts.com
Subject: ALERT: Suspicious Transaction Detected - Confirm Immediately
- Fake domain: Not from Barclays (should be @barclays.co.uk)
- Urgency and fear: "ALERT" and "IMMEDIATELY" create panic
- Requests verification: Asks you to "confirm transaction details"
- Malicious link: "Verify Now" button leads to fake banking site
- Real banks never ask: For passwords, PINs, or security codes via email
Action: Delete immediately. Log into your real bank account (type the URL yourself) or call your bank using the number on the back of your card to verify any alerts.
Example 2: Account Verification Scam
From: noreply@lloyds-verify.co.uk
Subject: Urgent: Verify Your Banking Details Now - Account Will Be Closed
- Domain mimicking: "lloyds-verify" looks official but is fake
- Threat and deadline: "Account will be closed" combined with urgency
- Generic request: Asks for sort code, account number, card details
- No personalisation: "Dear Valued Customer" not your actual name
- Grammar errors: Professional banks don't have spelling mistakes
Action: Your bank account is not closed via email. Call your bank directly to verify. Never provide account details through email.
Example 3: Wire Transfer Fraud
From: payments@hsbc-transfer.info
Subject: Action Required: Verify Wire Transfer Details
- Financial pretext: Wire transfers bypass normal protections
- False authority: Mimics banking domain structure
- Requests action: "Confirm transfer" with suspicious link
- Missing security: Doesn't reference your actual transactions or accounts
- Emotional pressure: "Time-sensitive" transfer with tight deadline
Action: Banks never initiate wire transfer verification via email. Always use your online banking app or call your bank directly.
What Makes Banking Scams Dangerous
- Direct financial access: Criminals can drain your account if they gain login credentials
- OTP interception: Fake sites capture your One Time Passcodes before you complete login
- Wire transfer fraud: Millions can be moved to scammer accounts in minutes
- Credential harvesting: Stolen passwords give access to linked accounts
- Money mule recruitment: Some scams try to make you a "money mule" - illegal and dangerous
How to Identify Fake Banking Emails
Check the Domain
Real emails from: @barclays.co.uk, @hsbc.co.uk, @lloyds.com, @nationwide.co.uk, @natwest.com
Scam domains: @barclays-secure.com, @hsbc-alerts.info, @lloyds-verify.co.uk
Legitimate Banks Never:
- Ask for passwords, PINs, or security codes via email
- Ask you to confirm account details via email links
- Send attachments (emails with attachments are red flag)
- Use generic greetings (they address you by name)
- Request wire transfer verification via email
- Include spelling or grammar errors
Red Flag Phrases
Never trust emails containing:
- "Verify immediately" or "confirm urgently"
- "Your account will be closed"
- "Unusual activity detected" (with request to verify)
- "Click here to protect your account"
- "Temporary limitations"
- "Your session has expired"
If You Think You've Been Targeted
- Do not click any links in the email
- Close the email and delete it
- Go directly to your bank's website (type the URL yourself)
- Call your bank immediately using the number on your card or statement
- Report to Report Fraud: reportfraud.police.uk
- Monitor your account for fraudulent transactions
- Change your password from a secure device
If You've Already Given Information
- Call your bank immediately - most fraud can be reversed within hours
- Change your password right away
- Monitor transactions closely
- Enable two-factor authentication if your bank offers it
- Check your credit report for fraudulent accounts
Use ScamSupport to Protect Your Banking
ScamSupport's AI-powered system instantly flags banking phishing emails before you click suspicious links. Protect yourself from:
- Fake bank domain impersonation
- Credential harvesting attempts
- Wire transfer fraud schemes
- Account lockout threats
- Money mule recruitment scams
Bank Contact Information (Verify Before Clicking)
If you receive a suspicious banking email, contact your bank directly using these VERIFIED numbers:
- Barclays: Check your card for the number
- HSBC: Check your card for the number
- Lloyds: Check your card for the number
- NatWest: Check your card for the number
- Nationwide: Check your card for the number
Secure Your Banking with VPN
When banking on public WiFi, always use a trusted VPN like NordVPN to encrypt your connection and prevent interception of your banking details.
Affiliate disclosure: as a NordVPN partner, ScamSupport may earn a commission if you sign up via this link — this doesn't change our recommendation or the price you pay. Full affiliate policy →
Get NordVPN Protection