Why DWP and Universal Credit scams target the most vulnerable

DWP and Universal Credit impersonation scams target the UK’s most financially vulnerable claimants — a deliberate cruelty in the criminal economy. The Cost of Living Payment scheme between 2022 and 2024 generated waves of impersonation campaigns that haven’t stopped. Report Fraud and the National Cyber Security Centre have issued repeated warnings; the DWP’s own consumer-protection unit estimates millions of impersonation texts have been sent to UK households in the last two years.

Three current DWP scam-text variants

From: DWP or GOV-UK (spoofed sender ID)

Body: “DWP: You are entitled to a Cost of Living Payment of £299. To receive payment, confirm your bank details here: dwp-cost-of-living[dot]com”

Red flags:

  • DWP never asks for bank details via text. Cost of Living Payments and Universal Credit are paid automatically into the bank account already on file. There is no “confirm your details” step.
  • The Cost of Living Payment scheme ended in February 2024. Texts about “new” or “additional” Cost of Living payments in 2026 are all fraudulent — the scheme is closed.
  • The domain. Real DWP communications use gov.uk. Domains like dwp-cost-of-living.com, cost-of-living-payment.uk or universalcredit-payment.com are typosquats. gov.uk is reserved for UK government; criminals cannot register subdomains.
  • The lure is specific. £299 was the genuine Cost of Living Payment amount for some categories — criminals research real benefit values to add credibility.

From: Universal Credit or DWP (spoofed)

Body: “Universal Credit: Your account is under review. To prevent your payment being suspended, complete identity verification at: uc-verify-uk[dot]com”

Red flags:

  • Universal Credit reviews and identity checks are handled exclusively via your online Universal Credit account at www.gov.uk/sign-in-universal-credit or by phoning the Universal Credit helpline on 0800 328 5644. Never via a third-party verification page.
  • “Payment suspension” urgency is engineered to provoke a panic response in claimants who cannot afford an interruption to benefits.
  • The page asks for your National Insurance number, full name, address, date of birth, bank details, and ID document upload. This is more than enough to commit identity theft, open accounts in your name, or apply for credit fraudulently.
  • The same playbook hits PIP claimants with “PIP renewal verification”, ESA claimants with “ESA review”, and State Pension recipients with “Pension records update”.

From: HMRC-DWP (spoofed)

Body: “DWP: A back-payment of £457.86 is available on your benefits claim. Confirm your details to release the payment: dwp-backpayment[dot]uk”

Red flags:

  • DWP back-payments are deposited automatically into the bank account already on file once the calculation is approved. Claimants do not need to take action to “release” them.
  • Specific decimal amount. Criminals know that £457.86 feels more real than £500. Real-looking specificity is a manipulation tactic, not authenticity.
  • The page asks for sort code, account number, and a copy of a recent bank statement. The bank statement upload is then used to open accounts in your name or apply for credit.

How DWP and Universal Credit actually communicate

Real DWP communications follow strict patterns. Anything outside these is suspicious:

What to do if you’ve received a DWP scam text

  1. Don’t click any link. Even just loading the page confirms your number is active and the criminal will target you again.
  2. Forward to 7726. The free UK spam-reporting service routes it to your mobile network’s fraud team.
  3. Report to Report Fraud at reportfraud.police.uk if you clicked or entered details.
  4. If you have a genuine query about benefits, sign into your Universal Credit account directly at www.gov.uk/sign-in-universal-credit or phone the official helpline.

If you’ve already entered your details on a phishing page

The risks split into two: financial loss (bank-account fraud) and identity fraud (longer-term):

  1. If you entered bank details: call your bank’s fraud line immediately (number on the back of your card). Card-fraud transactions are typically chargebackable; faster-payments transactions may be recallable.
  2. If you uploaded ID documents: report to Report Fraud at 0800 854 440 (or reportfraud.police.uk), open a free CIFAS Protective Registration to flag your record against credit-application fraud (Cifas.org.uk), and check your credit report (Experian, Equifax, TransUnion) for unauthorised applications.
  3. Read our UK Recovery Guide for the full identity-protection playbook including how to dispute fraudulent applications on your credit file.
Use the Scam Message Scanner →