Why PIP claimants are aggressively targeted

Personal Independence Payment (PIP) is a benefit paid to people with long-term ill health or disability. PIP claimants are deliberately and aggressively targeted by impersonation scammers because (a) they often depend on PIP financially, making the threat of suspension uniquely effective, (b) many PIP claimants live with conditions that affect cognitive processing under stress, and (c) the DWP’s review and reassessment process is opaque enough that fake reviews are hard to distinguish from real ones. The cruelty is deliberate.

Three PIP scam variants currently in circulation

Phone call from someone claiming to be from the DWP’s PIP assessment team

The caller claims your PIP claim is being reviewed and asks you to verify your bank details, National Insurance number, address, date of birth, and details about your medical condition. The caller may threaten that “PIP will be suspended within 24 hours” unless you complete the verification immediately.

Red flags:

  • DWP never phones to ask for your bank details. Bank details on file for PIP payment are changed only via the official process: by writing to DWP at the address on your benefit letters or by phoning the PIP helpline yourself on 0800 121 4433.
  • DWP does not threaten suspension via phone call. Real PIP suspensions follow a formal written process with at least 14 days’ notice, an appeal mechanism, and Mandatory Reconsideration rights.
  • The caller may have personal details about you — name, address, date of birth, possibly even details about your condition. None of this proves they’re from DWP; it proves they have access to data-breach material or have been monitoring your social media.
  • “Pay a small administrative fee” requests are a hallmark variant: real DWP never charges fees for benefit administration.

From: DWP or DWP-PIP (spoofed sender ID)

Body: “DWP: Your PIP claim requires urgent reassessment. Complete the form at dwp-pip-review[dot]uk to maintain payment.”

Red flags:

  • DWP does not send PIP reassessment links by SMS. Real PIP reassessments arrive by post with an AR1 or PIP1 form (depending on the review type), a freepost return address, and 1 month to respond.
  • Domain check. Real DWP communications use gov.uk exclusively. dwp-pip-review.uk, pip-reassessment.com, universalcredit-pip.uk are all clones.
  • The phishing form asks for full name, NI number, address, date of birth, bank sort code and account number, AND uploaded photo ID. This is more than enough material for identity fraud lasting years — opening accounts, applying for credit, claiming other benefits in your name.

From: a non-DWP number (or a UK mobile)

Body: “DWP: An additional PIP payment of £347.62 has been authorised for you. Confirm your bank details to release the payment: pip-backpayment[dot]uk”

Red flags:

  • PIP back-payments are deposited automatically into the bank account already on file once the calculation is approved. There is no “confirm to release” step.
  • Specific decimal amount is designed to feel more authentic than a round number. Real-looking specificity is a manipulation tactic, not evidence of authenticity.
  • The page asks for sort code, account number, and a recent bank statement upload. The statement is then used to open accounts or apply for credit fraudulently.

How real DWP-PIP communications work

What to do if you’ve received a PIP scam

  1. Don’t click any link or share any information. Hang up if it’s a phone call.
  2. Forward SMS to 7726. The free UK spam-reporting service routes it to your network for blocking.
  3. Verify any genuine PIP query by phoning the PIP helpline yourself on 0800 121 4433 (Mon-Fri 9am-5pm).
  4. Report to Report Fraud at reportfraud.police.uk if you clicked or entered details.

If you’ve already shared bank details or ID

  1. Call your bank’s fraud line immediately using the number on the back of your card.
  2. Open a free CIFAS Protective Registration at cifas.org.uk — this flags your credit file so any new credit application requires extra verification. £25 for 2 years.
  3. Check your credit report at Experian, Equifax or TransUnion for unauthorised applications.
  4. If you shared ID documents, consider replacing the ID (passport, driving licence) if practical, especially if you uploaded a clear photo.
  5. Read our UK Recovery Guide for the full identity-protection playbook.
Use the Scam Message Scanner →