From fake HMRC emails to SIM swaps: The scams targeting Brits now

From phishing emails that imitate HMRC to criminals taking control of bank accounts and mobile numbers, identity scams can take many different forms.

Even a small amount of personal information, such as a full name, date of birth or phone number, can help fraudsters impersonate someone, access their accounts or apply for credit in their name.

With this in mind, ID card specialists ID Card Centre have shared expert tricks on spotting and stopping five common ID scams.

1. Be aware of identity phishing scams

Phishing, which describes the act of sending fraudulent emails with the purpose of stealing personal information, is growing in popularity among cybercriminals. In fact, there has been a 344% rise in worldwide searches for ‘phishing’ in the past five years, according to Google Trends.

These fraudulent emails look like they’re from reputable companies, such as banks or HMRC, and claim to offer tax rebates or flag suspicious activity.

They will often include a hyperlink and will ask for personal details (such as a full name, date of birth, address, bank details and National Insurance Number) to impersonate victims.

To avoid phishing scams, verify the company over the phone or in person before submitting any personal data.

2. How to avoid bank account takeovers

Once cybercriminals have stolen someone’s personal information, they are able to access bank and retail accounts, such as online banking and personal savings.

They can ‘take over’ bank accounts by impersonating a victim, changing passwords and moving funds without their knowledge.

With global searches for ‘online banking scam’ reaching a five-year high in December 2025, there’s never been a better time to stay alert. Remember to change any old passwords, use unique passwords with a combination of upper- and lower-case letters and numbers, and enable two-factor authentication.

3. Remember to set up a SIM PIN

The problems don’t stop there. With personal data, scammers can contact mobile networks and ask for a victim’s number to be transferred to their SIM. This lets cybercriminals bypass identity verifications, such as one-time passcodes (OTPs), which are used to prove identity in real time.

OTPs can give scammers access to online banking apps and payment platforms, like PayPal, and let them reset email passwords and authorise large payments.

To avoid this scam, ensure all mobile devices have a SIM PIN, which is a 4-to-8-digit code unique to a single SIM card.

Go to Settings > Cellular/Mobile Data > SIM PIN on an iPhone or Settings > Security > Other Security Settings > Set up SIM card lock on an Android.

4. Regularly check credit reports for synthetic identity theft

Synthetic identity theft describes the practice of mixing real and fabricated personal information to create a fake identity.

For example, cybercriminals may use a fake name and address alongside a legitimate National Insurance Number stolen from a victim.

With this, they can build a credit profile that will let them make large payments and take out loans.

By regularly checking their credit files with agencies like Experian and ClearScore, people are less likely to fall victim to synthetic identity theft.

5. Think twice before sharing personal information on social media

Social media is the ideal place for cybercriminals to steal personal information, such as birthdays, full names and photos.

With this information, they can create fake profiles and contact a victim’s friends or family asking for passwords or money.

Videos posted on social media can also be used for AI voice cloning scams, which is when artificial intelligence mimics the sound of someone’s voice.

To avoid social media impersonation and AI voice cloning scams, think twice before making profiles public and sharing any personal information.

By following these steps, Brits are less likely to fall victim to identity fraud in 2026.