How to recognise a phishing email, text or scam message in the UK
Quick answer: Check the real sender, the destination of links and what the message is asking you to do. Be cautious of artificial urgency, requests for passcodes, payments or personal details.
Check who really sent the message
Do not rely on the display name alone. Inspect the sender address and the destination domain before opening a link.
Be wary of pressure or secrecy
Scam messages often try to create urgency or ask for information that a legitimate organisation would not normally request in that way. Verify the request using a trusted contact route.
Go directly to the genuine service
Open the organisation’s official website or app yourself instead of following the message link. Use UK reporting guidance if you believe the message is fraudulent.
Source & methodology
The NCSC gives UK-specific guidance for spotting scam messages and calls.