Here are some of the latest scams doing the rounds, including a very clever banking scam, another involving supermarket Lidl, and a look at several of the other current scam alerts.

A clever banking scam

A Club Lloyds account is advertised as offering a range of benefits, including no debit-card fees when used overseas, the chance to choose a lifestyle benefit each year, monthly credit interest, access to fixed savings rates of up to around 6.25% AER/gross, mortgage offers, and preferential travel money rates.

According to Which?, a very convincing phishing scam has been circulating, linked directly to the recently announced and widely reported changes to Club Lloyds account fees. This means that if anyone receives the scam email and performs a quick web search to check the details, they will find information that appears to back it up. Lloyds is an especially effective target in this regard, being the UK’s largest banking group, so even a scattergun phishing campaign is likely to reach a good number of genuine Lloyds customers.

However, it is still easy enough to spot as a scam due to an obvious giveaway: a bizarre-looking sender address. Which? chose not to publish it, but confirmed that the domain (the part after the “@”) had nothing whatsoever to do with Lloyds or banking.

The scam works by encouraging people to click “to read the full update and FAQs.” The site this linked to is now offline, but when active it took people to a fake Lloyds login page designed to steal their bank details. Which? warns that this often triggers a second stage. Victims may receive a call days or weeks later, supposedly from the Lloyds fraud team, with the caller quoting part of their stolen password to sound convincing. They then attempt to obtain one-time passcodes, which allows the criminals to log in to the real account in real time and drain funds.

Which? advises people to avoid clicking links in unsolicited emails, even when the subject matter looks entirely plausible. Instead, it recommends navigating directly to the official website via the browser bar. As scammers increasingly draw on AI tools to generate these emails, we can expect them to become even more convincing.

Lidl advert scam

Last month the Irish Mirror reported a series of scam Lidl adverts circulating on TikTok and other social media platforms, offering high-value goods at what looked like impossibly low prices.

Which? has since highlighted a further set of fake Lidl ads promoting electric bikes, coffee machines, lounge sets and similar items. The ads link to a scam website registered earlier this year. Fraudsters have impersonated Lidl before; last year Which? issued a warning about fake promotions for Lidl’s sell-out “mystery boxes,” where people received nothing and discovered that several unauthorised transactions had been taken from their accounts.

This type of scam is known as a purchase scam. It involves paying for an item online and receiving either something that does not match the description, or nothing at all. UK Finance data cited by Which? shows that in the first half of 2025, £53 million was lost to purchase scams.

Other trending scams

Which? has also identified a number of other scams currently circulating:

• Scam texts impersonating The Goat Agency. These messages claim to offer a flexible, remote job providing product reviews. They appear convincing because they mimic legitimate companies. Victims are shown supposed “earnings” before being asked to invest money to complete higher-value tasks. Any money paid in is unrecoverable.
  
  
• A copycat Sports Direct website. This fake site uses the retailer’s branding and lists heavily discounted items to look genuine. Which? found that the site was created earlier this year. Anyone entering their details is sending them directly to fraudsters.
  
  
• A suspicious email claiming to be from Disney+. The email states that there has been a problem renewing the recipient’s subscription, and invites them to follow a link to fix the issue. This leads to a phishing page.
  
  

Suspicious emails can be reported by forwarding them to report@phishing.gov.uk, and suspected phishing websites can be reported through the National Cyber Security Centre’s scam website reporting service.

More current scam alerts can be found via Which?’s ongoing scam tracker.

Scam Sharer tool

For information on how to share scam warnings and help protect others, see Which?’s Scam Sharer tool.

CLICK HERE TO DONATE TO OUR CROWDFUNDER

HELP US BECOME STRONGER SO THAT WE CAN CONTINUE TO DELIVER POWERFUL CITIZEN JOURNALISM!