🇬🇧 UK

How can I tell whether a suspicious government text is genuine?

Looking for US rules? → US money answers

UKPublished 6 October 2026 · Written by BuyMeWhiskey Editorial Team · How we check facts

Treat an unexpected government-themed text as untrusted until you verify it independently. Do not use the message’s link or phone number; check the real organisation through GOV.UK or another known channel, and report suspicious texts to 7726.

Next question: Are emailed checks for jobs usually a scam? →

Received a suspicious message? Follow GOV.UK’s official phishing guidance and report the text instead of replying to it.

Report suspicious messages on GOV.UK

A familiar name is not proof of authenticity

Scammers often borrow the names of departments, councils, banks, delivery companies and other organisations because familiarity reduces hesitation. The fact that a text mentions GOV.UK, HMRC, a council or another recognisable body does not establish that the sender is genuine.

GOV.UK’s current advice is simple: do not give out private information, reply to suspicious texts, click unknown links or download attachments when you are unsure that a message is genuine.

Treat the embedded link as hostile until checked

A scam text commonly tries to push you through a link rather than asking you to make a decision through the organisation’s normal website. The destination may imitate a legitimate sign-in page, payment form or identity check.

The safest verification method is to ignore the link and open the organisation’s official website yourself. Type the address into your browser or find the relevant service through GOV.UK, rather than copying the address from the message.

What 7726 is for

The National Cyber Security Centre says most UK phone providers participate in a service that lets customers report suspicious texts to 7726. Forwarding the message allows the provider to investigate the origin and potentially block or ban the sender.

GOV.UK gives the same reporting route for suspicious texts. The report is useful even when you have not lost money because it can contribute to wider action against the sender.

What to do if you already clicked

Do not assume that clicking a link automatically means your bank account is compromised. The risk depends on what happened next. If you entered a password, change that password through the genuine service. If you disclosed bank or card details, contact the bank using a trusted number and explain what happened.

If you downloaded software or gave remote access, disconnect the affected device from the network where appropriate and use trusted cyber-security guidance. If money was taken, report the fraud promptly rather than waiting to see whether it reverses itself.

Common government impersonation themes

Refunds or rebates that require a payment or bank login.
Unpaid fines that demand immediate action.
Tax messages promising a refund or threatening a penalty.
Parking or delivery notices with a payment link.
Visa or immigration messages requesting documents or money.

None of those themes is proof of fraud by itself; legitimate organisations can contact people about real cases. The giveaway is often the method: pressure, an unexpected link, a request for credentials, or instructions that bypass the organisation’s normal process.

Verify through an independent route

Suppose a message claims to come from a bank. Do not use the phone number supplied by the text. Open the bank’s official app or use the number printed on the back of the card. If the message claims to be from a government department, navigate to the relevant GOV.UK service and check whether the communication makes sense in the context of a case you already know about.

Report even if no money was lost

GOV.UK and the NCSC encourage reporting suspicious messages. If you are a victim of fraud, use the appropriate fraud-reporting route and tell your bank or payment provider immediately when money or account access is involved.

Use an independent route to test the claim

A useful way to handle a suspicious government message is to separate the claim from the contact route. If the text says you owe money, have missed a deadline or need to prove your identity, do not use the message itself to decide whether the claim is real. Open the relevant official website independently and see whether the same issue appears in your account or service record.

This matters because a genuine organisation can contact people by text while a fraudster can imitate the same organisation. The wording, logo and sender name are therefore weaker evidence than a successful check through an independently found service.

If you already interacted with the text

The right response depends on what you actually did. Merely opening a page is different from entering a password, bank-card details or a one-time code. If you supplied sensitive information, contact the relevant bank or service through a trusted route and change compromised credentials. GOV.UK and the National Cyber Security Centre also provide reporting routes for suspicious messages.

Worked example

Illustrative example: Sam receives a text claiming that a government department needs £42 paid through a shortened web link. Sam does not recognise the reference and has no reason to expect a bill.

Instead of opening the link, Sam visits GOV.UK independently and searches for the relevant service. Nothing in the official account matches the text. Sam forwards the message to 7726, deletes it, and keeps an eye on the bank account for any unexpected activity.

The amount is illustrative. The key decision is the verification route: the text does not get to define the rules for proving that it is genuine.

The exact reporting route is separate from deciding whether the underlying claim is genuine; verify first, then report through the official channel.

Can a scam text really use a .gov.uk style message?#

Yes. Criminals can imitate government language, branding and sender names. The presence of a government-looking name should never replace independent verification through the real organisation’s website or app. The safest reading of an unexpected government message starts with independent verification rather than the sender line.

Should I click a government text link to see whether it is real?#

No. Check the service separately instead. Opening the embedded link can take you to a fake page designed to collect passwords, card details or other sensitive information. The safer test is what the independently opened official service says, not what the suspicious text claims.

What number do I use to report a scam text?#

The NCSC and GOV.UK say suspicious texts can be forwarded to 7726 free of charge. Your mobile provider can investigate the message and take action where appropriate. Do not use contact details supplied by the message itself when checking an unexpected demand for money or information.

What if I already entered my bank details?#

Contact your bank or payment provider promptly using a trusted contact method, not the details in the suspicious message. Change exposed passwords and report the incident through the relevant fraud-reporting route. Reporting the message is a separate step from deciding whether the underlying claim is genuine.

Is every unexpected HMRC or council text a scam?#

No. A genuine organisation may contact you about a real matter. The important point is to verify the communication independently rather than assuming it is genuine because the subject matter sounds plausible. A familiar government name can be copied, so the verification route matters more than the branding.

Can a scam text be harmful even if I do not pay anything?#

Yes. A link may be intended to steal passwords, card details or other personal information. Some campaigns also try to install malicious software or persuade you to continue the conversation by phone. What you entered after clicking the link determines what account-protection steps may be sensible next.

Keep reading

Next question →Are emailed checks for jobs usually a scam?

Sources

Figures were checked against these sources before publication. If a rule changes, we update the page and show the new date.

General information, not personal financial advice. Rules depend on your circumstances; check the official source or speak to a regulated adviser before acting.