12 Most Common Online Scams in 2026

Tech support scams begin with a frightening pop-up claiming your computer has a virus, or a cold call from someone claiming to be from Microsoft, Apple, BT, or your internet provider. They tell you that your device is compromised and offer to fix it remotely. Once given remote access, they steal files, install malware, access banking apps, or charge hundreds of pounds for "repairs" that were never needed.

The FTC reported that tech support scams cost Americans $924 million in 2023. Adults over 60 are disproportionately targeted, accounting for 60% of reports. Many victims are targeted repeatedly once they've paid once — their details are shared between criminal networks as a "verified sucker."

Protection: Microsoft and Apple will never cold-call you about computer problems. Never give remote access to anyone who contacts you unsolicited.

Fake online shops mimic legitimate retailers with stolen product images, fake reviews, and convincing domain names. Victims pay for goods that never arrive, receive cheap counterfeits, or have their payment details stolen. Social media ads are the primary recruitment channel — fraudulent shops invest heavily in targeted Facebook and Instagram advertising, often using stolen creative assets from real brands.

The best protection is to shop only with established retailers, look for genuine contact details and returns policies, and pay by credit card (which offers stronger fraud protection than debit cards).

This is one of the fastest-growing new fraud types of 2026. Using publicly available AI voice synthesis tools, criminals can clone a person's voice from just a short clip taken from social media, YouTube, or voicemail. The cloned voice then calls a family member claiming to be in urgent need of money — often claiming to have been in an accident, arrested, or stranded abroad. Victims hear what sounds unmistakably like their child, grandchild, or partner and respond emotionally, transferring money before verifying the call.

Establish a family verification word or phrase that only your family members know. If you receive an emergency call, hang up and call the person back on their known number.

QR codes have become ubiquitous in restaurants, parking meters, event venues, and postal notifications. Criminals exploit this trust by placing fraudulent QR codes over legitimate ones. When scanned, they redirect users to phishing sites that capture login credentials or payment details. "Quishing" (QR phishing) is particularly dangerous because most mobile email security tools and spam filters cannot inspect the destination of a QR code the way they can scan a URL.

Always verify the destination URL before entering any information after scanning a QR code. Be especially cautious of QR codes in unexpected locations or on items that have been tampered with.

Fake delivery notifications arrive by SMS claiming a parcel could not be delivered and a small redelivery fee is required. The payment page — convincingly styled to look like Royal Mail, DHL, FedEx, or Amazon — captures full card details. The small initial charge is used to verify the card is active, then much larger fraudulent transactions follow. Given how many online orders most households receive, these scams are extremely effective.

Protection: Royal Mail and other carriers in the UK will leave a card — they do not send payment links by SMS. Check deliveries through your retailer's website directly.

Scammers impersonating HMRC, the DVLA, NHS, Social Security Administration, or police are particularly effective because of the authority these organisations hold. Victims are told they owe unpaid taxes, have an outstanding warrant, or need to verify identity to receive benefits or renew a licence. The threat of legal action or arrest creates powerful urgency. Victims are often instructed to pay by voucher, gift card, or cryptocurrency to avoid detection.

HMRC will never call to demand immediate payment or threaten arrest. Government bodies communicate primarily by post, not SMS or WhatsApp.

In housing markets where demand far exceeds supply, rental scams have become devastatingly common. Fraudsters copy real property listings from legitimate platforms, typically advertising them at below-market prices to attract attention. They claim to be overseas landlords and communicate only by email or messaging apps, making excuses for why viewings aren't possible. They collect holding deposits, first month's rent, and sometimes several months in advance — then vanish. Victims discover the truth only when they arrive to move in to find the property is already occupied or not available to rent.

Protection: Never pay any money for a property you haven't physically visited. Verify the landlord's ownership through Land Registry. Use a regulated letting agent.