Daily Junction.mobi portalTechnology · May 6, 2026 · Amelia Hart · 5 min
A practical guide to spotting and avoiding impersonation scams, where fraudsters pose as trusted banks, companies or people. Learn the warning signs of phishing and smishing, how to verify a contact, and how to report fraud.
Impersonation scams are among the most common forms of fraud, and they are getting harder to spot. The premise is simple: a criminal pretends to be someone you trust — your bank, a well-known company, a delivery firm, even a family member — to persuade you to hand over money or personal information. Knowing how these scams work, and the handful of habits that defeat most of them, is the best protection you have. This is general information, not security or financial advice.
An impersonation scam is a fraud in which someone disguises themselves as a trusted person or organisation to trick you into acting against your own interests — usually sending money, sharing login details, or installing something harmful.
The disguise can be remarkably convincing. Scammers copy logos, spoof phone numbers so a call appears to come from a real company, and clone websites down to the small print. Because the appearance is so polished, the safest mindset is to focus not on how genuine something looks, but on what it is asking you to do.
Impersonation scams reach you through several channels:
The channel changes; the playbook does not.
Most impersonation scams share the same handful of tells. If you learn to spot these, you will catch the great majority.
The golden rule: a genuine organisation will never mind you stopping to check. A scammer needs you to act before you think.
The single most powerful habit is to verify independently. Whenever a message or call asks you to do something, assume the contact details it gives you might be fake.
To check whether something is genuine:
Slowing down to verify costs a minute. Falling for an impersonation scam can cost far more.
Beyond verifying individual contacts, a few standing habits make you a harder target.
| Habit | Why it helps |
|---|---|
| Use strong, unique passwords | One leaked password cannot unlock everything |
| Turn on two-factor authentication | Stops criminals logging in with a password alone |
| Keep devices and apps updated | Closes security holes scammers exploit |
| Never share one-time codes | These are the keys to your accounts |
| Pause before acting on urgency | Defeats the core scammer tactic |
Two of these deserve emphasis. Two-factor authentication adds a second step to logging in, so even a stolen password is not enough — it is one of the most effective protections available; the broader principles are covered in our guide to identity verification and how companies confirm it's really you. And never sharing one-time passcodes matters because those codes are exactly what a scammer needs; a request to read one out is a request to hand over your account.
It also helps to understand why organisations sometimes verify your identity or record calls — legitimate security steps that scammers try to imitate. Our explainers on why companies record calls and on spotting loan scams cover related ground.
Reporting fraud helps you and helps others, because it feeds the intelligence used to shut scams down. If you have been targeted — whether or not you lost money:
If you have lost money, do not be embarrassed — these scams are designed by professionals to deceive. Citizens Advice can help with next steps, and your bank should investigate.
Impersonation scams succeed by looking trustworthy and creating urgency, whether they arrive as a phishing email, a smishing text or a spoofed call. The defences are simple and reliable: be suspicious of unexpected contact, never share passwords or one-time codes, and always verify a request using contact details you find yourself rather than ones a message hands you. Add strong passwords and two-factor authentication, report anything suspicious to Action Fraud, and you take away almost everything these scams rely on.
![[View image]](/img/staying-safe-online-impersonation-scams.jpg){kind=link}