Suspicious emails and text messages.

You have received an email or a text message that seems to be from a company you know well, like Halifax. It’s urging you to act, asking for personal information. It might claim there is something wrong with your account. Or that your details need to be updated.

Fraudsters use a scam called phishing for email, and smishing for texts. They copy emails and texts from real companies to try to steal your data or send your computer a virus.

Find out how to protect yourself, and tell a scam email or text message from a real one.


Is the email asking for financial and personal info?

Fraudsters pretend to be well-known companies like Halifax, Visa, Apple or HMRC: be wary even if you think you recognize the sender. Genuine companies never ask for Online Banking log on details or card details in an email. Don’t reply, and don’t click on any links or attachments.

Do you know who really sent the email?

If in doubt, phone the company on a trusted number or visit their website by typing their web address directly into the address bar. Don't click on a link or copy and paste from the email itself.

Is the email trying to scare you into action?

Emails from reputable companies should sound reasonable and calm. Phishing emails often contain threats of account suspension or immediate risk of fraud. If you’re not sure about an email that looks like it’s from Halifax you can always phone us on the number on the back of your card.


How to tell a suspicious email from a real one

  • We always greet you by title and surname, as in “Dear Mrs Smith”. We also always include your partial postcode.
  • We never ask you to confirm personal or financial info in an email.
  • We do not scare you with urgent warning messages and we never use email to warn you of suspicious activity on your account.
  • Scam emails often look odd, with a messy layout and spelling mistakes.
  • All genuine emails come from halifax.co.uk. There should never be another word in between halifax and .co.uk. (name@mail.halifax.co.uk is correct but name@halifax.mail.co.uk is wrong). If you share a suspicious email with our email scams mailbox, the automatic reply may come from lloydsbanking.com.
  • We never link directly to our Online Banking sign in page, or a page that asks for security or personal details.
  • We never ask you to carry out a test payment Halifax or move money to a new sort code and account number, even if it’s described as a “secure”, “safe” or ”holding” account.


Is the text message asking for financial and personal info?

Fraudsters pretend to be well-known companies: be wary even if you think you recognise the sender. Genuine companies never ask for Online Banking sign in details or card details in a text. Don’t reply, and don’t click on any links or attachments.

Do you know who really sent the text message?

If in doubt, phone the company on a trusted number or visit their website by typing their web address directly into the address bar. Don't click on a link or copy and paste from the message itself.

Is the text message trying to scare you into action?

Does it sound reasonable and calm, like a message from a reputable company? Phishing text messages often contain threats of account suspension or immediate risk of fraud. If you’re not sure you can always phone us on the number on the back of your card about a message that looks like it’s from Halifax.

How to tell a suspicious text message from a real one

  • We never ask you to confirm personal or financial information.
  • We never ask you to confirm personal or financial info.
  • We never link to our Online Banking sign in page, or a page that asks for security or personal details.
  • We never ask you to carry out a test payment online.
  • We never ask you to move money to a new sort code and account number, even if it’s described as a “secure", "safe” or ”holding” account.

Received a suspicious email or text message?

If you receive an email or text message that looks like it’s from Halifax but makes you suspicious, forward the email or send a screenshot of the text message to security@halifax.co.uk.

Please note:

  • Do not use this mailbox for any other questions or messages: The mailbox can only deal with emails where the Halifax name is used without permission by fraudsters. Other types of emails or messages cannot be actioned.
  • It’s an automated mailbox so you won’t receive any personalised response: The only action we can take is to request the deletion of fraudsters’ email addresses and URLs. There may be delays as our partner’s process these requests.
  • Never email us any personal or account information (including card details and sign in information)

Think you are a victim of online fraud?

Money has fraudulently left your Halifax account or someone knows your Online Banking password For any other issues that you think may be related to fraud

Step 1:

Report it to us

0345 602 2160

(Lines are open 24 hours a day) +44 1132 888 408 from outside the UK

If you have a hearing or speech impairment, you can contact us 24/7 using the Next Generation Text (BGT) Service. If you’re Deaf and a BSL user, you can use the SignVideo service.

Step 2:

Report it to Action Fraud

0300 123 2040

Lines are open Monday to Friday 9am-6pm. Text phone users can ring 0300 123 2050.

    Report it to Action Fraud

    0300 123 2040

    Lines are open Monday to Friday 9am-6pm. Text phone users can ring 0300 123 2050.

    They’ll be able to log the incident and provide you with a Crime Reference number if needed. Action Fraud collect data from across the UK to help banks and other businesses combat fraud.