How to Avoid Common Online Scams

Updated January 20259 minute read
Senior woman confidently using a laptop, looking at screen thoughtfully

Online scams are, unfortunately, a significant and growing concern. Each year in the UK, hundreds of thousands of people are targeted by fraudulent messages, fake websites, and deceptive schemes — and older adults are disproportionately represented among those who experience harm as a result. This is not because older people are naive; it is because scammers specifically design their approaches to exploit trust, urgency, and unfamiliarity.

This article aims to give you a clear, practical understanding of the most common types of online scam, how to recognise them, and what to do if you encounter them. Our tone is calm and informative — not alarming. Knowledge is protective, and the goal here is to leave you feeling more capable, not more anxious.

Why Scammers Target Older Adults

Understanding why can help you understand how. Scammers target older adults for several specific reasons. Older adults are more likely to have accumulated savings and to respond to politely worded communications. They are also more likely to be unfamiliar with certain digital norms — making it harder to spot when something is out of place — and may be less aware of the latest tactics being used.

Scammers invest time in crafting messages that appear official, urgent, or emotionally resonant. They know what phrases create worry, what authority names inspire trust, and what promises attract interest. This is not a reflection of intelligence — it is a reflection of extensive, deliberate manipulation.

Important note: If you believe you have already been the target of an online scam, contact Action Fraud (the UK's national fraud reporting centre) on 0300 123 2040 or visit actionfraud.police.uk. You can also contact your bank immediately if any financial information has been compromised.

The Most Common Types of Online Scam

1. Phishing Emails

Phishing is the most common form of online fraud. You receive an email that appears to be from a trusted organisation — your bank, HMRC, Royal Mail, a well-known retailer — containing an urgent request: to verify your account, pay a delivery fee, or update your details.

The email contains a link to a website that looks almost identical to the real thing. If you enter your details there, the scammers receive them.

Key signs to watch for: The sender's email address doesn't match the organisation's official domain (e.g. [email protected] rather than @hmrc.gov.uk). The message creates urgency ("your account will be closed within 24 hours"). There are spelling or grammatical errors. The greeting is generic ("Dear Customer") rather than using your name.

What to do: Don't click any links. If you want to check whether the message is genuine, open a new browser window and go directly to the organisation's official website by typing it yourself. Call the organisation using a number from their official website — not from the email.

2. Phone Scams (Vishing)

You receive a phone call from someone claiming to be from your bank, the police, HMRC, or a technology company. They may claim your account has been compromised, that you owe tax, or that your computer has a virus. They ask for personal information, login credentials, or ask you to transfer money.

Key signs: Any unsolicited call asking for financial information or access to your device. Pressure to act immediately. A caller who discourages you from hanging up or checking with someone else.

What to do: Hang up. Then call the organisation back using a number from their official website. Remember: your bank will never call you and ask for your full PIN, password, or to transfer funds to a "safe account".

3. Fake Investment and Opportunity Scams

These come in many forms: cryptocurrency investments, "passive income" opportunities, work-from-home schemes promising significant earnings with minimal effort, or online business models requiring an upfront payment to access.

Key signs: Promises of guaranteed returns or unrealistically high earnings. Pressure to invest quickly before the opportunity expires. Requirements to pay money upfront to "start earning". Vague explanations of how the income is actually generated.

What to do: Never invest money based on an unsolicited offer. Always independently verify any financial opportunity before engaging, and consider seeking independent financial advice. A legitimate investment opportunity will be registered with the Financial Conduct Authority (FCA) — you can check at register.fca.org.uk.

4. Online Marketplace Scams

Whether buying or selling on platforms such as Facebook Marketplace, Gumtree, or eBay, scammers may pose as buyers or sellers to extract payment or goods without delivering the agreed item or service.

As a seller: Be wary of buyers who offer to pay by bank transfer for an item listed for collection, overpay and ask for a refund of the difference, or send cheques that later bounce.

As a buyer: Be cautious of items priced unusually low, sellers unwilling to meet in person, and requests for payment outside the platform's official payment system.

5. Romance and Friendship Scams

These scams target people seeking companionship online. A scammer builds a relationship over weeks or months — often on social media or dating platforms — before eventually asking for money, typically citing an emergency such as a medical crisis or need for travel funds.

Key signs: A new online contact who is very attentive but always has a reason they cannot video call or meet in person. Escalating emotional connection followed by financial requests. Inconsistencies in their story over time.

What to do: Never send money to someone you haven't met in person, regardless of how well you feel you know them. Talk to a trusted friend or family member if you are concerned.

General Principles to Stay Protected

Across all types of scam, several consistent principles will serve you well:

Slow down. Scammers rely on urgency. If you feel pressured to act immediately, that pressure is itself a warning sign. Legitimate organisations give you time to think, check, and decide.

Never pay to receive money. If you are told you must pay a fee, tax, or charge in order to receive a payment or prize, it is a scam. No legitimate lottery, inheritance, or prize draw operates this way.

Protect your personal information. Your full name, address, National Insurance number, bank details, and login credentials should never be shared in response to an unsolicited contact, regardless of how official it appears.

Use strong, unique passwords. A password manager can help you maintain different passwords across different accounts, reducing the damage if one account is compromised.

Enable two-factor authentication. This adds a second step to logging in (typically a code sent to your phone), making it significantly harder for someone to access your accounts even if they have your password.

Keep software updated. Regular updates to your operating system and apps include security patches that protect against known vulnerabilities.

Trust your instincts. If something feels wrong — if a message seems odd, a caller is evasive, or an opportunity seems too good to be true — trust that feeling. You do not need to be polite or feel obliged to continue an interaction that makes you uncomfortable.

What to Do If You Think You've Been Scammed

If you suspect you have been the target of a scam, the most important thing is to act quickly and without embarrassment. Scammers are sophisticated, and falling for a scam is not a reflection of intelligence. What matters is responding effectively.

If money has been sent: Contact your bank immediately. Banks have fraud teams available around the clock, and early contact significantly improves the chances of recovering funds.

If personal information has been shared: Change passwords for any accounts that may have been compromised. Contact your bank if any financial details were shared. Consider placing a notice on your credit file via a credit reference agency.

Report the scam: Contact Action Fraud (0300 123 2040 or actionfraud.police.uk) to report what happened. Reporting helps protect others.

Talk to someone: Dealing with a scam can be distressing. You don't have to manage it alone. Tell a trusted family member or friend, and consider reaching out to Citizens Advice (citizensadvice.org.uk) for practical support.

A Reassuring Note

Online scams are a serious issue, but they are also very much manageable with the right knowledge. The vast majority of online interactions are entirely safe and legitimate — and with a foundation of awareness, you can engage with the digital world with considerably more confidence.

The goal is not caution for its own sake, but informed, comfortable participation. That's precisely what Vylentro's learning programmes are designed to support.