Protect yourself and your family from AI scams
A familiar voice, convincing video or polished message can still be fake. Make a simple plan for checking unexpected requests before sharing money or information.
Worried this has already happened?
If you have sent money or shared banking details, contact your bank immediately using its official app or a number you already trust.
If you have shared a password or given someone access to a device, take steps to secure the affected accounts and device.
Go straight to “If you have already responded”A call sounds like your child. A video appears to show someone you trust. An email looks professional and knows details about your life.
Artificial intelligence can help criminals make familiar scams more convincing. But you do not need to become an expert at recognising AI to protect yourself.
The most useful habit is to pause and check unexpected requests through a separate, trusted route.
How AI can make a scam convincing
- A copied voice: A caller or voice note sounds like a family member and asks for urgent help or money.
- A fake or altered video: Someone appears to endorse an investment, offer a prize or take part in a video conversation.
- A convincing message or profile: Emails, adverts and online conversations can be polished, personal and free of obvious spelling mistakes.
These are possible techniques, not proof that every suspicious request uses AI. The same checking habits help whether the criminal used AI or not.
What to have ready
A way to contact the people you trust, your bank's official contact details and a few minutes to agree what your household will do if an unusual request arrives. Never enter passwords, banking details, security codes or your family's private checking phrase into Umbrello.
Who it helps
Anyone who receives calls, messages, emails or online offers, including adults helping children, older relatives or someone less confident with technology.
The checks to make
1. Pause when the request involves money, information or account access
Pay attention to what you are being asked to do.
Warning signs include pressure to act immediately, keep something secret, transfer money, share a security code or install software.
A familiar voice or professional-looking message does not remove the need to check.
You can say: “I’m going to check this separately before I do anything.”
You do not need to argue with the caller or explain why you are suspicious.
I know which requests should make me pause.
2. Check through a route you already trust
End the conversation and contact the person or organisation independently.
For a family member, use their usual saved number. Do not rely on a new number supplied in the suspicious message. If you cannot reach them, try another trusted person who may know where they are.
For a bank or organisation, use its official app, a number on your card or statement, or a website address you already know.
Do not use the number or link provided by the person making the suspicious request. Caller ID can be copied, so a familiar number on the screen is not proof of identity.
If checking a suspicious landline call, use a different phone where possible.
If you believe someone is in immediate danger, contact the emergency services independently rather than sending money to an unverified caller.
I have a trusted way to check an unexpected request.
3. Agree a private family checking phrase
Choose a phrase with close family members that you can use as an additional check during an unusual or urgent call.
Agree it privately. Avoid something obvious from social media, such as a pet’s name, birthday or favourite football team.
Do not post it online or enter it into this guide. If it becomes known outside the group, change it.
A phrase is an extra precaution, not a guarantee. Even if someone knows it, independently check an unusual payment request. If someone forgets it, use another trusted route to establish what is happening.
We have agreed a checking phrase or another independent checking plan.
4. Treat voices, videos and endorsements as claims to check
A realistic video, voice note, profile picture or celebrity endorsement is not enough to establish that an offer or person is genuine.
Do not rely on spotting strange hands, unnatural blinking, a robotic voice or spelling mistakes. Their absence does not make something trustworthy.
Check an offer independently before paying. For financial offers, go directly to the Financial Conduct Authority’s official website and use its consumer checking guidance. Do not assume a firm is genuine simply because someone gives you a real firm’s name.
Be cautious about requests for money from someone you have only met online, even after lengthy conversations or video calls.
I will check the person or offer independently before paying.
5. Protect account access and the details you share
Do not give an unexpected caller your password, PIN or one-time security code. Do not approve a sign-in or payment notification because someone on a call tells you to.
Do not install remote-access software at the request of an unexpected caller.
Use different passwords for important accounts and enable two-step verification where available.
Review who can see your social media posts, recordings and personal information. Details about relatives, routines and events can help someone make a false story more convincing.
Reducing public information can help, but keeping everything private cannot guarantee that nobody will impersonate you.
I have reviewed our account protection and public information.
6. Make it easy for someone to ask for help
Agree who family members can contact before responding to an unusual request.
Tell children and relatives that checking with someone is sensible, even when the message sounds convincing or they have already clicked something.
Avoid blame. Embarrassment can delay someone getting help.
Practise one simple example together: “If someone sounds like me and asks you to send money urgently, what will you do?”
The aim is a shared checking habit, not a test of who can spot a fake.
We know who to contact and how to ask for help.
Three situations to practise
Illustrative examples, not reports of real incidents.
“It’s me. I need money urgently.”
A caller sounds like a relative but asks you to transfer money to an unfamiliar account.
Your next step: End the call and contact the relative on their usual number. Use another trusted contact if you cannot reach them.
“Your money is at risk. Move it now.”
A caller claims to be your bank and tells you to transfer your balance into a safe account.
Your next step: Do not transfer it. End the call and contact your bank through its official app or trusted contact details.
“You’ve seen this person on television.”
An advert shows a familiar face promoting an investment with unusually attractive returns.
Your next step: Do not treat the video as proof. Leave the advert and research the firm and offer independently.
A conversation worth having
“If you get an urgent request that seems to come from me, check with me another way before sending money. I’ll never be annoyed that you took time to check.”
If you have already responded
You do not need to prove that AI was involved before asking for help.
If you sent money or shared banking details
Contact your bank or payment provider immediately through a trusted route. Explain what happened and ask it to protect the account and consider whether the payment can be stopped or recovered.
Do not wait until you have collected every piece of evidence. Recovery is not guaranteed.
Official guidance(opens in a new tab)If you shared a password
Change it through the genuine service. Change it anywhere else you reused it and enable two-step verification where available.
If you are locked out, follow the provider’s official account-recovery process.
Account-recovery help in our Something happened? areaIf someone accessed your device
Stop using that device for banking or password changes until it has been checked. Use another trusted device to contact your bank and get help.
Follow the NCSC’s guidance if you installed software or shared sensitive information. For a work device, tell your IT team promptly.
Official guidance(opens in a new tab)Keep useful evidence
Keep messages, usernames, phone numbers, website addresses and payment details where safe to do so. Do not continue engaging with the scammer to collect more.
Be wary of anyone who subsequently contacts you promising to recover your money for a fee.
Further guidance(opens in a new tab)Report it through the right route
Fraud in England, Wales or Northern Ireland
Report through Report Fraud.
Report Fraud(opens in a new tab)Telephone: 0300 123 2040
Fraud in Scotland
Contact Police Scotland on 101.
Suspicious text messages
Forward suspicious SMS messages to 7726. Follow your network provider’s instructions if forwarding does not work.
Guidance(opens in a new tab)For suspicious content inside a messaging or social media app, use that app’s reporting controls.
Reporting a message is separate from contacting your bank or reporting a crime. If money or account access is at risk, take those steps promptly too.
Questions you might have
Can I tell whether a voice or video is fake?
Sometimes there are clues, but appearance and sound alone are not reliable enough. Independently checking the request is more useful than trying to diagnose the technology.
Does a correct family phrase prove the call is genuine?
No. It is an extra check. Continue to verify unusual requests, particularly those involving money or account access.
Does this mean I should ignore every unexpected call?
No. You can choose to end an unexpected conversation and contact the person or organisation through a trusted route before acting.
Should I upload the recording or message to an AI detector?
You do not need a detector to decide to pause and verify. Do not treat a detector’s result as proof that a request is safe, or upload private information to an unfamiliar service.
Is it my fault if I believed the message?
Criminals deliberately exploit trust, pressure and emotion. What matters next is getting support and protecting your money and accounts.
Official sources and further help
- Take Five: online scams
- Stop! Think Fraud: phone fraud
- Police Scotland: voice cloning scams
- National Trading Standards: AI scam techniques
- Financial Conduct Authority
- NCSC: what to do if you have shared information
- Age UK: AI scams
- Report Fraud (England, Wales and Northern Ireland)
- NCSC: reporting a scam email
- NCSC: reporting a scam text message
- BBC: Don't fall for this - how to protect yourself from AI scams
Official sources last checked: 20 October 2026. Steps and menu names can vary between devices and software versions — if something looks different, use the manufacturer's official page.
Spot something inaccurate in this guide?Share feedback
Related guides
Pause before a suspicious payment request
Check an unexpected payment request through a separate, trusted route. Work through common stories involving relatives, changed invoices and bank impersonation, and find the first steps if you have already paid.
Protect your email account: Gmail, Outlook and iCloud
Secure the inbox that helps you recover your other accounts. Follow the steps for your provider, check who can still access your mail and prepare a way back in if you lose your phone.