First 24 Hours After a UK Scam (2026 Legal Guide) — Rules & Requirements
About this article
Sourced from UK Acts of Parliament, statutory instruments, and official guidance. Written in plain language for general understanding — this is educational content, not legal advice. Our editorial standards
What is this right?
Three actions in the first 24 hours decide the rest. Call 159 — the Stop Scams UK short code routes you directly to your bank's fraud team and cannot be spoofed, so it works even if a scammer is still on the line trying to misdirect you. Report to Action Fraud at actionfraud.police.uk or 0300 123 2040 to generate the national-reference number every downstream institution will ask for. Lock down your accounts: cancel cards, change passwords, switch to authenticator-app 2FA, and freeze your credit file with all three CRAs (Experian, Equifax, TransUnion) via Cifas's free Protective Registration.
For payments out of a UK bank account on the Faster Payments System or CHAPS, the PSR mandatory APP reimbursement regime (in force 7 October 2024) gives the sending bank a presumption to refund — but the case is materially stronger when the report was made the same day. The 159 call is the cleanest first step.
When does it apply?
- An unauthorised payment leaves your account (card-not-present, stolen card, account takeover).
- You were tricked into sending money yourself to a scammer — authorised push payment (APP) fraud. Covered by the PSR mandatory reimbursement rules if it was a Faster Payment or CHAPS made on or after 7 October 2024.
- You realise login credentials, your one-time-passcode, or a Confirmation of Payee mismatch was given to a caller who turned out not to be your bank.
- A suspicious phone call asked you to move money to a 'safe account' (the classic impersonation scam — your bank will never ask this).
What to Do in the First Day After Being Scammed in the UK
Work fast and work in writing. Each step is independent — start them in parallel.
- Dial 159 from the phone you're calling about. The Stop Scams UK short code (launched 2021) connects you to the fraud team at Barclays, Lloyds Banking Group (Halifax, Bank of Scotland), NatWest Group (RBS, Ulster), Santander, Starling Bank, and others — together more than 99% of UK retail current accounts. 159 cannot be spoofed by scammers. If your bank isn't on the panel, hang up and call the number on the back of your card.
- Tell the bank to stop the payment, block the card, and freeze the account. Under the Payment Services Regulations 2017 reg. 76, an unauthorised transaction must be refunded by the end of the next business day. Get the bank's case reference in writing (in-app messaging is fine).
- Report to Action Fraud. File online at actionfraud.police.uk or call 0300 123 2040 (from abroad: +44 300 123 2040). Action Fraud is the UK's national reporting centre run by City of London Police; the report generates a national-reference number you will use in every downstream complaint.
- Place a Cifas Protective Registration (£25 for 2 years). This is the UK equivalent of a credit-bureau fraud alert — it tells UK banks and lenders to do extra checks before approving credit in your name. Apply via cifas.org.uk.
- Change passwords and switch to authenticator-app 2FA on email, banking, social media, and any account using the same password as the compromised one. SMS 2FA is defeated by SIM-swap scams — use an authenticator app.
- Write a one-page timeline with the bank case reference, the Action Fraud number, exact dates and times, screenshots, and the original payment details. This is the spine of any later Financial Ombudsman complaint.
What should you NOT do?
- Don't call back any number the scammer used. Many recovery scams pose as 'fraud investigators' offering to get your money back for a fee. UK official channels (the bank, Action Fraud, the FOS) never charge fees.
- Don't ignore Confirmation of Payee mismatches in future. CoP shows you the actual name on the destination account before you send. A mismatch is a signal your bank later relies on to assess the gross-negligence test under the PSR APP rules.
- Don't delete the texts, emails, or call logs. Both Action Fraud and the FOS rely on them.
- Don't pay for 'fraud recovery' or 'asset recovery' services. All meaningful UK fraud-recovery channels (bank reimbursement, FOS, Section 75) are free. Anyone charging you to get scammed money back is the next scam.
About Scams, Fraud & Money Recovery in United Kingdom
The UK has the strongest consumer money-recovery regime in the English-speaking world. The Payment Systems Regulator's mandatory APP fraud reimbursement rules took effect on 7 October 2024 — sending banks must now refund authorised push payment scam victims up to £85,000 per claim on Faster Payments and CHAPS, with cost split equally between the sending and receiving banks. Section 75 of the Consumer Credit Act 1974 makes the credit-card issuer jointly liable with the merchant for breach of contract or misrepresentation on any credit-card transaction where the cash price was more than £100 and not more than £30,000. The Payment Services Regulations 2017 (regulation 76) require unauthorised-transaction refunds by close of next business day. The Financial Ombudsman Service resolves all of it for free and its decision is binding on the firm if you accept.
The pages below walk you through the first 24 hours, reporting to Action Fraud, and recovering money under the right route for how you paid.
Common Questions
What is 159 and which banks does it cover?
159 is a national short code launched by Stop Scams UK in 2021 that connects you directly to the fraud team of your bank. Participating banks include Barclays, Lloyds Banking Group (Halifax, Bank of Scotland), NatWest Group (RBS, Ulster Bank), Santander, and Starling Bank — together representing more than 99% of UK retail current account holders. The short code cannot be spoofed by scammers, unlike a regular phone number.
Is the Action Fraud report likely to lead to an investigation?
Most reports do not lead to an individual investigation — they feed pattern analysis at the National Fraud Intelligence Bureau, also run by City of London Police. The report's main value to you is the national-reference number you cite in every downstream complaint (to the bank, FOS, Cifas, and your insurer). Filing is still essential.
Does the PSR APP reimbursement regime apply to crypto scams?
No. The 7 October 2024 mandatory reimbursement applies only to Faster Payments and CHAPS payments between UK accounts. Cryptocurrency transfers, international wires, cash, and card payments fall outside it — but they may be covered by Section 75 (credit card) or the Payment Services Regulations 2017 (unauthorised transactions).
What if my bank isn't on the 159 list?
Call the fraud number on the back of your card, or the number on the official banking app or your bank's website. Do not use any number that came from the scammer's communication.
What is the first 24 hours after being scammed in the uk right in United Kingdom?
Three actions in the first 24 hours decide the rest. Call 159 — the Stop Scams UK short code routes you directly to your bank's fraud team and cannot be spoofed, so it works even if a scammer is still on the line trying to misdirect you. Report to Action Fraud at actionfraud.police.uk or 0300 123 2040 to generate the national-reference number every downstream institution will ask for. Lock down your accounts: cancel cards, change passwords, switch to authenticator-app 2FA, and freeze your credit file with all three CRAs (Experian, Equifax, TransUnion) via Cifas's free Protective Registration.F...
When does first 24 hours after being scammed in the uk apply?
An unauthorised payment leaves your account (card-not-present, stolen card, account takeover).You were tricked into sending money yourself to a scammer — authorised push payment (APP) fraud. Covered by the PSR mandatory reimbursement rules if it was a Faster Payment or CHAPS made on or after 7 October 2024.You realise login credentials, your one-time-passcode, or a Confirmation of Payee mismatch was given to a caller who turned out not to be your bank.A suspicious phone call asked you to move money to a 'safe account' (the classic impersonation scam — your bank will never ask this).
What should I do immediately after being scammed in the UK?
Work fast and work in writing. Each step is independent — start them in parallel.Dial 159 from the phone you're calling about. The Stop Scams UK short code (launched 2021) connects you to the fraud team at Barclays, Lloyds Banking Group (Halifax, Bank of Scotland), NatWest Group (RBS, Ulster), Santander, Starling Bank, and others — together more than 99% of UK retail current accounts. 159 cannot be spoofed by scammers. If your bank isn't on the panel, hang up and call the number on the back of your card.Tell the bank to stop the payment, block the card, and freeze the account. Under the Paymen...
What mistakes should I avoid with first 24 hours after being scammed in the uk?
Don't call back any number the scammer used. Many recovery scams pose as 'fraud investigators' offering to get your money back for a fee. UK official channels (the bank, Action Fraud, the FOS) never charge fees.Don't ignore Confirmation of Payee mismatches in future. CoP shows you the actual name on the destination account before you send. A mismatch is a signal your bank later relies on to assess the gross-negligence test under the PSR APP rules.Don't delete the texts, emails, or call logs. Both Action Fraud and the FOS rely on them.Don't pay for 'fraud recovery' or 'asset recovery' services....