🚨 Cybercrime Alert: Fake Account Verification Emails

Fraudsters are sending convincing emails that appear to come from trusted organisations such as Microsoft, Google, Apple, Yahoo, Amazon, PayPal. They may even appear to come from your bank, your mobile phone network or internet service provider.  These emails claim that your account will be suspended, restricted or deleted unless you "verify" or "validate" your details. The emails often use official logos and branding to appear genuine, but their real purpose is to steal your login credentials.

How to Spot the Scam

Be cautious if an email:

🔸 Is unexpected or unsolicited.
🔸 Creates urgency or threatens account suspension / restriction / deletion.
🔸 Asks you to click a link, to verify, validate or secure your account.
🔸 Contains spelling mistakes, poor grammar, or unusual wording.
🔸 Does not address you by name or provide your specific account details.

How the Scam Works

Scammers direct victims to a fake sign-in page that closely resembles a genuine Microsoft, Google, or other account login screen.

If you enter your username and password, criminals may gain access to:

• Your email account
• Online shopping accounts
• Social media accounts
• Cloud storage services
• Other accounts using the same password

Protect Your Accounts

✅ Enable Multi-Factor Authentication (MFA) or Two-Step Verification (2SV) wherever available.

✅ Use a different password for every account.

✅ Never sign in to an account after clicking a link in an unsolicited email or text message. Instead, visit the genuine website or app directly. If the message claims to be from your bank, Call 159 to check authenticity. 

✅ Keep recovery email addresses and phone numbers up to date.

✅ Review security alerts and investigate any unfamiliar sign-in activity immediately. If in doubt change your password. 

Remember: Criminals regularly impersonate Microsoft, Google, Apple, banks, online retailers, social media platforms, communications services, and other trusted organisations.

✅Think ABC: Assume nothing. Believe nothing. Check everything.

If You Receive a Suspicious Email

📧 Forward it to report@phishing.gov.uk and then delete it.

📱 Suspicious text messages can be forwarded to 7726 (which spells SPAM on your keypad).

❌ Do not click links, open attachments, or reply to these messages.

If You Have Already Clicked a Link

🔒 Change your password immediately.

🔒 If you've used the same password elsewhere, change those passwords too.

🔒 Enable MFA/2SV on all affected accounts.

🔒 Regularly check the affected account(s) for suspicious activity, including login alerts, password changes, or new account recovery settings.

If you are the victim of Fraud or Cybercrime

🌐 Report online here: UK's Home for Reporting Cyber Crime & Fraud - Report Fraud

📞 Or call: 0300 123 2040

📞 To quickly contact your bank dial 159

Please Share Widely

Please share this warning with friends, family, and colleagues, particularly those who may be less confident using technology. Raising awareness can help prevent others from becoming victims.