Barclays customers are being urged to remain vigilant following a fresh warning about a new text message scam that is prompting people to inspect their finances. With over 20 million retail customers across the UK, the alert is relevant to a significant number of people.
Sophisticated phishing texts target Barclays account holders
Account holders are being advised to stay on their guard amid a surge in sophisticated phishing text messages specifically targeting Barclays customers. Victims are receiving urgent, highly convincing messages that closely replicate official bank notifications, warning of unauthorised payments leaving their accounts without explanation, reports the Mirror.
A common version of the text reads: "Barclays Alert: A Direct Debit of £489.99 to TUI has been set up on your account." The message then provides a contact number to 'cancel this payment'.
How the scam works
Cybersecurity specialists, including Which?, caution that the scam relies heavily on panic. The messages contain a fraudulent phone number and instruct recipients to call immediately if they did not authorise the transaction.
Once a victim dials the number, they are put through to fraudsters posing as genuine bank employees. These criminals then attempt to manipulate the victim into divulging sensitive information, such as online banking passwords, card details, or One-Time Passcodes (OTP). With this information in hand, the scammers are able to completely empty the victim's bank account.
The Norfolk County Council Trading Standards warns: "Criminals are experts at creating spoof messages that then provide links to scammers who will attempt to trick you into providing personal or financial information as part of urgent action they will claim you need to take without closer inspection."
"Always be wary of unexpected messages received and never respond, make contact via numbers quoted or click on any links unless you know you can trust them. If you are concerned about the security of a bank account or think you have interacted with a scam message and provided scammers with your financial details, contact your bank directly using the Customer Service number printed on the card, on a recent statement or via information available on their genuine website or app. Never use details provided in an unexpected text message."
Genuine alerts never ask for secure details
Barclays states that genuine fraud alerts from the bank will never ask customers to call a random number or reveal secure security details. Legitimate alerts typically only require a straightforward 'Y' or 'N' text response to verify a transaction.
Should you receive a suspicious text message, financial authorities recommend taking certain steps. These include:
- Do not call the number or click any links in the text.
- Verify your account independently by logging into the official Barclays Mobile App or calling the number on the back of your debit card.
- Forward the scam text to 7726, the UK’s free network reporting service.
- Report directly to Barclays by forwarding a screenshot or the message details to its official phishing email address: InternetSecurity@barclays.com.
Suspicious text messages believed to be scams can also be reported through the Citizens Advice consumer helpline on freephone 0808 223 1133.
Five things Barclays will never do
Legitimate bank employees will never demand compliance with the following actions:
- Ask you to move money to an alternative or "safe account".
- Request your full online password, PINsentry codes, or One-Time Passcodes (OTP).
- Instruct you to lie to other bank staff or branch workers.
- Demand remote access to your laptop or phone via screen-sharing apps.
- Send a courier to collect your plastic bank card or physical cash from your home address.
