Copycat Which? website runs fake debit card comparison article to harvest personal details

What is this scam?

A fraudulent website impersonating Which? hosted a fake consumer advice article falsely attributed to a named Which? banking expert, comparing debit cards and prompting readers to submit their name, email address, and postcode to receive a 'personalised comparison'. Which? identified the copycat site and alerted the NCSC, which arranged for it to be taken down. The scam exploits consumer trust in Which?'s impartial advice brand to harvest contact data for use in further targeted fraud.

Example scam message

Red flags to look out for

• The message creates urgency — threatening a fine, missed delivery, or account closure.
• Links lead to unofficial domains that don't match the real company's website.
• You weren't expecting this message and can't verify the event it references.
• It asks you to confirm payment details or personal information via a link.
• The sender's number or email address doesn't match the company's official contact.

What to do if you receive this

1. Do not call any numbers or click any links in the message.
2. Log in to your account directly via the official website or app to check for any real alerts.
3. Forward the message to 7726 or email report@phishing.gov.uk.
4. Report it to Action Fraud at actionfraud.police.uk.