Fake Nationwide email claims new direct debit set up to dental practice to steal banking credentials

What is this scam?

Phishing emails impersonating Nationwide Building Society warn recipients that a new monthly direct debit has been established on their account to a dental practice, urging them to click a malicious link if they do not recognise the payment. The link leads to a fraudulent website designed to harvest banking credentials and personal details. Which? flagged this as active in August 2026. Nationwide has no connection to these emails — any genuine direct debit notification would appear within the secure app and never include a clickable link to a third-party website.

Example scam message

Red flags to look out for

• The message creates urgency — threatening a fine, missed delivery, or account closure.
• Links lead to unofficial domains that don't match the real company's website.
• You weren't expecting this message and can't verify the event it references.
• It asks you to confirm payment details or personal information via a link.
• The sender's number or email address doesn't match the company's official contact.

What to do if you receive this

1. Do not transfer money — your bank will never ask you to move funds to a 'safe account'.
2. Hang up and call your bank directly on the number printed on the back of your card.
3. Report it to Action Fraud at actionfraud.police.uk.
4. If you've already transferred money, contact your bank immediately and ask about the APP fraud refund scheme.