Fraud Terms Explained in Plain English

Fraud has its own language — and understanding it is half the battle. Here’s what the most common terms actually mean.

There’s no single list of the fraud types most likely to affect you — fraudsters change tactics constantly. What doesn’t change is the value of knowing how  common types work. Consumers face many kinds of fraud, such as scams, banking fraud, investment fraud and romance fraud. This glossary explains the terms you’ll hear most often.

What is fraud?

“Fraud is when trickery is used to gain a dishonest advantage, which is often financial, over another person.” - According to the National Fraud Reporting Centre.

Scam

Any scheme designed to trick you out of money or personal information — by phone, text, email, post or in person.

Banking fraud

Fraud involving your bank account or payments — for example, someone posing as your bank to move your money or making payments you didn’t authorise.

Investment fraud

Fake or misleading investment opportunities — often promising high returns with little risk. If it sounds too good to be true, it usually is.

Romance fraud

When someone builds a romantic relationship with you online to gain your trust, then asks for money or personal details.

Identity fraud

The criminal use of a stolen identity to obtain goods or services by deception. This usually involves the use of stolen or forged identity documents, such as a passport or driving licence.

Impersonation fraud

When a fraudster pretends to be from an organisation you trust — your bank, HMRC, the police or a delivery company — to get money or information from you.

APP fraud (authorised push payment)

When you’re tricked into sending money to a fraudster yourself — for example, paying an invoice that turns out to be fake.

Account takeover

When a fraudster gets into one of your existing accounts — email, banking or shopping — and uses it as if they were you.

Identity theft

The misuse of another person’s identity details (such as name, date of birth, current or previous addresses) without their knowledge or consent.

Synthetic identity

An identity made up of real and false information, used by fraudsters to open accounts or take out credit.

Phishing

Fake emails designed to look like they’re from a real organisation, tricking you into sharing details or clicking dangerous links.

Ghost brokers

A type of insurance fraud when an insurance company sells you a fake or illegal insurance policy, usually at a cheaper price.

Phishing by text message (Smishing)

Often a fake delivery, bank or tax message with a link.

Phishing by voice call (Vishing)

Someone phoning and pretending to be from your bank, the police or a company you use.

Data breach

When an organisation holding your details is hacked or leaks them. Your information can then be used for fraud — sometimes long afterwards.

Money mule

Someone who moves stolen money through their own bank account for criminals — often recruited with the promise of easy cash. It’s a crime, even if you didn’t realise what was happening

Social engineering

The tricks fraudsters use to manipulate you into acting quickly — urgency, fear, authority or friendliness — rather than hacking technology.

Protection and recovery terms

Fraud marker

A flag added to your credit report telling lenders you’ve been a victim of fraud (or are at risk), prompting them to take extra care with applications in your name.

Protective registration

A marker that notifies anyone who searches your credit report to take special precautions to check your identity before offering any credit.

Check the company is genuine

Use the FCA’s Firm Checker to confirm a bank, insurance or crypto company is genuine before sending money. 

Cifas

The UK's leading fraud prevention service. It is a not-for-profit organisation that helps banks, lenders, insurers, telecommunications providers, retailers, public bodies and other organisations work together to protect customers and prevent fraud through the sharing of information about known and suspected fraud.

Two-step verification

A second check when you log in — like a code sent to your phone — so a stolen password alone isn’t enough.

Passkey

A newer, stronger way to sign in without a password, using your device and your fingerprint or face. Recommended by the National Cyber Security Centre (NCSC).

Crime reference number

The number you get when you report fraud to the police via the report fraud website —you’ll need it for your bank, insurers and credit reference agencies.

Victim of fraud?