Spot the Scam
Texts, emails, calls and pop-ups. Is it a scam or legit? Make the call against the clock, then hunt down the red flags. Five new messages every day.
Scam or legit?
You get 15 seconds to call each message. Spot a scam and you then hunt for its red flags: tap the suspicious words. Faster calls and sharper eyes score more.
Scam or legit?
From
Tap words in the sender line or the message. Each wrong tap costs 2 points; three ends the hunt.
Safer move:
Your result
PointsIf a real message ever looks like these: forward scam texts to 7726 (free), forward scam emails to report@phishing.gov.uk, and if you have paid or shared details, tell your bank straight away and report it to Report Fraud.
Review your round
How to play
- Read the situation: it tells you what you did, or didn't do, before the message arrived.
- Call it: Scam or Legit, before the 15-second timer runs out (keys S and L work too). A right call scores 10, plus up to 5 for speed.
- If it's a scam, hunt the red flags: tap the suspicious words in the sender line or the message. Finding them all scores 15. Wrong taps cost 2 points each.
- A genuine message called Legit scores the full 15 too, because there's nothing to find. Then see why, and the safer move.
- Play today's five (the same for everyone, up to 150 points) or practise eight, then share a challenge link.
Useful checks outside the game
Open the official app yourself. Use a phone number you already trust. Check a changed payment instruction with the person through a separate channel. A familiar name, a padlock or an urgent tone is not proof.
If you get a real one: forward scam texts to 7726 (free) and scam emails to report@phishing.gov.uk, then delete them. Call your bank on 159 if you are worried about your account. If you have lost money or shared details, tell your bank straight away and report it to Report Fraud (0300 123 2040; in Scotland, call Police Scotland on 101).
The scenarios are fictional, and any web addresses in them use reserved example domains. Reporting routes checked October 2026. For real guidance, see the NCSC’s phishing advice and Take Five.
How it works
When does the daily round change?
At midnight UTC. Everyone gets the same five scenarios in the same order. Your daily progress and completion streak are saved on this browser.
Can I turn the timer off?
Yes. Use the Timer button before you start a round. Without the timer there is no speed bonus, so the top score is 125 for five messages instead of 150.
Can I challenge a friend?
Yes. After a round, copy its challenge link. Your friend gets the same messages in the same order. Friend challenges do not change your daily streak.
Is every message a scam?
No. Some are genuine. Use the context and decide what can be checked independently, rather than guessing from spelling or how professional a message looks.
What should I do if I get a real scam message?
Do not click, reply or call back. Forward scam texts to 7726 (free) and scam emails to report@phishing.gov.uk. If you have paid money or shared details, tell your bank straight away and report it to Report Fraud on 0300 123 2040 or reportfraud.police.uk (in Scotland, call Police Scotland on 101).
What is stored?
The game saves the message IDs, your calls, the red flags you found, your points, your timer setting and your daily streak on this browser. It does not collect real messages or contact details. When you finish the daily round, only your score is sent, anonymously, to show how you rank against everyone else (see the privacy policy).