Lloyds Bank Warns of New Scam Targeting Customers: How to Protect Your Account

Lloyds Bank issued an urgent scam warning on April 24, 2026, alerting customers to a sophisticated phishing campaign that aims to steal login credentials and personal financial details. If you hold an account with Lloyds—or any UK bank—this is worth understanding because the tactics used are likely to be repurposed by other fraudsters.

What happened

The alert from Lloyds describes fake communications that impersonate the bank. Customers have reported receiving emails, text messages, and phone calls that appear to come from Lloyds. The messages typically create a sense of urgency: a suspicious transaction has been blocked, your account is at risk, or you need to verify your identity immediately.

The goal is to trick you into clicking a link that leads to a fake Lloyds login page. Once you enter your username, password, or a one-time passcode, the attackers capture that information and use it to access your real account. Some variants also ask for your card number, PIN, or full date of birth.

This is not a novel technique, but the current wave appears to be more convincing than earlier versions. According to the bank’s announcement, the fraudulent messages closely mimic official Lloyds branding and can even appear in the same email thread as genuine previous correspondence.

Why it matters

Phishing remains one of the most common ways fraudsters gain access to bank accounts. In the UK, Action Fraud and UK Finance have repeatedly warned that these attacks are becoming harder to spot. The Lloyds alert is particularly timely because it was released while the campaign is still active, meaning many customers may receive a suspicious message in the coming days or weeks.

If you fall for the scam, the consequences can include unauthorised transfers from your account, identity theft, or the compromise of other accounts that use the same email and password combination. Banks have protections in place, but reimbursement is not automatic—especially if you provided your security details voluntarily.

What readers can do

Recognise the red flags

  • Urgent language that pressures you to act immediately, such as “your account will be frozen” or “confirm now to avoid a charge.”
  • Fake URLs that look like Lloyds but contain slight misspellings or extra characters, e.g., lloyds-bank-secure.co or similar.
  • Requests for passwords, PINs, or full card numbers. Lloyds will never ask for these by email, text, or phone.
  • Unexpected attachments or links from addresses that do not end in @lloydsbank.co.uk.

Immediate steps if you receive a suspicious message

  • Do not click any link or reply to the message.
  • Forward it to Lloyds using the dedicated reporting address: email [email protected]. For texts, forward to 7726 (free of charge).
  • Report it to Action Fraud online at actionfraud.police.uk or call 0300 123 2040.
  • If you have already clicked a link and entered details, contact Lloyds immediately on the number on the back of your debit card. Change your password and enable two-factor authentication as soon as possible.

Long-term habits to reduce risk

  • Enable two-factor authentication on your Lloyds account and any other services that support it.
  • Monitor your account regularly using the mobile app or online banking, not just when you see a statement.
  • Keep your contact details up to date so the bank can reach you if they detect suspicious activity.
  • Consider using a separate email address for banking correspondence only.
  • Install the latest updates on your phone and computer—fraudsters often exploit known vulnerabilities.

What the bank will not do

Lloyds will never send you a link asking you to log in to “verify” a transaction. They will not call you and ask for your full password or a passcode generated by your authenticator app. If you receive such a request, it is almost certainly a scam.

Sources

  • Lloyds Bank scam alert published 24 April 2026 (official website or direct customer communication).
  • Action Fraud – reporting phishing scams: actionfraud.police.uk.
  • UK Finance – guidance on bank impersonation fraud.

This article is for informational purposes only and does not constitute financial or legal advice. If you believe your account has been compromised, contact your bank without delay.