Scam awareness guide
Impersonation Scams
Fraudsters pose as authorities, staff, maintenance teams, and trusted organisations to force urgent action.
Detailed overview
Impersonation scams happen when a fraudster pretends to be a trusted person or organisation in order to influence your behaviour. This can include pretending to be the police, a bank, HMRC, a local council, a landlord, a company employee, a maintenance worker, a delivery firm, technical support, or even a senior colleague at work. The aim is usually to get money, access, personal data, passwords, or one-time passcodes. The tactic works because it borrows trust. Instead of persuading you from scratch, the scammer steps into the role of someone you are already trained to believe.
These scams are especially effective because the impersonated role often carries authority. If someone claims to be from a government body, building management, IT support, or a utility provider, many people feel they should cooperate quickly. The scammer may use logos, email signatures, uniforms, job titles, reference numbers, or spoofed phone numbers to strengthen the illusion. In person, they may wear high-visibility clothing or carry fake ID. Online or by phone, they may sound calm, professional, and highly informed. They may already know your name, address, or partial account details, which makes the contact feel even more genuine.
Impersonation scams frequently use urgency. A fake bank employee may say your account is compromised and you must move money immediately. A fake maintenance worker may claim there is an emergency leak, electrical issue, or inspection requirement. A fake employer or senior manager may demand an urgent purchase, transfer, or disclosure of payroll information. A fake authority may threaten arrest, fines, court action, visa trouble, or account closure if you do not comply quickly. The content changes, but the structure is consistent: authority plus urgency plus instruction.
Impersonation scams also work in workplaces and shared residential settings because people are used to process and hierarchy. An employee may not want to challenge someone claiming to be from IT, compliance, facilities, or leadership. A tenant may assume a repair worker sent by a landlord is legitimate. A vulnerable resident may let someone into the property because the person sounds official and references a plausible problem. This is why impersonation fraud is dangerous both digitally and physically. It can lead to account theft, burglary, device compromise, financial loss, and exposure of confidential information.
Warning signs include unexpected contact, insistence on secrecy, refusal to allow independent verification, requests for gift cards or bank transfers, demands for one-time passcodes, and pressure to act immediately. Another red flag is when the person discourages you from ending the call or checking through normal channels. Genuine organisations understand verification. Scammers resent it.
The safest response is to break the interaction pattern. If someone phones claiming to be from a trusted organisation, end the call and contact that organisation using a number from its official website, app, bank card, or known documents. If someone arrives in person, do not let them in until their identity has been checked through a known route. In workplaces, verify through internal systems, known colleagues, or published directories rather than the details provided by the visitor or email. Never hand over OTP codes, passwords, or remote access to a caller. No legitimate organisation should need your secret credentials to “help” you.
Impersonation scams succeed because they exploit the natural human tendency to respect roles and respond to apparent authority. The best protection is to treat unexpected contact with discipline, not emotion. If you did not request it, you should not trust it until it has been verified independently.
