TL;DR: Fake Halifax emails ask you to confirm personal information through a link to a lookalike site (Which? flagged one in September 2026). Halifax says genuine emails include your name and part of your postcode, and it never links straight to the Online Banking sign-in page, asks you to move money, or asks for a test payment. Forward scam emails to security@halifax.co.uk and texts to 7726.
The email
Which? warned on September 7, 2026 about a Halifax impersonation email asking you to confirm personal information via a link to a fake Halifax site. It looks routine. That’s the trick.
Halifax’s tells for a genuine email
From Halifax’s scam messages page:
- Genuine Halifax emails include your name and part of your postcode.
- They may link to information or the secure app, but never directly to the Online Banking sign-in page.
- Check the sender’s full address by hovering or tapping. If it doesn’t match the name, it’s likely a scam.
The postcode detail is a nice, simple check: scammers sending to millions rarely have it.
What Halifax will never do
- send you to a page asking for sign-in, personal or banking details;
- tell you to move money to another account;
- ask you to make a test payment online;
- ask you to share personal details or move money by phone, email or text;
- ask you to log in or verify yourself through links or QR codes.
Why bank impersonation keeps working
UK Finance’s annual fraud report, covered by The Register in June 2026, put total UK payment fraud losses for 2025 at £1.28 billion across 3.81 million cases. Authorised push payment (APP) fraud, where you’re tricked into sending the money yourself, rose 19% to over £576 million, and impersonation scams were among the types with double-digit rises in case numbers. 66% of incidents started on online platforms and 17% through telecoms, which is exactly where a fake Halifax email or text lands.
Treat a fake "confirm your information" email as a possible first step. Details entered on a lookalike site give criminals enough to sound convincing in a follow-up call claiming to be from your bank.
How to report
- Emails: forward to security@halifax.co.uk, then delete. You can also message Halifax through the app.
- Texts: forward to 7726, then delete (how).
- Unsure? Call Halifax on a number you trust, or dial 159 (how 159 works).
If you entered details
Contact Halifax immediately using its official contact page or 159, change your login details and check recent payments. Report losses to Report Fraud.
Will you get your money back?
If you were tricked into making a bank transfer, the UK’s mandatory reimbursement rules for APP scams, in force since October 2024, cover most victims, up to £85,000 per claim, with some exceptions. The Payment Systems Regulator’s July 2026 review found reimbursement rates rose from 54% to 65%, and APP losses over Faster Payments fell by around 21%, according to Regulation Tomorrow. Report quickly; see our guide to reimbursement for scam victims. If Halifax refuses, you can take it to the Financial Ombudsman.
A free email exposure check shows if your email address is in breach data, which is how these emails find you.
Frequently Asked Questions
Will Halifax refund me if I was scammed?
Under UK rules in force since October 2024, most victims of authorised push payment scams must be reimbursed up to £85,000, with some exceptions. Report it straight away.
How much is lost to bank impersonation in the UK?
UK Finance put total 2025 payment fraud losses at £1.28 billion, with APP fraud over £576 million and impersonation case numbers rising.
How can I tell if a Halifax email is real?
Halifax says genuine emails include your name and part of your postcode, and never link directly to the Online Banking sign-in page.
Where do I report a fake Halifax email?
Forward it to security@halifax.co.uk and delete it.
Will Halifax ask me to make a test payment?
No. Halifax says it will never ask you to make a test payment online.
How do I report a fake Halifax text?
Forward it to 7726 and delete it.
Sources
- Halifax: Scam messages
- Which?: The latest scam alerts (Halifax email, Sept 7, 2026)
- The Register: UK Finance fraud report, Brits lose £1.3B (Jun 2026)
- Regulation Tomorrow: Payment fraud falls by £73m following PSR reimbursement scheme (Jul 2026)