UK AI Scam Watchlist: Check the Seller, Not the Spelling
National Trading Standards warns that polished shops, convincing reviews and familiar voices can be manufactured. Independent checks matter more than spotting an awkward sentence.
The short version
What you need to know
- National Trading Standards describes AI as making familiar fraud cheaper, faster and more convincing—not creating an entirely new category of crime.
- A polished shop, fluent message or familiar-sounding voice is not independent proof of identity. Verify through a route you already trust.
- A VPN cannot authenticate a retailer or stop you handing payment details to a fake checkout.
What the watchlist says
National Trading Standards has produced an AI Scam Watchlist covering ten types of consumer fraud, highlighted by the BBC on 18 October. It draws on NTS intelligence and cases, evidence from the Chartered Trading Standards Institute and partner input. It is a practical warning about techniques, not a measurement of the chance that any particular message is fraudulent.
The watchlist describes fake shops, recruitment and investment fraud, romance scams, travel and ticket scams, bogus tech support, impersonation, rogue traders, charity scams and recovery scams. AI can supply plausible images, fluent messages, fake reviews and chatbots. The central change is scale and credibility: familiar scams become easier to assemble and harder to reject on appearance alone.
Check the shop beyond its own storefront
One example is a shop claiming to be a family-run British business, complete with convincing owners and high-street imagery. NTS warns that orders may never arrive or may turn out to be cheap, mass-produced goods instead. A professional page and a friendly customer-service conversation do not establish where the business operates or whether it will deliver.
Before buying from an unfamiliar seller, check the exact website address, contact details, delivery terms and returns policy. Look for reviews across independent sources rather than relying on testimonials on the checkout site. Check a claimed physical address on a map. Reverse image search can reveal copied photographs, but finding no match is not proof that a generated image or business is genuine.
For travel and tickets, the watchlist recommends comparing established providers and resisting countdowns or claims that stock is about to disappear. Its advice is to pay by credit card if possible rather than bank transfer. That is a precaution, not a guarantee that every purchase will be recoverable.
Treat an urgent familiar voice as a request to verify
The watchlist warns that voice cloning and deepfake video can impersonate a friend or relative asking for emergency money. Stop the conversation and contact the person using a number you already know, or another established channel. Do not use a new number supplied by the same caller as the verification route.
NTS also suggests agreeing a private family passphrase. Use that as an extra check, not permission to ignore other warning signs. The same separation applies to unexpected tech-support warnings: open the provider's official app or website independently rather than calling the number in a pop-up or sharing a one-time security code.
If you have already paid a suspected scammer, contact your bank through its official app or the number on your card promptly and explain what happened. Be wary of unsolicited offers to recover the money for an upfront fee: recovery scams are themselves one of the watchlist's categories.
Where a VPN helps—and where it does not
A VPN can protect the network path between your device and the VPN service and reduce what a local network operator can observe. It does not verify a shop's ownership, establish whether a review is genuine or prove who is speaking on a call. HTTPS and a VPN can carry your information securely to the wrong person if you choose a fraudulent destination.
Some security products offer separate malicious-site blocking, but that is not an inherent guarantee of a VPN tunnel and cannot identify every new scam. For these threats, the decisive step is checking the recipient independently before sending money, account details or identity documents.
Primary reading
Sources and further reading
We add plain-English context and practical advice. These links let you inspect the underlying reporting, research and official guidance directly.