Is a text or email from the government asking me to verify my identity on a new digital ID system real?
Be very cautious. Government digital ID communications are issued through official portals and pre-announced — unsolicited texts asking you to verify are almost always phishing.
Last reviewed: 1 August 2026
Explanation
Digital identity phishing campaigns impersonate government agencies by telling you that you must verify your identity on a new system or your access to benefits, tax, or healthcare records will be suspended. The message contains a link to a convincing fake government website that harvests your real government login credentials or your personal and financial details. Genuine government digital identity programmes are announced publicly through official channels and allow extended transition periods. They do not send bulk SMS or email demanding immediate verification under threat of account closure. In the UK, legitimate digital identity services include GOV.UK Verify and HMRC online accounts — accessed by typing the address yourself, never via a link in a message.
The pressure in these messages is deliberately front-loaded: a short deadline, a threatened suspension, and a link that promises to resolve everything in one tap. Genuine identity programmes work the other way around — they give long notice periods, offer several routes to comply, and never make a single unsolicited message the only path. If you are unsure whether a scheme applies to you, search for it from your own browser and read the official guidance. Anything that genuinely affects your benefits, tax, or records will also be visible when you log in to the relevant account directly, which is the only check worth relying on.
Common red flags
- Unsolicited text about a new government digital identity system
- Link in the message rather than instruction to visit an official portal
- Threat that benefits or tax records will be suspended without immediate action
- Request for bank details as part of identity verification
- Sender address or URL does not match the official government domain
What to do now
- Do not click any link in the message
- Visit the relevant government portal by typing the address yourself
- Call the relevant agency using a number from the official website
- Report the phishing message to your national fraud service
Frequently asked questions
How will I know when a real government digital identity scheme launches?
Genuine schemes are announced through official government websites, mainstream media, and written letters — not through mass text campaigns.
What if I already clicked the link and entered my details?
Change the password for the affected government account and any account that shares it, contact your bank if you entered financial details, and report the incident to your national fraud service. Watch for follow-up contact — submitted details are often used for a second, more targeted approach.