Fake Energy Rebate Text Scams
SMS messages claiming you are owed a government or supplier energy rebate, designed to steal banking details or account credentials.
Last reviewed: 1 June 2026
What this scam is
Fake energy rebate text scams are smishing attacks — fraudulent SMS messages — that claim you are entitled to a payment from a government energy scheme, your energy supplier, or a regulatory body. The message typically names a realistic-sounding scheme and a specific rebate amount, then provides a link to a website where you are asked to enter banking details, account credentials, or personal information to receive the payment.
This scam sits at the intersection of two common fraud patterns: the utility rebate impersonation and the government payment smishing attack. It is particularly effective because governments in several countries have run genuine energy payment or rebate schemes in recent years, and awareness of these programmes is widespread. When a text arrives claiming to offer a payment connected to a real or recently concluded programme, the scenario is plausible to many recipients.
The mechanics of harm follow the same path as other banking credential phishing attacks: entering your details on the fake site either directly exposes your bank account information — sort code, account number, card details — or provides credentials for your energy account that can be used to change billing details or authorise fraudulent switching. In some variants, the fake site triggers a malware download or presents a fake bank login page after the initial form is completed.
Because SMS messages are perceived as less risky than emails by many people, and because the short format of a text makes it harder to spot the subtle indicators of fraud that are sometimes visible in longer phishing emails, smishing attacks often achieve higher click-through rates than equivalent email fraud.
How it works
The message typically arrives with no prior relationship to its sender. It may appear to come from a short code that mimics a government department's messaging service, or from a number formatted to look official. In some variants, through SMS sender ID spoofing, the message appears in the same thread as genuine messages from a real government body or utility company on your device.
The text is brief and combines three elements: an assertion that you are owed money (a specific amount adds credibility), a reason that is plausible given current affairs (a regulatory review, a seasonal rebate, a government scheme), and a call to action with a short link and often a deadline.
The link leads to a website that closely mimics the visual design of a government payment portal or energy supplier's customer area. The page asks for your name, address, and energy account number — which feel like reasonable verification steps — followed by your bank sort code and account number, or your card details, supposedly to route the payment to you.
Some variants go further: after the initial form, you are presented with a page claiming the payment requires a small processing verification, asking for a temporary card authorisation of a nominal amount. This is a standard advance-fee structure applied in a digital context.
In variants targeting energy account credentials, the fake login page asks for your energy account email and password. These are then used to access your real account, potentially to change billing details or harvest personal information for identity fraud.
Why this scam works
A text claiming you will receive money does not trigger the same immediate wariness as a request for money. The psychological orientation shifts from defence to anticipation. Clicking a link to claim money feels different from clicking a link to pay a bill.
The brevity of SMS as a medium means there is less opportunity to notice subtle inconsistencies in language, formatting, or sender information that a longer email might expose. Mobile devices also make it harder to hover over links to preview destinations, and the smaller screen makes URL inspection less intuitive.
Timing matters too. When government energy payment schemes are active or have recently concluded, awareness is high and the scenario presented in the text is within the range of things that could genuinely be happening. Recipients who are aware of genuine schemes are more likely to engage than those who have never heard of them.
A typical pattern
A householder receives a text stating that a government energy support scheme has calculated a payment due to their household and that they must claim it by a certain date via a link. The link opens a page styled to resemble a government payment portal, asking for their name, address, and bank sort code and account number. They complete the form and receive an on-screen confirmation. A week later, they notice an unfamiliar standing order on their bank statement for a moderate amount. Their bank confirms it was set up using the details they entered on the site. No government energy payment was ever due.
Common red flags
- Unexpected text about a government or supplier energy rebate you did not apply for
- Link in the text — genuine payments do not require you to click a link to receive them
- Specific amount that sounds familiar from media coverage of real schemes
- Deadline pressure: claim within 14 days or forfeit the payment
- Request for sort code and account number on the linked website
- Request for energy account username and password on the linked page
- Small processing fee required before the payment is released
- Sender ID looks like a government body but the message thread is unfamiliar
- URL of the linked site does not match the genuine government or supplier domain
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
GOVUK ENERGY SUPPORT: You are owed [amount] under the energy rebate scheme. Claim before [date]: [fake link]
[Utility company] has credited [amount] to your account. Confirm your bank details to receive payment: [fake link]
Your household qualifies for a [amount] energy support payment. Verify your account at [fake link] to claim.
Final reminder: your energy rebate of [amount] expires in 48 hours. Claim at [fake link].
Energy regulator review: [amount] is owed to your address. Claim securely: [fake link]. Ref: [account number]
We attempted to send your energy rebate but need to confirm your bank details. Visit [fake link] within 7 days.
Common variations
- Government scheme impersonation — uses the name and branding of a real recently concluded programme
- Supplier rebate smishing — purports to be a credit from your energy company
- Advance-fee variant — small processing charge required before the rebate is released
- Credential phishing variant — fake login page harvests energy account username and password
- WhatsApp variant — same message delivered via messaging app rather than SMS
- Two-stage variant — first message collects personal details, second requests bank information
How to verify before you act
Call your energy provider using the number on your bill and ask whether any rebate has been credited to your account. If a genuine payment is due, it will be visible in your account when you log in through the official app or website.
For government scheme payments, check your national government's official energy or social support department website by typing the address yourself — not by searching immediately after receiving a text, as search results can sometimes surface fraudulent sites. Genuine scheme details include the official application or eligibility process and do not involve a link in an SMS.
Do not click the link in the message. If you want to check whether a rebate is real, navigate to your energy account or the relevant government website independently.
Examine the phone number or sender ID carefully. Government departments and utility companies use consistent sender IDs for official communications. A number that looks unusual or a sender ID that does not match previous messages from the same organisation should be treated with caution.
Legitimate rebates or government payments that go to a bank account you have previously registered do not require you to re-enter your account details by clicking a link in an SMS.
Payment methods used
- Bank account details harvested for direct debit or standing order fraud
- Card details used for card-not-present transactions
- Small advance 'processing' fee taken by card
Who is usually targeted
- Households who received genuine government energy payments in the past
- Anyone who follows news about energy costs and support schemes
- People on lower incomes who are the genuine target group for real energy support payments
What to do immediately
- Do not click the link in the message
- Log in to your energy account directly via the official app or website to check for any genuine credit
- Call your energy provider on the number from your bill to ask about any rebate on your account
- If you already entered bank or card details, call your bank immediately and monitor your account
- Forward the suspicious text to 7726 (UK spam reporting number) and report to your national fraud authority
- If you entered your energy account credentials, log in immediately to change your password
How to prevent it
- Never click a link in a text about a government payment or energy rebate — check your account directly
- Verify government payment schemes on official government websites by typing the address yourself
- Forward suspicious texts to 7726 to report to your mobile network
- Enable transaction alerts on your bank account to detect any new direct debits or standing orders quickly
- Use a unique password for your energy account that you do not use elsewhere
- Enable two-factor authentication on your energy account if available
- Be especially alert to these texts during periods when genuine energy support schemes are in the news
Evidence to preserve
- Screenshot of the full text message including the sender ID and timestamp
- The URL of any linked site (note without clicking again)
- Any reference number or account number mentioned in the message
- Bank statements for any subsequent unrecognised transactions
- Any confirmation page you saw after entering details
Where to report it
- Action Fraud (UK) — UK national fraud & cybercrime reporting centre
- FTC ReportFraud (US) — US Federal Trade Commission fraud reports
- FBI IC3 (US) — US Internet Crime Complaint Center
- Scamwatch (Australia) — Australian competition & consumer reporting
- Your bank's fraud line — Use the number on the back of your card or in your banking app — never a number the caller gives you
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Frequently asked questions
Does the government send energy rebates by text with a link?
No. Genuine government energy payments are typically made automatically to eligible accounts or require an application through official, independently verified channels. They are not initiated by clicking a link in an SMS from an unknown sender.
The amount mentioned in the text matches what I heard in the news — does that make it real?
Scammers track media coverage of genuine schemes and use the publicised amounts to make their messages more believable. A matching amount is not confirmation that the text is genuine — verify through your energy account or the official government site.
I clicked the link but did not enter any details — am I at risk?
Possibly. Some malicious sites attempt to install malware or track device details on visit, even without form submission. Run a security scan on your device and monitor your accounts. Change passwords for any accounts accessed on that device recently.
How do I check whether a government energy rebate is genuine?
Go to the official government website by typing its address yourself. In the UK this would be gov.uk. Look for the scheme by name. Genuine schemes list eligibility criteria, amounts, and how payments are made — and they do not require you to click a link in a text message to apply.
Can my bank recover money taken this way?
If bank account details were used to set up an unauthorised direct debit or standing order, contact your bank immediately — unauthorised direct debits can generally be reversed under the direct debit guarantee. Card transactions may be eligible for chargeback. Act as quickly as possible.
Why do these texts sometimes appear in my real government message thread?
SMS sender ID spoofing allows a scammer to set the sender name to any text string, including the name of a government department. When your device groups messages by sender name, a spoofed message can appear alongside genuine ones. This does not mean the message is from the real sender.
Should I forward suspicious energy rebate texts to anyone?
Yes. In the UK, forward to 7726 (SPAM on a phone keypad) — this reports the sender to your mobile network for investigation. Also report to Action Fraud online. In the US, forward to 7726 (supported by major carriers) or report to the FTC at reportfraud.ftc.gov.
What if I entered my energy account email and password on the site?
Log in to your energy account immediately using a browser you type the address into yourself, and change your password. If you use the same password elsewhere, change it on those accounts too. Contact your energy provider to flag that your credentials may have been compromised.