Check if a message or call is genuine and what to do next
If you're wondering whether a text you have received is genuine, you're right to be suspicious. Criminals have become very sophisticated, enticing you to click on links or call phone numbers that belong to them.
Criminals could also contact you directly claiming to be M&S Bank or even the police, requesting that you complete certain actions which could result in fraud.
Here you'll find examples of the kind of texts we might send you and why.
When you make an online transaction, we might send you a One-Time Passcode (OTP) as an additional security check.
NEVER share this code, even with bank staff or police. If you receive a One-Time Passcode for a purchase you haven't made, please contact us.
To find out more, visit our OTP FAQs page.
We may send messages, asking you to confirm your online purchase. In some cases, we may ask you to call us.
We will only send our fraud alert messages whilst verifying a purchase, we will never contact you separately via phone or other methods, asking you to reply to our messages.
Always read our messages carefully, we will never pressure you into replying to a security message.
If you receive a message for a purchase you haven't made, please contact us.
You may receive other texts from us, depending on your marketing preferences and we could also contact you because you might be due a payment. This could be by letter, text message or a phone call.
If in doubt, don't respond - call us using the number on the back of your card.
Fraudsters can use text messages to try and gain access to your information and money. This is called Smishing. Find out more about Smishing, what to look out for and other techniques used by fraudsters.
If you would like to check if a text or call has come from us, enter the number into the box below and we will confirm if it is a genuine M&S Bank telephone number.
Please enter telephone numbers without spaces eg "03456005860" not "0345 600 5860"
If you receive an email you believe to be suspicious, claiming to be from M&S Bank, or find a suspicious website purporting to be M&S Bank, do not click any links or open any attachments. Simply forward the email or URL to phishing@mandsbank.com and we will investigate, and take the appropriate steps.
If you believe that you have shared confidential information either online or by telephone, or might be a victim of crime, such as a scam or cybercrime, please report this separately to your bank or card provider and Action Fraud. If you are an M&S Bank customer, please call the number on the back of your card. The phishing email address is not designed for reporting acts of financial crime.
