"Hi Mum" Texts and Other Message Scams Sweeping Phones in 2026
A message from someone you love — or so it seems
It arrives out of nowhere, usually from a number you do not recognise, on WhatsApp or as a plain text: "Hi Mum, I've dropped my phone down the toilet and I'm messaging on a mate's old one — this is my new number, save it." A few friendly messages later comes the real payload: a bill that has to be paid today, a bank that is mysteriously locked, a favour that only you can do, and could you just transfer the money and they will sort you out the moment their phone is fixed.
There is no dropped phone and no child in trouble. There is a stranger who has learned that the fastest route into a parent's bank account is not a clever piece of code but a parent's love. The "Hi Mum" scam — and its "Hi Dad" and "it's your daughter" variants — has become one of the most common frauds on British phones precisely because it skips the technology and goes straight for the feeling. This article breaks the script down, shows you the tells, and gives you a way to make your family immune to it.
How the script actually runs
The con follows a reliable arc, and seeing the whole shape at once makes each step easier to catch.
First, contact from an unknown number, opening with a claim that explains why you would not recognise it — a lost, broken or stolen phone. That single detail does a lot of work: it accounts for the strange number, and it heads off your obvious instinct to call the old one. Second, a short warm-up. The scammer plays the part, mirrors your affection, answers in a way a distracted young adult might. They are not rushing yet; they are establishing that this is really your child. Third, the hook — an urgent, specific reason money is needed now, framed so that a short delay sounds costly or embarrassing. Fourth, the ask: a bank transfer to an account you have never seen, "because mine is locked", often with a plea to keep it quick and not make a fuss.
Every stage is doing a job. The lost-phone story defuses verification. The warm-up borrows trust. The urgency removes the pause in which you would think. And the request for a transfer routes the money somewhere you cannot easily claw it back from — the same reason fraudsters everywhere prefer bank transfers, which our guide to paying safely online unpicks in detail.
Why it works on sensible people
It is tempting to think you would never fall for this. Plenty of careful, intelligent people have, and the reason is not gullibility. The message targets a reflex that is supposed to override caution: when someone we love says they are in trouble, hesitating feels like the wrong thing to do. The scammer engineers a situation where checking properly seems unkind — you would be doubting your own child over a few pounds. That manufactured guilt is the real weapon, and it works on exactly the people who care most.
The new-number detail is the linchpin. It is completely ordinary for a family member to message from an unfamiliar number, so nothing about the opening feels alarming. By the time money is mentioned, you have already accepted the premise. The fraud does not ask you to believe something outlandish; it asks you to believe something entirely normal, then leans on it.
The same trick, wearing other costumes
"Hi Mum" is one member of a family of message scams that all borrow a relationship or an institution you trust. Recognising the pattern in one helps you spot the rest.
- The friend in need. The same script, but the sender claims to be a friend or colleague whose account you already know, sometimes from a genuinely hacked profile — which is why the message can come from a real contact.
- The stolen verification code. Someone messages asking you to read out or forward a six-digit code you have just received "by mistake". That code is the key to one of your own accounts; sharing it hands the account over. No genuine person or company ever needs a code that was texted to you.
- The too-good job. An unsolicited message offers easy work — liking videos, "reviewing" products, simple tasks paid daily. Small early payments build trust before you are asked to deposit your own money to "unlock" bigger earnings that never arrive.
- The parcel and the bank text. Fake delivery texts and messages posing as your bank work the same emotional levers — a small problem, a helpful link, a pressing deadline — and often set up a follow-up call.
Different masks, one engine: reach you on a channel you use for real relationships, borrow a trusted identity, and manufacture a reason to act before you check. This whole approach — fraud delivered by text and messaging apps — is what people mean by smishing.
The tells to watch for
When a message asks for money or a code, run it against this list. Any single item is a reason to slow down; two together is a reason to stop entirely.
| Tell | In a "Hi Mum" text it sounds like | | --- | --- | | New or unknown number | "This is my new number, save it and delete the old one" | | A reason you can't call | "My phone's broken, I can only message on here" | | Rapid emotional warm-up | Affection and familiarity before any request | | A sudden, specific urgency | "The payment has to go today or I lose the deposit" | | A request to move money | "Can you transfer it, mine's locked, I'll pay you back" | | A push for secrecy or speed | "Don't tell Dad, he'll worry — just sort it quickly" |
The cluster that should always stop you is the combination at the heart of the scam: a fresh number, an excuse for why you cannot hear their voice, and a request to send money. Genuine emergencies survive a phone call. This one is built specifically to avoid one.
What to do the moment a message asks for money
Do not reply to the new number to test it — a real scammer will pass that test happily. Instead, break out of the conversation entirely. Call your child, or the friend, on the number you already have saved for them, or reach them another way you know is really theirs. If they answer and know nothing about it, you have caught a scam. If you genuinely cannot reach them, ask the messenger something only the real person could answer — not a fact that could be looked up, but a shared, private detail — and treat any dodge, delay or excuse as confirmation.
Above all, never send money or share a code on the strength of a text alone, however urgent it sounds. If you have already sent money, contact your bank straight away and tell them it was a scam; the sooner you call, the better the chance of stopping or recovering it, and the moves that give you the best shot at a refund are laid out in our getting your money back guide. You can report the message inside WhatsApp by opening the chat, choosing to report it, and blocking the number, and you can forward a scam SMS to 7726 free of charge so your mobile network can investigate the source.
Before you go
The strongest defence against a "Hi Mum" text is not something you do when it arrives — it is an agreement you make before it ever does. Sit down with the people you would drop everything for, and settle on a simple family rule together: no money moves on the strength of a message, full stop, until someone has heard a real voice. Some families go further and pick a private word or a throwaway question — the name of a first pet, an in-joke only the two of you share — that a genuine family member can produce instantly and a stranger cannot. Agree it once, out loud, while nobody is under pressure.
Do that, and the next unknown number claiming to be your son walks into a door you locked in advance. The message can be as tearful and urgent as the scammer likes; it meets a household that has already decided a text is not proof of anything, and that love, in your family, answers the phone before it opens its wallet. A checker can weigh a website, but it cannot weigh a feeling — and this scam lives entirely in the feeling. The tool we are building at CheckAScam may help later, with any link a fraudster eventually sends, but the first message, the one that tugs at you, is caught by a person who has thought about it beforehand, not by any software.
Frequently Asked Questions
My child really did get a new number — how do I tell that apart from the scam?
By using a channel the message did not choose. A real change of number is easy to confirm: call them on their old number, ask a mutual family member, or wait until you next see them — a genuine new number still belongs to a person you can reach another way. The scam depends on you accepting the new number and then acting on it without stepping outside the conversation. So the test is not whether the story is plausible, because "I've got a new phone" always is; the test is whether you can verify the person through something other than the message in front of you before any money or information changes hands.
Should I reply to a "Hi Mum" text to find out if it's really them?
No, because replying inside the conversation cannot confirm anything — a scammer will answer your questions as smoothly as your child would, and every exchange only draws you deeper in. Worse, engaging tells the sender your number is live and worth pursuing. Leave the message where it is and verify from the outside: ring the number you already trust for that person. If you want to be certain before you do anything, ask the sender a private question with an answer that cannot be searched for, and treat hesitation or a changed subject as proof it is a stranger.
Why should I never share a verification code someone asks me for?
Because that code is a key to one of your own accounts, not theirs. Six-digit codes are sent to confirm that the person logging in is really you, so a code that lands on your phone protects your account — a bank, an email, a messaging app. Anyone messaging to say a code arrived "by mistake" and asking you to pass it on is trying to walk through a door your account has locked. No legitimate company or genuine friend ever needs a code that was texted to you, so the safe answer to that request is always no, and it is worth changing your password if someone tries it.