What to do if…
you receive a call or message claiming to be from an embassy about your passport and it asks for personal details
Short answer
Stop the conversation and do not share any details. Then verify independently by contacting the embassy using contact details you look up yourself (not anything they sent you).
Do not do these things
- Don’t give your passport number, date of birth, address, copies/photos of documents, or any one-time codes.
- Don’t click links, open attachments, or scan QR codes sent in the message.
- Don’t call back the number that contacted you or continue the thread “to prove it’s real”.
- Don’t feel pushed by urgency (“your passport will be cancelled”, “you’ll be detained”, “pay now”).
- Don’t pay by bank transfer, crypto, or gift cards (common scam routes).
- Don’t “confirm details” even if they already know some information about you.
What to do now
- End contact safely. Hang up or stop replying. If it’s a robocall, don’t press any buttons.
- Take a quick record (30 seconds). Screenshot the message, note the phone number, time/date, and what they asked for. Then stop engaging.
- Verify using contact details you find yourself (not from the message).
- Use a search you initiate (or a government directory you trust) to find the embassy’s main switchboard and call that number.
- Ask to be put through to consular services and say: “I received a message claiming to be from you asking for passport/personal details. Can you confirm whether you contacted me?”
- If it claims to be the British embassy/consular services (or it’s about a UK passport) and you’re abroad, use the UK’s 24/7 consular route to verify.
- Call the Foreign, Commonwealth & Development Office (FCDO) on +44 (0)20 7008 5000 and choose the option for consular services for British nationals overseas.
- If you shared anything sensitive, act as if it’s compromised.
- If you shared passwords or codes: change the password immediately (starting with email accounts), and turn on two-step verification.
- If you shared bank/card details or made a payment: contact your bank/card provider using the number on your card/app and ask for the fraud team.
- If you sent an image/scan of your passport: write down exactly what you sent and when, then watch for follow-up identity-fraud attempts.
- Report it (UK reporting routes).
- Forward suspicious emails to the Suspicious Email Reporting Service (SERS).
- Forward suspicious text messages to 7726 (free) to report to your mobile provider.
- If you lost money or shared details and think it’s fraud, report it to Report Fraud (the UK’s national fraud and cyber crime reporting service). If you live in Scotland, report to Police Scotland on 101.
What can wait
- You don’t need to decide today whether to “follow up” with the person who contacted you.
- You don’t need to send documents “just to be safe”.
- You don’t need to post about it publicly right now; focus on stopping further contact, verifying through official channels, and securing accounts.
Important reassurance
Scammers routinely spoof real embassy names and phone numbers, and the message can look convincing. Pausing contact and verifying via a number you look up yourself is the right move, even if you’re worried about missing something urgent.
Scope note
This is first steps only to reduce harm and buy time. If you’re abroad and genuinely have an urgent consular issue, the next step is speaking to the embassy through verified contact details.
Important note
This guide is general information, not legal advice. If you feel at immediate risk or threatened, prioritise your safety and contact local emergency services.
Additional Resources
- https://www.gov.uk/report-suspicious-emails-websites-phishing
- https://www.ncsc.gov.uk/collection/phishing-scams/report-scam-email
- https://www.ncsc.gov.uk/collection/phishing-scams/report-scam-text-message
- https://www.ofcom.org.uk/phones-and-broadband/scam-calls-and-messages/7726-reporting-scam-texts-and-calls
- https://www.reportfraud.police.uk/
- https://www.gov.uk/guidance/contact-the-fcdo