Scams involving legal services may misuse the identity of a real professional. The SRA publishes alerts showing how genuine names, firms and regulatory details can be copied. [1]
Verify the contact behind the claim Check the provider's official register entry and contact them through independently obtained details. Compare the email domain and payment instructions with the verified firm. A correct logo or regulatory number does not establish that the sender is authorised.
Be cautious about unexpected inheritance offers, recovery promises or urgent changes to bank details. Ask the genuine firm to confirm the matter and payment request through an established channel.
Act quickly if information or funds were disclosed Contact your bank's fraud team using its official route if a suspicious transfer has occurred. Preserve messages and transaction records. Report misuse to the relevant regulator and the appropriate fraud-reporting service for your location.
Use regulatory checks together with identity verification, and official court contacts for messages claiming to come from a court. Avoid paying another unsolicited 'recovery specialist' merely because they know details of the first loss; that information may itself have been obtained through the fraud.
Separate a plausible story from a verified instruction A convincing message may refer to a genuine firm, an actual transaction or details of an earlier loss. That information can make the request feel familiar without proving who sent it. Ask what the message wants you to do now: transfer money, provide identity documents, install software or disclose a security code. The requested action deserves its own verification. A long explanation of an inheritance or recovery opportunity does not establish that the sender has authority to act or that the proposed payment serves a legitimate purpose.
The SRA's alerts show that real professional names and regulatory details can be misused in fraudulent communications. [1] Treat a matching registration number as information to check through an independent route, not authentication of the sender. Compare the claimed matter with your known instructions and the firm you actually engaged. Where the approach is unsolicited, ask why the firm would be contacting you and verify the explanation directly before giving information that could be used to make later messages appear even more convincing.
Apply a separate check to changed payment details A payment request can be fraudulent even within an otherwise genuine relationship. If account details change unexpectedly, contact the firm through a number or route independently established before the change. Confirm the particular invoice, amount and intended recipient. Do not use a replacement number supplied only in the same message that announces the new account. The purpose of the check is to reach the genuine organisation independently, rather than ask the unverified sender to reassure you that its own instructions are correct.
Consider how the payment fits the agreed engagement. An unexpected demand to send funds to an individual, unfamiliar business or unrelated destination needs an explanation from the verified firm. Ask about any discrepancy between the invoice, account name and agreed client matter. Do not rely on a small test payment as proof that the recipient is legitimate; it may establish only that the destination can receive money. Keep the confirmation record with the payment documents so a colleague or family helper can understand why the transfer was authorised.
Reduce the information available to an impersonator Share identity and case documents only through the channel agreed with the verified provider. Avoid posting a detailed dispute history publicly when a fraudster could use it to approach you with a personalised offer. If you receive a message asking for a password, one-time code or remote access to a device, pause and check with the genuine organisation. Routine legal advice should not require you to surrender access to unrelated accounts merely because a message uses legal terminology or says a payment cannot otherwise be processed.
Be alert to a second approach after a loss. Someone offering guaranteed recovery may know details because those details have already circulated through the original fraud or a compromised account. Ask how the proposed service works and verify the provider and fee arrangement independently. Do not let the urgency of recovering money remove the checks you would apply to a new adviser. A promise to release recovered funds after another advance payment needs particular scrutiny of the actual source, authority and evidence behind the claim.
Respond promptly through established reporting channels If a suspicious transfer has occurred, contact your bank's fraud team using its official route and provide the transaction details. Keep messages, invoices and payment confirmations. Ask about the next protective steps relevant to the account, without assuming a refund is guaranteed. If credentials were disclosed, secure the affected account through the provider's genuine process. Where a device may have been compromised, seek suitable technical assistance and avoid continuing sensitive transactions on it until the issue has been assessed.
Report misuse of a professional identity to the relevant regulator and use the appropriate fraud-reporting route for your location. Tell the genuine firm if its name or payment instructions have been impersonated. Keep factual notes of what happened and the actions taken, rather than deleting embarrassing messages or confronting the sender to demand an explanation. A clear record helps the institutions involved investigate and respond. It also supports a careful distinction between the genuine legal matter, any legitimate outstanding payment and the separate fraudulent instruction that interrupted the relationship.
Frequently asked questions
Does a correct SRA number prove a payment request comes from the solicitor?
Verify the sender and specific instruction independently, because genuine names and regulatory details can be copied into a fraudulent message.
What is the right response to unexpected new bank details from a legal firm?
Contact the firm through an independently established route and confirm the particular invoice and recipient before acting on the changed instructions.
Does a small test transfer establish that the recipient is genuine?
It may only show that an account receives money, so it does not replace independent verification of the organisation and payment instruction.
Why be cautious when a recovery offer contains accurate details of an earlier fraud?
Those details may already be available to the sender through the original incident, so verify the new provider and claim independently.
What should I preserve after a suspected legal-services scam?
Keep original communications, invoices and transaction records, alongside notes of bank, firm and reporting contacts, rather than deleting the evidence after the incident.
Official sources
Sources checked: 10 September 2026. Check the linked guidance for subsequent changes.
General information only. The appropriate action depends on your circumstances and the applicable jurisdiction.
Report a correction