/ Scams

Watch out for phishing emails impersonating UK supermarkets

Fake marketing surveys promising gift cards of up to £100 for filling them out are impersonating the likes of ASDA, Morrisons and Tesco. Here’s what they look like.

Back in June we covered a fake email purporting to be from Sainsbury’s promising a £90 ‘promo reward’ for taking part in a marketing survey. Sainsbury’s confirmed it was nothing to do with it.

Since then we’ve been made aware that these emails haven’t stopped at just one supermarket – fraudsters are using the same tactics by posing as the UK’s most well-known shops in order to gain your trust and send you on to potentially dangerous websites.

We’ve seen examples of fake emails posing as ASDA, Morrisons and Tesco and have made each of them aware. Here’s exactly what you need to watch out for.

ASDA phishing email

This email is designed to make you follow the link by promising a large reward in return for doing very little – a common phishing tactic. But this ‘survey’ is not being run by ASDA.

ASDA thanked us for flagging the email with our readers.

Morrisons phishing email

Using the same tactics, the fake Morrisons version promises a £90 reward. A Morrisons spokesperson said:

“These social media posts are designed by third-parties posting as Morrisons, for the purpose of fraudulent activity. Please do not click any links, open attachments or enter personal information. This is not a genuine post from Morrisons.”

Tesco phishing email

The Tesco iteration is exactly the same as the Morrisons version. Tesco confirmed that it was aware of these emails and that it is working to stop them. Tesco has a dedicated email for customers to report phishing emails to:


It also has a guide on how to identify scam emails posing as the brand.

Have you received similar fake emails?

If you think you may have been a victim of a fake email like these, let your bank know what’s happened straight away.

Guide: how to spot a scam

Guide: how to get your money back after a scam

Phishing emails can also be reported to the National Cyber Security Centre on report@phishing.gov.uk

If you’re in possession of a suspicious email you think is posing as a well-known brand, let us know in the comments or via our scams sharer tool.

As always, please help us spread awareness of these examples by sharing them with your friends and family.

Norman Howe says:
7 October 2021

You can normally spot the scam email by the address they are sent from as they are nothing to do with the company they are reportedly from. I always check the email address and make sure it makes sense. The scam emails usually made up of different letters and numbers not making any words. Genuine emails have some kind of identification like your postcode or account number.
If I get a phone call and there is a pause before they answer it’s from a call centre and your number been selected at random and the pause is the call being transferred to an available agent.

If the email is from a long standing friend or a family member most people do not normally check the address as they expect it to be ok. Personal emails can be hijacked just the same as a business ones can. I have reported this to Which but they did not seem interested

Alan Dainty says:
8 October 2021

These have been about for quite some time, I have received them from all of them.

Has anyone else been getting ‘spam from this domain?
I am inundated!

By ignoring promotional emails I may lose out on some offers but it removes the risk of being scammed.

Cliff says:
8 October 2021

“gotten” ? where did this come from? I thought Which was a British organisation.

It could just have been a misbegotten choice of words, Cliff.

Margaret Cornwell says:
8 October 2021

I fell for Tesco survey email and was besieged by calls for a variety of services including ones like house or car insurance where I would have had to put my financial details in. When I received them I realised it was a scam. I blocked every similar number as they came in and never lost money. Nevertheless it was a nuisance to get these calls telling me I had had an accident etc.

Gotten is an old ENGLISH word. most people have “forgotten” that.
Check King James Bible published 1611. Genesis, chapter 4, verse 1.

Gentle reminder that this conversation’s about scams and how to stay safe from phishing emails, so please let’s try to remain on topic, and to return to it when we veer off course.

If you’d like to debate the etymology of particular words, you’re most welcome to do so in the Lobby: https://conversation.which.co.uk/community/off-topic-lobby-3/

Gotten is an old English word. most have “forgotten” that.
Check in King James Bible published in 1611. Genesis Chapter 4, verse 1.

Anne Mckillop says:
12 October 2021

Actually Cliff the etymology of this word shows that “gotten” is the original correct format. So we have:

In the UK:

infinitive get, past simple got and past participle got

BUT we have in the UK:

infinitive forget, past simple forgot and past participle forgotten

The past participle of to get was originally gotten and we in the UK have altered it whilst the Americans have preserved its original format. So strictly speaking our use of “got” as the past participle of “to get” is incorrect.

Hope that helps!

Peter Richardson says:
8 October 2021

I have had similar purported approaches from Currys and Dyson.
I fell for the Dyson and on clicking a seemingly OK link ended up as a member of Your game club.Com.
Their website gave a UK phone number and when rung they agreed to cancel the membership and reimburse charges. I hope! Peter Richardson

Dave Pritchard says:
8 October 2021

If I get emails that are promotions, I always delete them. Any phone calls that I get, I do not recognise. I wait till they speak and then I will say ” fraud helpline how can I help and this call is being recorded along with your number. Strange they hang up.

Christine Dixon says:
8 October 2021

With respect,” gotten,” is old fashioned English taken to America and now being brought back by our American cousins. There are quite a few old English ‘isms that Americans use, like closet and faucet. I personally think it is cute, but that is only my opinion
.Crissie Dixon

The word “cute” has a different meaning in America.

Which is actually more accurate than our own, being a shortened version of ‘acute’.

Diana H says:
9 October 2021

I agree about more honesty in the media, especially the newspapers. However, people have to take a large percentage of the blame for panic buying – it’s the usual thing of those who are just out for their own selfish reasons, and can’t bear being without. We all need to take a step back and ask ourselves where we can cut down on excesses.

I do get rather a lot of them,I now send them straight to the bin but so annoying.

Topic: Retailer backs down. My email to a retailer complaining a product is faulty was acknowledged on his behalf. Now, apparently, he refuses to refund because he says it isn’t his problem. But he doesn’t put that in writing. Does anyone know if I can do anything?
From a regular reader.

Here is advice from Which? I suggest you make a claim against the retailer under the Consumer Rights Act: https://www.which.co.uk/consumer-rights/advice/what-do-i-do-if-i-have-a-faulty-product-aTTEK2g0YuEy

The retailer may ask you to produce an expert’s report that shows that the product does not meet the requirements set out in the acts, for example due to damage, misuse or fair wear & tear. You might be able to obtain a free repair, a partial refund or a discount on a replacement product.

If the retailer simply refuses to help or says that the manufacturer is responsible (common in my experience) they are denying you your legal rights. If you would like inexpensive legal advice, join Which? Legal. Best of luck and please let us know how you get on.

Dean says:
16 October 2021

Morrisons have had a week of diabolical techical issues after updating on line ordering system. So I wouldn’t belive that Morrison’s have the capability and skill to successfully implement any such scheme …. so it can only be a scam!

This is a life insurance scam number 02922770108

Have had these fro Asda, Tesco and Boots. The Asda on I started to fill it out, but then it started to ask for my details and did I pay by card or cash. At that moment I cut it. The one from Boots, I got straight in touch with them and they said straight away it was nothng to do with them. Since then I have had some come up in my inbox, but I delete them without evn reading them. One fromTesco said ecause I have been such a good customer which amazed me as have’t been to Tesco in 3 years.

I agree but this is only viable to do if you are able to walk in comfort; for many it is a painful exercise, especially if you are elderly & infirm. I have a friend who loves a bus ride, is elderly, but is able to walk for 5/6 minutes but needs a car to drive 3 miles to the nearest bus stop, when he gets there no parking available to catch the bus. so he has to drive his car to go shopping.

And what has this to do with phishing emails?

Mars express — You will notice that Which? puts polls on unconnected subjects alongside the Conversation articles. For this Conversation there are two, of which the first is entitled “Has the panic buying of petrol caused you to rethink how you get around? If so, how?. It’s not surprising that people wish to respond to them in a comment. Michael and Richard above were exercising that option. Any criticism should be reserved for Which?.

There is an element of truth in Sam’s comment but the fuel shortages are/were a result of a combination of factors including:

1) Petrol [& other fuels’] forecourts operating a just-in-time stocking system such that a minor change in demand causes a major problem.
2) The public behaving sensibly in making sure they have enough fuel for the immediate future.
3) News broadcasters telling the truth. [Would the complainers say broadcasters should not tell the truth?]

One should not kill the messenger just because one doesn’t like the message; even if killing the messenger is one’s real objective. I don’t believe the BBC is perfect but it is not evil. The best way to ensure unbiased reporting is to allow all reporting [perhaps with a few exceptions regarding violence but then: Who decides what is “violence”?]. Individual members of the public may be stupid but the public as a whole is not. Britain is not perfect either but it is better than most.

Laurie says:
9 October 2021

What has this to do with Spam? Desperate for an audience.

David Seager says:
9 October 2021

You are doing exactly the same thing Keith. Taking into account Facebook, Twitter etc. and all the other media, the BBC makes up a tiny proportion of news coverage. They were all focusing on the fuel shortage, yet you want an enquiry into the Beeb.