PILLAR GUIDE

TV Licence & TV Bill Scams: UK, US and Global Guide (2026)

One reference for every "your TV Licence expired", "payment failed", "you are owed a refund" message, plus US cable and satellite bill scams and the regional versions in Germany, Ireland and Japan. How to verify in 30 seconds, what to do if you paid, and where to report.

SB

SafeBrowz Team Security ResearchJune 7, 202611 min read

Why TV licence and TV bill scams work so well

Almost everyone pays for television in some form. In the UK that is the TV Licence, run by TV Licensing on behalf of the BBC. In the US it is a monthly bill from Xfinity, Spectrum, DirecTV or Dish. In Germany it is the Rundfunkbeitrag, in Ireland the TV licence collected by An Post, in Japan the NHK receiving fee. Scammers know that a "payment failed" or "you owe a refund" message about something you genuinely pay for feels plausible, so people click before they think.

The UK is the loudest market for this. Action Fraud, the UK's national fraud reporting centre, has repeatedly warned about TV Licensing phishing, and the volume of fake "your licence has expired" emails and texts runs into the hundreds of thousands of reports. The FBI Internet Crime Complaint Center 2024 report logged more than 16 billion dollars in reported losses across all internet crime, with impersonation phishing among the top categories. The mechanic is the same everywhere: a trusted billing name, a manufactured deadline, and a link to a page that harvests your card and bank details.

UK TV Licensing scam: what the fake email and SMS look like

This is the biggest version by search demand, so start here. The real body is TV Licensing, which operates on tvlicensing.co.uk and is run for the BBC (bbc.co.uk). The four lures in heaviest rotation in 2026:

• "Your TV Licence has expired." Often claims your direct debit could not be set up and your licence is no longer valid. A button reads "Renew now" or "Set up your licence".
• "Your latest payment failed." Claims a card or direct debit was declined and your licence will be cancelled unless you "update your payment details" today.
• "You are owed a TV Licence refund." The bait version. Claims you overpaid and a refund of a specific amount is waiting once you "confirm your bank details". This is the one behind the "tv licence refund scams" searches.
• "Update your direct debit." Claims your bank changed something and your direct debit needs re-confirming through the link.

All of them lead to a page that looks like the TV Licensing site and asks for your name, address, date of birth, card number and sometimes full online banking logins. A genuine "your licence is due" reminder from TV Licensing does exist, but it never demands payment or bank details through an email or SMS link, and it addresses you by name rather than "Dear Customer".

Lookalike domains attackers use

These are illustrative scam-style domains. Click any to run a live 3-layer scan in the checker below.

• tvlicensing-renew.com (hyphenated lookalike)
• tv-licence-refund.com (the refund-bait variant)
• tv-licensing-gov.net (fake "gov" reassurance, wrong TLD)

The real domain is tvlicensing.co.uk, full stop. Anything with an extra word stitched on (renew, refund, gov, secure, update), or a different ending such as .com or .net, is not TV Licensing. There is no "tvlicensing.gov.uk" either; the official government domain family is gov.uk, and TV Licensing itself sits on .co.uk.

How to verify a TV Licensing message in 30 seconds

1. Do not tap the link. Open a fresh browser tab and type tvlicensing.co.uk yourself, or use the BBC's account pages on bbc.co.uk. Sign in. If your licence genuinely needs attention, the notice is there.
2. Read the sender and the link domain. The display name lies; the domain after the @ and the destination of the button are what matter. Neither will be tvlicensing.co.uk in a scam.
3. Check the greeting and the deadline. "Dear Customer" plus a same-day countdown is the phishing signature. Real renewal reminders are calm and personalised.

How to report a TV Licensing scam in the UK

Forward the suspect email to TV Licensing's reporting address, which the body publishes on its own site under "Scams and phishing" at tvlicensing.co.uk. Report the wider crime to Action Fraud at actionfraud.police.uk or by phone on 0300 123 2040. Forward scam texts to 7726 (it spells SPAM on the keypad), which UK mobile networks use to track and block scam numbers. Forward scam emails to the National Cyber Security Centre's reporting inbox, report@phishing.gov.uk.

US cable, satellite and streaming bill scams

In the US the same template is dressed up as your monthly TV or internet provider. The big names abused are Xfinity (Comcast), Spectrum (Charter), DirecTV and Dish. The lures:

• "Your bill is overdue, service will be cut off today." A text or email with a pay-now button, often spoofing a short code or a local number on the call version.
• "Your account is suspended, verify to restore service." Pushes you to a fake login that captures your provider username, password and card.
• "You qualify for a loyalty discount or refund." The bait version. A caller claims they can cut your bill in half if you prepay with a gift card or send a one-time code. Gift cards and crypto for a "discount" are always a scam.

Real providers use their own domains: xfinity.com, spectrum.com, directv.com. A genuine billing problem appears in your account when you sign in from the app or by typing the address yourself, never only through a link or an inbound call demanding instant payment.

Lookalike domains attackers use

• xfinity-billing-support.com
• spectrum-account-verify.com
• directv-refund.xyz
• dish-network-suspended.com

Fake streaming renewal messages (Netflix, Disney+, Hulu, Paramount+) ride the same wave and are covered in depth in our guide to telling if a brand email is real. The tell is identical: a payment-failed countdown and a link that does not end in the brand's own domain.

How to report a TV bill scam in the US

Report the scam to the Federal Trade Commission at reportfraud.ftc.gov. If you lost money or gave up account access, file with the FBI Internet Crime Complaint Center at ic3.gov. Unwanted scam texts and robocalls can also be reported to the Federal Communications Commission. Tell your real provider directly through the number on a past bill so they can flag your account.

Germany: Rundfunkbeitrag and "GEZ" phishing

Germany's public broadcasting fee is the Rundfunkbeitrag, collected by the Beitragsservice (the body many people still call by its old name, GEZ). Scam emails claim your contribution is overdue or that you are owed a refund, and link to a fake payment page asking for IBAN and card details. The genuine Beitragsservice contacts households by post for billing, not by surprise email demanding instant online payment. Treat any "Rundfunkbeitrag" or "GEZ" email with a pay-now link as phishing and verify through the official Beitragsservice website typed in yourself.

Lookalike domain attackers use

• rundfunkbeitrag-zahlung.top

Ireland: An Post TV licence scam

In Ireland the TV licence is collected by An Post. Scam texts and emails impersonate both An Post and the TV licence renewal process, claiming a payment failed or a small "redelivery" or "licence" fee is owed. The fake pages capture card details. An Post does not collect TV licence payments through unsolicited SMS links. Verify by going to the official An Post website yourself or paying in person at a post office.

Lookalike domain attackers use

• anpost-tvlicence.net

Japan: NHK receiving-fee scams

Japan's public broadcaster NHK charges a receiving fee, and scammers exploit confusion around it. Some pose as NHK collectors at the door demanding immediate cash or card payment; others send phishing messages claiming an unpaid fee with a link to "settle" online. NHK's genuine collection process does not work through surprise links demanding instant card payment. If you receive one, do not pay through the link and check directly via NHK's official channels.

Lookalike domain attackers use

• nhk-payment-jp.xyz

Universal red flags across every region

Whatever the country and whatever the broadcaster, the same handful of signals give these scams away:

• A link to pay. No genuine licence body or TV provider asks you to enter card or bank details through a link in an unsolicited email or text. This is the single biggest tell.
• A manufactured deadline. "Within 24 hours", "today", "final notice", "service will be cut off". Real billing gives you time and a proper process.
• A refund you did not ask for. "You are owed a refund, confirm your bank details to receive it." Refunds do not require you to hand over full banking logins.
• Generic greeting. "Dear Customer" or "Dear User" instead of your name on an account they supposedly hold.
• Wrong domain. The link does not end in the official domain (tvlicensing.co.uk, xfinity.com, spectrum.com and so on). Extra words or a cheap TLD such as .top, .xyz or .net stitched onto a brand name are red flags.
• Payment by gift card, crypto or wire. No legitimate TV bill is ever settled with an Apple or Amazon gift card, a crypto transfer, or a same-day wire.

The 30-second verify-by-logging-in check

This one habit defeats nearly all of these scams, in any country. Never act on the message itself. Instead:

1. Open a fresh browser tab or the provider's official app.
2. Type the official address yourself, or use a bookmark you saved earlier. Do not search and click an ad; type it.
3. Sign in to your account.
4. Look for the alert there. If your licence or bill genuinely needs attention, the notice is inside your account. If nothing is there, the message was fake. Delete it.

If you want a deeper checklist for judging any suspect page, see how to tell if a website is a scam.

What to do if you already clicked or paid

Clicking a link alone rarely causes harm. The damage starts when you enter details or pay. Work through these in order:

1. Stop entering anything. Close the page. Do not type a card number, a bank login, or a one-time code.
2. If you entered card or bank details, call your bank now. Use the number on the back of your card or a past statement. Ask them to block the card and watch for fraudulent payments. In the UK, banks signed up to the reimbursement rules may refund authorised push payment fraud, so report fast.
3. Change any password you typed into the fake page, and change it anywhere you reused the same one. Turn on two-factor authentication where you can.
4. Verify your real account directly. Sign in by typing the official address yourself and confirm nothing was changed (email, address, payment method).
5. Report it. UK: Action Fraud at actionfraud.police.uk plus the TV Licensing scam reporting address. US: the FTC at reportfraud.ftc.gov and the FBI at ic3.gov. Germany, Ireland and Japan: your bank and the official broadcaster or postal body, plus local police for losses.

For the email side specifically (spotting the fake sender before you ever click), our verify-the-sender guide and our complete guide to text message scams cover the exact steps for inboxes and SMS.

How SafeBrowz blocks this threat

SafeBrowz runs a 3-layer detection engine: Local + APIs + AI. The extension cannot read your inbox or messages; it activates the moment you click a link and a fake TV Licensing, cable or licence-fee page tries to load.

• Layer 1 - Local detection: 60+ URL patterns plus a 550+ brand-specific signature database (including Cyrillic and Punycode homograph variants) and community lists, all running inside the extension before the page renders. It catches tvlicensing-renew style lookalikes, hyphenated brand-plus-word domains and cheap-TLD impersonations instantly.
• Layer 2 - API checks: aggregates threat-intelligence feeds (Google Safe Browsing, PhishTank, URLhaus) plus 30+ scam-TLD heuristics for known malicious domains.
• Layer 3 - AI deep scan (Premium): content analysis in 100+ languages reads the page itself and catches novel variants in seconds, including freshly registered domains that have not yet hit any blocklist. This is what flags a brand-new "your TV Licence expired" page on day one.

Detection signatures are derived from threat-intelligence research and our internal brand database, not from user browsing data. SafeBrowz does not store per-user browsing history.

Frequently asked questions

Does TV Licensing ever email or text you to pay?

TV Licensing does send reminders when a licence is due, but it never asks for payment or bank details through a link in an email or text. A genuine reminder addresses you by name and points you to sign in at tvlicensing.co.uk yourself. Any message demanding instant payment via a link is a scam.

I got a "TV licence refund" email. Is it real?

Almost certainly not. The "you are owed a refund, confirm your bank details" message is one of the most common TV Licensing scam variants. Real refunds do not require you to enter full banking logins through an emailed link. If you think you genuinely overpaid, sign in at tvlicensing.co.uk directly and check.

How do I report a TV Licensing scam in the UK?

Forward the email to the scam reporting address TV Licensing publishes on its site, report scam texts by forwarding to 7726, and report the wider crime to Action Fraud at actionfraud.police.uk or 0300 123 2040. Suspicious emails can also go to report@phishing.gov.uk.

Are Xfinity, Spectrum or DirecTV "bill overdue" texts genuine?

Treat them as suspicious. Real providers do show billing issues inside your account, but a text or call demanding instant payment through a link, gift card or code is a scam. Sign in by typing xfinity.com, spectrum.com or directv.com yourself, or call the number on a past bill.

What is the Rundfunkbeitrag or GEZ scam in Germany?

It is phishing that impersonates Germany's broadcasting-fee body, claiming your Rundfunkbeitrag is overdue or refundable and linking to a fake page that harvests IBAN and card details. The genuine Beitragsservice bills by post, not by surprise email with a pay-now link.

How does SafeBrowz catch these scams?

SafeBrowz does not read your messages; it activates when you click a link. A 3-layer engine (Local URL patterns plus threat-intel APIs plus AI content analysis) checks the destination before the page can load. The brand database covers 550+ companies including TV and telecom names, plus their common homograph and typosquat variants. Free on Chrome, Firefox and Edge.