If you're searching for a specific product, please go to www.marksandspencer.com and use the search bar at the top of the page.

What are "Phishing" (spoof) emails and what should I do if I receive one?

"Phishing" emails are mails claiming to be from well-known companies which attempt to get you to hand over sensitive information such as account, credit card or bank details. These emails attempt to copy the appearance of a popular website or company in order to commit identity fraud. We will never ask you to confirm any account or credit card details via email. If you do receive an email claiming to be from marksandspencer.com asking you to do so, please do not respond to it. 
We will never, for any reason, ask you to send us the following information in an email:

  • Your National Insurance Number or VAT registration number
  • Your bank account information, credit card number, PIN number or credit card security code
  • Your mother’s maiden name or other information that could be used to identify you (such as your birth city or your favourite pet’s name).
  • Your M&S.com password

If you do receive an email which you believe to be a phishing email, please visit www.actionfraud.police.uk, the National Fraud and Cyber Crime Reporting Centre. As they receive substantial examples of these kind of emails, they have the power to investigate and enforce. Marks and Spencer security have no direct power to stop these scams so reporting it this way would be the most beneficial.

Read our full Privacy & Security policy

Was this answer useful?


For further information see terms and conditions on marksandspencer.com. © 2018 Marks and Spencer plc