If you think you may have been the victim of cyber crime or fraud and incurred a financial loss or have been hacked as a result of responding to a phishing message, you should report this to us.

Tell us what happened

Spotting and reporting suspicious emails, texts, calls and websites

Cyber criminals often send fake messages to trick you into clicking harmful links or giving away personal information like bank details. These messages can look genuine, but they are designed to steal your data or install malware on your device.

What to do if you receive a suspicious email

If you’ve seen something that doesn’t feel right, STOP!

  • Break the contact - don’t reply, click on any links, call any phone numbers or make any payments
  • Check if it’s genuine - contact the organisation directly using an email address or phone number you know is correct, e.g. from your utility bills, via a search engine, on the back of your card or by calling 159 for banks
  • Before you delete the email, forward it to [email protected]

Common signs of a fake email

As artificial intelligence (AI) advances, fake emails are becoming increasingly convincing. However, there are still clues that can reveal when an email isn’t genuine. Advice from the Government’s Stop! Think Fraud campaign highlights several signs that can help you spot when an email isn’t genuine. Look out for:

  • An amazing, time-limited offer or strong encouragement to ‘click here/now’ - encouraging you to respond quickly
  • An email that doesn’t use your name - perhaps they don’t really know who you are
  • Spelling and grammar mistakes (though phishing emails are getting more sophisticated than they used to be)
  • Imagery or design that looks familiar but doesn’t feel quite right
  • An unusual email address - it might look a bit similar but does it really match the official company’s email address?
  • Encouragement to click on an unknown link - if you’re not sure, visit the organisation’s website directly rather than clicking through
  • A request for you to share personal data

What to do if you receive a suspicious text message or phone call

Most mobile providers allow you to report suspicious texts and calls for free.

How to report them

Forward the message or number to: 7726

Your provider will investigate and may block the sender if they’re found to be malicious.

Reporting on iPhone (iOS)

Texts

  • Copy the number the text came from.
  • Long‑press the message → More → Forward.
  • Send it to 7726.
  • When prompted, reply with the number you copied.

Calls

  • Tap the number in your call list → open info
  • Press and hold the number → Copy
  • Open Messages → create a new message to 7726
  • Type Call [paste number] and send

Reporting on Android

Texts

  • Copy the sender’s number
  • Long‑press the text → Forward
  • Send it to 7726
  • When prompted, reply with the copied number

Calls

  • Tap the number in your call list → open info
  • Press and hold the number → Copy
  • Open Messages → new message to 7726
  • Type Call [paste number] and send

Reporting helps phone networks block fraudsters and protects others from harm.

How to report a fake website

Criminals often set up fake websites to steal information or install malware.

You can report a suspicious website directly to the National Cyber Security Centre (NCSC). It’s free, quick, and helps remove harmful sites from the internet.

Find instructions on how to report a website and what to do if you shared information on the NCSC website.

The NCSC has the power to investigate and remove scam websites. It's free to report a suspicious website to us and it only takes a minute. By reporting suspicious websites, you can help us stop cyber criminals and protect others online.

How to report a fake advert

If you see an advert that looks fraudulent, report it to the Advertising Standards Authority (ASA).

Fake adverts may use:

  • False celebrity endorsements
  • Unrealistic offers or discounts
  • Images or descriptions that don’t match the real product

Reporting helps stop misleading content and protects people from fraud and cyber crime.