Guidance
Phishing scams: how to spot and report them
How to recognise and report emails, texts, websites, adverts or phone calls that you think are trying to scam you.
Our advice & guidance covers a broad range of topics
Resources for individuals and organisations in the UK who have experienced an online scam or cyber attack.
Find a range of products & services from NCSC and certified 3rd party suppliers
Working with industry, government and academia to support the next generation of researchers, students and cyber security professionals
All the latest information to help you keep track of what's happening
How to recognise and report emails, texts, websites, adverts or phone calls that you think are trying to scam you.
Page 2 of 8
How to report suspicious emails, and what to do if you think you’ve responded to a scam email.
If you have received an email which you’re not quite sure about, forward it to [email protected]
Forward us as many suspicious emails as you like.
Send us emails that feel suspicious, even if you're not certain they're a scam - we can check.
Don't click on any links in a suspicious email.
You don't need to forward us suspicious emails you find in your spam/junk folder.
The purpose of a scam email is often to get you to click a link. This will take you to a website which might download a virus to your computer, or steal passwords or other personal information. This is sometimes known as 'phishing'.
The National Cyber Security Centre (NCSC) has the power to investigate and remove scam email addresses and websites. It's free to report a suspicious email to us and it only takes a minute. By reporting phishing attempts you can:
scam URLs removed by the NCSC as of July 2026
The NCSC will analyse the suspect email and any websites it links to. We’ll use any additional information you’ve provided to look for and monitor suspicious activity.
If we discover activity that we believe is malicious, we may:
Whilst the NCSC is unable to inform you of the outcome of its review, we can confirm that we do act upon every message received.
You might get an error message when you forward something to us. This does not mean the service is broken – it is due to the way some email providers handle suspicious emails.
If you have forwarded an email containing only one link, the error message means it has been recognised as spam already, and you don't need to forward it again.
If the email you are forwarding contains more than one link, you might receive an unclear or confusing error message. You could try:
Thank you for continuing to report suspicious emails and websites.
You should not report a crime to the NCSC in this way.
If you think you may have been a victim of fraud or cyber crime, and live in England, Wales or Northern Ireland, you should report this to Report Fraud at https://www.reportfraud.police.uk/ or by calling 0300 123 2040.
If you live in Scotland, you should report to Police Scotland by calling 101.
If you've lost money or have been hacked as a result of responding to a phishing message, you should report it:
For further detail on how we handle information you send us, please see our Privacy Statement.
For IT administrators, find out how to report emails to the NCSC using Office 365's 'Report Phishing' add-in for Outlook.


