Guidance
Phishing scams: how to spot and report them
How to recognise and report emails, texts, websites, adverts or phone calls that you think are trying to scam you.
Our advice & guidance covers a broad range of topics
Resources for individuals and organisations in the UK who have experienced an online scam or cyber attack.
Find a range of products & services from NCSC and certified 3rd party suppliers
Working with industry, government and academia to support the next generation of researchers, students and cyber security professionals
All the latest information to help you keep track of what's happening
How to recognise and report emails, texts, websites, adverts or phone calls that you think are trying to scam you.
Page 5 of 8
Many scammers operate fake websites, which will download viruses to your computer, or are designed to steal passwords or other personal information.
The National Cyber Security Centre (NCSC) has the power to investigate and remove scam websites. It's free to report a suspicious website to us and it only takes a minute. By reporting suspicious websites, you can help us stop cyber criminals and protect others online.
If you have received a suspicious link in an email or text message but you haven’t clicked on it, report it using the following pages.
The NCSC will analyse the suspect email and any websites it links to. We’ll use any additional information you’ve provided to look for and monitor suspicious activity.
If we discover activity that we believe is malicious, we may:
Whilst the NCSC is unable to inform you of the outcome of its review, we can confirm that we do act upon every message received.
You should not report a crime to the NCSC in this way.
If you think you may have been a victim of fraud or cyber crime, and live in England, Wales or Northern Ireland, you should report this to Report Fraud at https://www.reportfraud.police.uk/ or by calling 0300 123 2040.
If you live in Scotland, you should report to Police Scotland by calling 101.
Learn how to protect yourself if you think you’ve shared personal information.
If you have lost money or have been hacked as a result of responding to a phishing message, you should report it:
For further detail on how we handle information you send us, please see our Privacy Statement.
Criminals use information about you that’s available online (including on social media sites) to make their phishing messages more convincing.
You can reduce the likelihood of being phished by thinking about what personal information you (and others) post about you, and by reviewing your privacy settings within your social media accounts.


