Phishing

How do I know if I've been phished?
If you've received a suspicious message, it is probably a phishing attempt. It's important not to click on any links in the message, or enter any information.
But if you have already done this, don't panic, and follow the advice below.
What action should I take?
- I've shared my banking details
Contact your bank immediately and let them know. If you use online banking, you can cancel your card(s) online. - I think my account has been hacked
If you can't access one of your accounts or have noticed other unusual activity, refer to our actions to take to recover a hacked account. - I think my device has been hacked
If you have opened a suspicious link on your device, or followed instructions to install software, open your antivirus (AV) software if you have it, and run a full scan. Allow your antivirus software to clean up any problems it finds. Refer to our actions to take to recover an infected device. - I've given out my password
If you use the same passwords on other accounts, you should change them immediately. - I've lost money
Tell your bank and report it as a crime to Report Fraud (for England, Wales and Northern Ireland) or Police Scotland (for Scotland). - I've received the message on a work laptop or phone
Contact your IT department and tell them what has happened.
If you haven’t entered any personal information, downloaded any files, or installed software, it’s unlikely you need to take further action. But you should stay alert to emails and notifications on your accounts to check for any suspicious activity.
If you have entered personal details, including passwords, or followed instructions to install software, there are other things you can do:
- You’ve opened a link on your device, or followed instructions to install software: Open your antivirus (AV) software if you have it, and run a full scan. Allow your antivirus software to clean up any problems it finds. If you don’t have an antivirus or need more information view our actions to take to recover infected devices.
- You’ve entered personal details or passwords: You should change the passwords on any of your accounts where you use the same password. If you’ve entered banking or card details, contact your bank straight away, and if you use online banking, cancel the card(s) there.
If you’ve received a suspicious message or seen a website you're not sure about, find out how to report it in our actions to take for phishing.
Report it
How to report for your organisation or business
If your organisation has experienced a cyber incident and is based in the UK, you can report it.
How to report for you or your family
If you’ve lost money, tell your bank straight away and report it to Report Fraud or in Scotland, contact Police Scotland.
Received a suspicious message?
Help track and stop cyber criminals. Forward suspicious emails to [email protected], texts to 7726 and report scam websites.
Further resources
For more information about how to prevent attacks like this in future, there is NCSC guidance to help you:

