Avoid and report internet scams and phishing
Printable version
1. Report internet scams and phishing
Report misleading websites, emails, phone numbers, phone calls or text messages you think may be suspicious.
Do not give out private information (such as bank details or passwords), reply to text messages, download attachments or click on any links in emails if you’re not sure they’re genuine.
Emails
Forward suspicious emails to report@phishing.gov.uk.
The National Cyber Security Centre (NCSC) will investigate it.
Text messages
Forward suspicious text messages to 7726 - it’s free.
This will report the message to your mobile phone provider.
Adverts
Report scam or misleading adverts to the Advertising Standards Authority. You can report adverts found online, including in search engines, websites or on social media.
You can also:
- report scam or misleading adverts to Google if you found them in Google search results
- report to Bing if you found them in Bing search results
If you think you’ve been a victim of an online scam or fraud
Contact Action Fraud if you think you’ve lost money or been hacked because of an online scam or fraud and you’re in England or Wales. You can:
- report online - either sign up for an account or continue as a ‘guest’
- call 0300 123 2040
If you’re in Scotland and you’ve lost money because of an online scam or fraud, report the crime to Police Scotland.
Avoid websites, emails and phone numbers that imitate government services
Some websites, emails or phone numbers look like they’re part of an official government service when they’re not, or claim to help more than they actually do. Some make you pay for things that would be free or cheaper if you used the official government service.
Search on GOV.UK to find official government services and phone numbers, for example if you want to apply to the DVLA for a driving licence.
2. Report scam HMRC emails, texts, phone calls and letters
You can report suspicious emails, texts, phone calls and letters to HM Revenue and Customs (HMRC). How you do this depends on what you received.
If you got:
- a text message, forward it to 60599 - you’ll be charged at your network rate
- an email, forward it to phishing@hmrc.gov.uk
- a message in an application, for example WhatsApp, take a screenshot and email it to phishing@hmrc.gov.uk
- a phone call asking for personal information or threatening a lawsuit, report the call online
- a letter, contact the HMRC team the letter says it’s from, for example the Self Assessment team
Your email address and phone number will be shared with other organisations if that’s necessary to close down the scam.
If you’ve given your personal details to someone
Contact the HMRC security team if you think you’ve given any personal information in reply to a suspicious email or text.
Include brief details of what you disclosed (for example name, address, HMRC User ID, password) but do not give your personal details in the email.
HMRC security team
security.custcon@hmrc.gov.uk
Spotting HMRC scams
You’ll never get an email, text message, message in an application (for example WhatsApp) or a phone call from HMRC which:
- tells you about a tax rebate or penalty
- asks for your personal or payment information
Check HMRC’s guidance on recognising scams if you’re not sure.
3. Report visa and immigration scams
You’ll never be asked to pay for a visa using:
- cash
- money transfer
Contact Action Fraud to report visa and immigration scams. You should include:
- a copy of the suspicious email you received, the sender’s email address and the date and time it was received
- details of what you sent in a reply, if you replied - for example whether you sent your bank details, address or password
You can also report suspicious emails, letters or telephone calls to the police through Action Fraud.