Phishing

Phishing is, in the words of the National Cyber Security Centre (NCSC), when criminals use scam emails, text messages or phone calls to trick their victims. The aim is usually to get you onto a fake website that steals your login or card details, or installs malware. Scam texts are often called smishing and scam calls vishing.

How to report it in the UK (checked 27 September 2026):

• forward scam emails to report@phishing.gov.uk;
• forward scam texts free to 7726;
• if you gave bank details, call your bank on 159 or the number on your card.

The NCSC says that as of July 2026 it had received more than 58 million scam reports.

Example: a text says your parcel is held for a £1.45 redelivery fee and links to a site asking for your card details. Paying £1.45 is not the goal: the criminals want the card number, expiry date and security code to spend far more. Forward the text to 7726 and delete it.

Paste a suspicious message into the scam message checker to see its warning signs, and use the scam recovery planner if you have already paid.