Gave a scammer your bank details, a code or remote access (UK): what to do

1. Stop dealing with the scammer

Do not send more money, share codes or install anything they ask for, even if they promise a refund or say you owe a fee. Save their messages and numbers first, then stop replying and block them. Time limit: Now. Scammers often come back for more, for example by offering to release or recover the money for a fee. Keeping the messages gives your bank and the police the evidence they ask for.

2. Call your bank and lock your accounts

Call 159 or the number on your card. Say you shared your details or a code, ask the bank to block your cards and online banking, and ask it to check for payments you did not make. Contact: Your bank (159, stopscamsuk.org.uk/159). Or the number on the back of your card or in your banking app. Never use a number the scammer gave you. Time limit: Today. Payments the scammer makes are unauthorised, and you are not liable for anything taken after you tell your bank, unless you acted fraudulently.

3. Report any payments you did not make

Go through your statements and list every payment you did not authorise. Report each one to the bank without delay. Contact: Your bank (159, stopscamsuk.org.uk/159). Or the number on the back of your card or in your banking app. Never use a number the scammer gave you. Time limit: Without undue delay; no later than 13 months after the debit. Under the Payment Services Regulations 2017 you must report unauthorised payments no later than 13 months after the debit date. Your loss is capped at £35 unless you acted fraudulently or with gross negligence.

4. Change your passwords

Change the password on any account that uses the one you shared, starting with email and banking. Turn on two-step verification or a passkey where you can. Time limit: Today. Your email account can reset every other password, so it is the one to secure first.

5. Consider Cifas Protective Registration

If you shared identity details such as your date of birth, address or passport, apply online for Cifas Protective Registration. Contact: Cifas Protective Registration (cifas.org.uk/services/identity-protection/protective-registration). £30 for 2 years. Apply online only. Time limit: This week if you shared identity details. It puts a warning flag on your name so lenders make extra checks before opening accounts. It costs £30 for 2 years and does not affect your credit score.

6. Report it to the police

In England, Wales or Northern Ireland, report online to Report Fraud or call 0300 123 2040. In Scotland, call Police Scotland on 101. Write down the crime reference number. Contact: Report Fraud (England, Wales and Northern Ireland) (0300 123 2040, reportfraud.police.uk). Replaced Action Fraud on 4 December 2025; Police Scotland (101, scotland.police.uk/advice/scams-and-frauds). If you live in Scotland. Time limit: Within a few days. Your bank may ask for the crime reference number, and your report helps police link cases. Report Fraud replaced Action Fraud on 4 December 2025; the phone number is unchanged.

7. Report the scam texts and emails

Forward scam texts free to 7726 and scam emails to report@phishing.gov.uk. Contact: Your mobile network (scam texts) (7726, ncsc.gov.uk/collection/phishing-scams/report-scam-text-message). Forward the text free of charge; NCSC Suspicious Email Reporting Service (report@phishing.gov.uk, ncsc.gov.uk/collection/phishing-scams/report-scam-email). Forward the scam email. Time limit: When you can. Networks can block the sender and the NCSC can take down scam websites, which protects the next person.

8. If the bank or provider says no, complain and then go to the Ombudsman

Make a formal complaint to the bank or provider. If you are unhappy with its final response, or it has not replied in time, take the complaint to the Financial Ombudsman Service for free. Contact: Financial Ombudsman Service (financial-ombudsman.org.uk/consumers/how-to-complain). Free. You do not need a claims company. Time limit: Within 6 months of the final response. A business has 15 days to deal with complaints about fraud, scams and payment services (8 weeks for most other complaints). You then have 6 months from the final response to go to the Ombudsman.

Time limits that apply

Counted from the day you paid. Where the real limit runs from a later date, such as your statement, the tool counts from the payment date, so the date it shows is never later than the real one.

Keep this evidence

Screenshots of every message, email, advert and website, including the sender's number or address. Bank statements or app screens showing each payment, with the date, amount, payee name, sort code and account number. Transaction references, and for crypto the wallet address and transaction ID. A timeline in your own words: when contact started, what you were told and when you paid. Crime reference number from Report Fraud or Police Scotland, and your bank's case number. Notes of every call: date, time, who you spoke to and what they said.

Protect yourself now

Change the password on your email first, then banking, then any account that shares a password. Remove any remote access app the scammer asked you to install and run an antivirus scan. Turn on two-step verification or a passkey. Warn family and friends if the scammer had access to your contacts or social media. Check your statements every week for the next few months. Only call your bank on 159 or the number on your card.

Watch out for recovery scams

People who lose money are often contacted again by someone offering to get it back for a fee. The FCA calls these recovery room scams. The Financial Ombudsman Service is free and you do not need a claims company or lawyer to use it. If anyone offers to recover your money, check the firm on the FCA Firm Checker and contact it only through the details listed there, never the ones they give you.

Guides and definitions

• Section 75 or chargeback: which should you use to get your money back? (Guide)
• APP fraud reimbursement (APP fraud reimbursement makes UK banks refund victims of authorised push payment scams up to £85,000 for Faster Payments and CHAPS transfers made on or after 7 October 2024.)
• Chargeback (A chargeback asks your card provider to reverse a debit or credit card payment under Visa, Mastercard or American Express rules, usually within about 120 days.)
• Ombudsman (An ombudsman is a free, independent body that settles complaints against companies or public bodies once the organisation has had its chance to put things right.)
• Phishing (Phishing is a scam email, text or call designed to trick you into visiting a fake website, giving away personal or bank details, or installing malware.)
• Section 75 (Section 75 of the Consumer Credit Act 1974 makes your credit card provider jointly liable with the seller for a single item costing over £100 and up to £30,000.)

Get your own plan with real dates

If you paid another way

• Bank transfer (Faster Payments or CHAPS) (UK)
• Debit card (UK)
• Credit card (UK)
• PayPal or another payment app (UK)
• Cryptocurrency (UK)
• Gift cards (UK)

The same in the US · All scam recovery guides · Get your own plan with real dates

Common questions