Reporting Cybercrime

Reporting a cyber attack which isn't ongoing

Please report online to Action Fraud, the UK's national reporting centre for fraud and cybercrime.  You can report cybercrime online at any time using the online reporting tool, which will guide you through simple questions to identify what has happened.  Action Fraud advisors can also provide help, support and advice you need. Go to www.actionfraud.police.uk to begin.

​

Alternatively, you can call Action Fraud on 0300 123 2040 (textphone 0300 123 2050).

​

When you report a fraud to Action Fraud, you are given a  police crime reference number and your case will be referred to the National Fraud Intelligence Bureau (NFIB), which is run by the police.

​

In some cases, the police and other law enforcement agencies may want to contact you for further details, so it's important that you provide your correct contact details and keep any relevant information about the crime. 

​

Although the police cannot investigate every report individually, the information you provide will aid them. The police use your information to build up intelligence about cybercrime, which includes who is committing what crimes and against whom. This contributes to making the UK a more hostile place for cybercriminals to operate and helps to keep other potential victims safe.

​

When you report to Action Fraud, you can also choose to have your details passed on to Victim Support, a national charity that helps those affected by crime. If you take up this option, you will then be contacted by someone from the charity and offered free and confidential emotional support and practical help.

​

​

Reporting a cyber security incident​

When you suffer a cyber-attack or a related cybersecurity incident and you are a business, you might need to report it to the Information Commissioner's Office (ICO).  Under the new General Data Protection Regulation (GDPR) rules, from the 25th May 2018, you must also report data breaches to the ICO within 72 hours.  Action Fraud, the Police and the Cyber Resilience Centre will not report any contact with them to the ICO. You can find out more about the ICO on our site under 'Support Tools' in our Free resources sub menu. 

​

​

Reporting a suspicious website

​If you have visited a website you think is trying to scam you, report it to the NCSC and they will investigate. Simply enter the website URL or link, how you received the site details and any more information you want to provide. You can access the NCSC website here.

 

Reporting a suspicious email

​If you have received an email which you’re not quite sure about, don't use the links or contact details in the email, forward it to the Suspicious Email Reporting Service (SERS) using report@phishing.gov.uk.

​

Did you know that the NCSC has an Outlook plugin so users can report phishing direct from their mailbox? Read more here.

 

Reporting a suspicious text message

Suspicious text messages should be forwarded to 7726. This free-of-charge short code enables your provider to investigate the origin of the text and take action if found to be malicious.

​

 

Guidance & support

You can contact the Cyber Resilience Centre for guidance and support during normal office hours by dropping us an email (info@emcrc.co.uk).  We also provide free guidance on our website. 

​

The National Cyber Security Centre (NCSC) has also created the Small Business Guide to Response and Recovery. It provides small to medium sized organisations with guidance about how to prepare their response and plan their recovery to a cyber incident. You can access the guide here.