The East Midlands Cyber Resilience Centre provides guidance to protect and prevent businesses from falling victim to cyber crime. However, if you have become a victim of cyber crime, you need to know what to do next. This page gives you all the information you need on how to report cybercrime.
As with any type of crime, online crime should always be reported. See below for what to do.
If you or someone else is in immediate danger or risk of harm dial 999 now.
Anyone can find themselves the victim of cyber crime.
If you are a business, charity or other organisation which is currently suffering a live cyber attack (in progress), call Action Fraud (0300 123 2040) immediately.
This service is available 24 hours a day, 7 days a week.
Reporting a cyber attack which isn't ongoing
Please report online to Action Fraud, the UK's national reporting centre for fraud and cybercrime. You can report cybercrime online at any time using the online reporting tool, which will guide you through simple questions to identify what has happened. Action Fraud advisors can also provide help, support and advice you need. Go to www.actionfraud.police.uk to begin.
Alternatively, you can call Action Fraud on 0300 123 2040 (textphone 0300 123 2050).
When you report a fraud to Action Fraud, you are given a police crime reference number and your case will be referred to the National Fraud Intelligence Bureau (NFIB), which is run by the police.
In some cases, the police and other law enforcement agencies may want to contact you for further details, so it's important that you provide your correct contact details and keep any relevant information about the crime.
Although the police cannot investigate every report individually, the information you provide will aid them. The police use your information to build up intelligence about cybercrime, which includes who is committing what crimes and against whom. This contributes to making the UK a more hostile place for cybercriminals to operate and helps to keep other potential victims safe.
When you report to Action Fraud, you can also choose to have your details passed on to Victim Support, a national charity that helps those affected by crime. If you take up this option, you will then be contacted by someone from the charity and offered free and confidential emotional support and practical help.
Reporting a cyber security incident
When you suffer a cyber-attack or a related cybersecurity incident and you are a business, you might need to report it to the Information Commissioner's Office (ICO). Under the new General Data Protection Regulation (GDPR) rules, from the 25th May 2018, you must also report data breaches to the ICO within 72 hours. Action Fraud, the Police and the Cyber Resilience Centre will not report any contact with them to the ICO. You can find out more about the ICO on our site under 'Support Tools' in our Free resources sub menu.
Reporting a suspicious website
If you have visited a website you think is trying to scam you, report it to the NCSC and they will investigate. Simply enter the website URL or link, how you received the site details and any more information you want to provide. You can access the NCSC website here.
Reporting a suspicious email
If you have received an email which you’re not quite sure about, don't use the links or contact details in the email, forward it to the Suspicious Email Reporting Service (SERS) using firstname.lastname@example.org.
Did you know that the NCSC has an Outlook plugin so users can report phishing direct from their mailbox? Read more here.
Reporting a suspicious text message
Suspicious text messages should be forwarded to 7726. This free-of-charge short code enables your provider to investigate the origin of the text and take action if found to be malicious.
Guidance & support
You can contact the Cyber Resilience Centre for guidance and support during normal office hours by dropping us an email (email@example.com). We also provide free guidance on our website.
The National Cyber Security Centre (NCSC) has also created the Small Business Guide to Response and Recovery. It provides small to medium sized organisations with guidance about how to prepare their response and plan their recovery to a cyber incident. You can access the guide here.
Other useful contacts
If you want to report any other sort of online crime such as stalking, harassment or fears about online grooming, contact your local Police force by calling 101.
To report offensive or abusive behaviour on social media, use the report tool within the website or app. You can find out how to do this from Report Harmful Content.
If you discover an online image or video of child sexual abuse, please report it online to the Internet Watch Foundation.
If you are worried about online child sexual abuse, you can report it online to Child Exploitation and Online Protection Command (CEOP).
Young people who need advice about their online concerns can speak to Childline by calling 0800 1111.
Depending on the nature of the crime and how you’ve been affected by it, you may want to contact Victim Support at www.victimsupport.org.uk or by calling 0808 1689111. You can contact Victim Support regardless of when the crime took place.