Avoid and report internet scams and phishing
Printable version
1. Report internet scams and phishing
Report misleading websites, emails, phone numbers, phone calls or text messages you think may be suspicious.
Do not give out private information (such as bank details or passwords), reply to text messages, download attachments or click on any links in emails if you’re not sure they’re genuine.
This guide is also available in Welsh (Cymraeg).
Emails
Forward suspicious emails to report@phishing.gov.uk.
The will investigate it.
Text messages
Forward suspicious text messages to 7726 - it’s free.
This will report the message to your mobile phone provider.
Adverts
. You can report adverts found online, including in search engines, websites or on social media.
You can also:
- if you found them in Google search results
- if you found them in Bing search results
If you think you’ve been a victim of an online scam or fraud
Contact Action Fraud if you think you’ve lost money or been hacked because of an online scam or fraud and you’re in England or Wales. You can:
- - either sign up for an account or continue as a ‘guest’
- call 0300 123 2040
If you’re in Scotland and you’ve lost money because of an online scam or fraud, .
Avoid websites, emails and phone numbers that imitate government services
Some websites, emails or phone numbers look like they’re part of an official government service when they’re not, or claim to help more than they actually do. Some make you pay for things that would be free or cheaper if you used the official government service.
Search on ÒÁÈËÖ±²¥ to find official government services and phone numbers, for example if you want to apply to the DVLA for a driving licence.
2. Report scam HMRC messages, calls and social media accounts
You can report suspicious HM Revenue and Customs (HMRC) emails, texts, phone calls, social media accounts and letters. How you do this depends on what you received.
If you get:
- a text message, forward it to 60599 - you’ll be charged at your network rate
- an email, forward it to phishing@hmrc.gov.uk
- a message in an application, for example WhatsApp, take a screenshot and email it to phishing@hmrc.gov.uk
- a phone call asking for personal information or threatening a lawsuit,
- a letter, contact the HMRC team the letter says it’s from, for example the Self Assessment team
- a message from a social media account, and you cannot verify the account it comes from, send details by email to security.custcon@hmrc.gov.uk and ignore it
Your email address and phone number will be shared with other organisations if that’s necessary to close down the scam.
If you’ve given your personal details to someone
Contact the HMRC security team if you think you’ve given any personal information in reply to a suspicious email or text.
Include brief details of what you disclosed (for example name, address, HMRC User ID, password) but do not give your personal details in the email.
HMRC security team
phishing@hmrc.gov.uk
Spotting HMRC scams
You’ll never get an email, text message, message in an application (for example WhatsApp) or a phone call from HMRC which:
- tells you about a tax rebate or penalty
- asks for your personal or payment information
Check HMRC’s guidance on recognising scams if you’re not sure.
3. Report visa and immigration scams
You’ll never be asked to pay for a visa using:
- cash
- money transfer
to report visa and immigration scams. You should include:
- a copy of the suspicious email you received, the sender’s email address and the date and time it was received
- details of what you sent in a reply, if you replied - for example whether you sent your bank details, address or password
You can also report suspicious emails, letters or telephone calls to the police through Action Fraud.