If someone is in immediate danger
Call 999. For fraud without an immediate emergency, use the reporting routes below.
If you shared a password or approved a login
Use the genuine account’s recovery route on a trusted device. Change reused passwords, review signed-in devices and turn on two-step verification. For a work account, contact IT immediately.
If someone gained remote access
Stop the session and disconnect the affected device from the internet. Contact your bank from another trusted device if banking was involved. Ask a trusted support professional for help before using the affected device for sensitive tasks.
Keep the evidence
Save relevant messages, numbers, transaction details and dates. Do not keep engaging with the sender, and do not pay a supposed recovery agent who promises to get your money back.
Where to report
Suspicious email
Forward it to report@phishing.gov.uk, then use your email app’s phishing or spam report control.
NCSC reporting guidance (opens in a new tab)Suspicious text
Forward the message to 7726 and follow your network’s reply. Do not open the link.
Official reporting guidance (opens in a new tab)Fraud or cybercrime
In England, Wales or Northern Ireland, use Report Fraud. In Scotland, report to Police Scotland on 101.
Open Report Fraud (opens in a new tab)Unsubscribed is an information website. We cannot investigate an incident, recover money or take an emergency report.
Go straight to the source
Official guidance and provider instructions. External links open in a new tab.
- Report Fraud: report to the police (opens in a new tab)
- NCSC: report a scam email (opens in a new tab)
- GOV.UK: report suspicious emails and messages (opens in a new tab)
- NCSC: staying secure online (opens in a new tab)
Reviewed 29 September 2026. Menus and services can change; follow the provider’s current instructions if they differ.