THINK BEFORE YOU CLICK How to Spot and Report Phishing Scams

What is phishing?

Phishing is a type of fraud where criminals send emails, texts or messages pretending to be from a trusted organisation, friend, family member, bank, delivery company or government service. Their aim is to steal your personal information, passwords or money.

Warning Signs

Be suspicious if a message: Creates urgency (“Act now!” or “Your account will be closed”)

Asks for passwords, bank details or personal information

Contains unexpected links or attachments

Comes from an unusual or misspelt email address Contains spelling mistakes or poor grammar

Claims you’ve won a prize or are owed money Requests payment or gift cards unexpectedly

STOP. THINK. CHECK.

Before clicking a link or opening an attachment:

STOP

Don’t rush. Criminals want you to react quickly.

THINK

Were you expecting this message?

CHECK

Contact the organisation directly using a trusted phone number or website, not the details provided in the message.

If You Receive a Suspicious Email

DO:

• Report it

• Delete it

• Verify the sender independently

DON’T:

• Click links

• Open attachments

• Reply to the sender

• Share personal information

⚠️

 If You’ve Already Clicked

Don’t panic.

• Change any passwords you entered immediately.

• Change the same password on other accounts.

• Contact your bank if you’ve provided financial information.

• Run an antivirus scan if you’ve downloaded anything.

• If using a work device, inform your IT support team. � �

How to Report Phishing Suspicious Emails

Forward to: report@phishing.gov.uk

The National Cyber Security Centre (NCSC) will investigate. Suspicious Text Messages Forward to: 7726 (free of charge)

If You’ve Lost Money or Been Scammed

Report to: Action Fraud / Report Fraud

www.reportfraud.police.uk

Telephone: 0300 123 2040 � �

Top Security Tips

✔ Use strong, unique passwords

✔ Enable Multi-Factor Authentication (MFA) where available

✔ Keep devices and apps updated

✔ Be cautious with unexpected requests for money or information

✔ When in doubt, don’t click and check first

Remember: IF YOU’RE NOT EXPECTING IT, DON’T CLICK IT.

A few seconds spent checking a message could prevent fraud, identity theft and cybercrime.

Based on guidance from the National Cyber Security Centre (NCSC) and GOV.UK.