Spotting and reporting phishing emails

Phishing emails try to trick you into clicking a link, opening an attachment, or handing over passwords or payment details.

Warning signs - Urgency or threats: "your account will be closed today", "invoice overdue". - Unexpected attachments or links, especially to sign in or "view a document". - A sender that's slightly off: a misspelled company name, or a personal address pretending to be a business. - Requests to change bank details or make an urgent payment. Always confirm by phone, using a number you already know. - "Hover before you click": point at a link (without clicking) to see where it really goes.

What to do - Don't click, reply or open attachments. - Report it to the service desk, and forward it to the NCSC's reporting service at report@phishing.gov.uk. Suspicious texts can be forwarded to 7726. - Clicked something or entered your password? Tell us immediately and change your password. Acting quickly limits the damage, and you won't be in trouble for reporting it.