Some scam emails contain obvious errors. Others copy genuine branding and use personal information. A polished message is not proof that it is safe.
Questions to ask
- Were you expecting the message?
- Does it create pressure, fear or unusual excitement?
- Does it ask you to sign in, pay, download or provide a security code?
- Does the full sender address belong to the organisation?
- Does the link lead where the visible wording claims?
Check independently
Do not use the message’s link or telephone number. Open the organisation’s official app, type a known website address or use a number from a statement or payment card.
Report it
Forward suspicious emails to report@phishing.gov.uk. You will not receive a detailed response, but reports help the National Cyber Security Centre investigate and remove malicious sites.
If you clicked
Follow the steps for a suspicious link.