Reporting Cybercrime

How to Report Cybercrime in the UK

Action Fraud is the UK’s national reporting centre for fraud and cybercrime where you should report fraud if you have been scammed, defrauded or experienced cyber crime in England, Wales and Northern Ireland.

This includes the reporting of cyber dependent crime such as network intrusion and unauthorised access to computer material, denial of service incidents and malware attacks.

The service is run by the City of London Police working alongside the National Fraud Intelligence Bureau (NFIB) who are responsible for assessment of the reports and to ensure that your fraud reports reach the right place. The City of London Police is the national policing lead for economic crime.

Report fraud and cyber crime crime

You can report fraud or cyber crime using the online reporting service any time of the day or night; the service enables you to both report a fraud and find help and support. They also provide help and advice over the phone through the Action Fraud contact centre. You can talk to their fraud and cybercrime specialists by calling:

0300 123 2040

When you report to Action Fraud you will receive a police crime reference number. Reports taken are passed to the National Fraud Intelligence Bureau. Action Fraud does not investigate the cases and cannot advise you on the progress of a case.

Your report will be forwarded on, if appropriate, to a relevant Police service in the United Kingdom for assessment and further investigation if applicable.

Reporting Phishing

You can report phishing to the National Cyber Security Centre. NCSC will analyse the suspect email and any websites it links to. They will use any additional information you’ve provided to look for and monitor suspicious activity.

If they discover activity that they believe is malicious, they may:

  • seek to block the address the email came from, so it can no longer send emails
  • work with hosting companies to remove links to malicious websites
  • raise awareness of commonly reported suspicious emails and methods used

You may be protecting lots of other people who didn’t spot the scam! Forward the email to:

Report Text Message Scams

If you receive a text message from a sender you are familiar with, or from a short code, usually 5 digits long but can be up to 8, reply ‘STOP’ to the telephone number or short code shown in the text message. This will inform the sender that you no longer wish to receive their text messages.

However, if the text message is from an unknown sender, or from a sender you are not familiar with, we recommend you don’t reply. Responding to the text will confirm that your number is active and might actually result in you receiving more messages, or even voice calls. You should also be aware that text messages from a business name, where the sender is the name and no phone number, are easily impersonated using apps on a phone or computer. Scammers will seek to impersonate the business and if they get the name right, and you are a genuine customer, the message will add itself to the legitimate thread of messages.

You can report suspicious or scam text messages to your network operator by forwarding it to 7726 (which spells out ‘SPAM’ on an old fashioned keypad).

Cyber Advice for Victims of Domestic Abuse

Unfortunately it is not uncommon for domestic abuse to involve digital abuse. For guidance on how to increase your cyber security and recover accounts in these circumstances, please visit our guidance:

What is a live cyber attack? 

A live attack is one that is ongoing, that is still affecting your system and your ability to work and there is an opportunity for law enforcement to stop the attack and/or secure evidence that will assist an investigation. The live incident helpline is only for organisational victims and not individuals.

For example:

Cyber criminals have accessed your network and stolen personal information about your customers and are demanding payment for its safe return. This is also known as hacking extortion.


Your website is being flooded with traffic – customers are not able to access it as a result. This is called a distributed denial of service (DDOS) attack.

24/7 Live Cyber Reporting for Organisations

Action Fraud’s specialist advisors are available 24 hours a day7 days a week for organisations under live cyber attack – call immediately on:

0300 123 2040

If you are member of the public you can report online (available 24/7) or call to report on 0300 123 2040 – Monday to Friday 08:00 to 20:00.

Submitting Information Anonymously

If you would like to submit information anonymously to assist police with investigating and tackling cybercrime, you can do so using the CrimeStoppers service. Information supplied by the public and business can be vital in preventing others from becoming victims of scams.