Cyber security for business

Businesses in Northern Ireland, England and Wales should use the Report Fraud service to report fraud and cyber crime. The service acts as a central point of contact for information about fraud and financially motivated internet crime. The service launched on 4 December 2025 and replaces Action Fraud.

In certain situations, you can still report fraud and cyber crime to other relevant agencies like the National Cyber Security Centre (NCSC), the Police Service of Northern Ireland (PSNI) and the Information Commissioner's Office (ICO) where necessary.

If your business is affected by fraud and cyber crime

From 4 December 2025, Report Fraud is the main service to report fraud and cyber crime.

Report online

Use the Report Fraud online reporting tool to report fraud or cyber crime as an individual or organisation at any time.

Report by phone

Call Report Fraud on Tel 0300 123 2040 to speak to specialist advisers, available 24/7.

If you are a business, charity or organisation under a cyber attack, use the 24/7 phone service for urgent help and advice on how to manage the attack.

Reporting fraud and cyber crime in Northern Ireland

In Northern Ireland, you should report fraud and cyber crime through Report Fraud unless police involvement is urgently needed, and you are requesting a 'call for service'. This may be the case if:

• the fraud or cyber crime is happening now or has happened in the last 24 hours
• you know the suspect, and they live in Northern Ireland
• the victim is considered vulnerable (for example, due to age)
• the police need to act quickly to secure evidence (like CCTV) or prevent financial loss

If you are making a 'call for service' report, call 101. In an emergency, call 999. Do not use the Report Fraud service in these cases.

Reporting cyber security incidents to NCSC

If you are experiencing a serious cyber security incident (such as ransomware or data breaches), you can report it to the NCSC. NCSC can provide you with advice and technical support, but this will not replace reporting to police or Report Fraud.

Reporting personal data breaches

If a data breach happens, you may need to report it to the ICO within 72 hours, depending on the risk to individuals. Reporting to Report Fraud, PSNI or NCSC does not notify the ICO automatically. Find guidance on reporting personal data breaches.

If you want to report a suspicious email, phone call, text message or website

If you don't want to report a crime, but have come across fraudulent emails, phone calls, messages, social media or websites, you can report these in the following ways.

Reporting suspicious emails

Forward suspicious emails to the NCSC's Suspicious Email Reporting Service at report@phishing.gov.uk. This helps NCSC take down harmful websites and protect others from scams.

Reporting suspicious text messages

Report a suspicious text message for free by forwarding it to 7726. This service works on most major UK networks. If you forward a text to 7726, your provider will investigate the origin of the message and block or ban the sender, if it is found to be malicious.

You can also take a screenshot or screen recording of the text message and send it to the NCSC at report@phishing.gov.uk.

If you think you have been scammed or hacked after clicking a link or responding to a text message, contact Report Fraud straight away and change your passwords.

Reporting suspicious phone calls

To report a suspicious phone call, send a text to 7726 with the word 'call' followed by the caller's number. Your provider will be able to block or ban the number if it is found to be malicious.

Reporting suspicious websites

NCSC has the power to investigate and remove suspicious websites. If you come across a fake website, or a website that feels suspicious, report it to the NCSC and they will investigate.

Why should you report fraud and cyber crime

Reporting helps you protect your business and support wider efforts to fight crime. Agencies can advise on how to contain the attack and reduce loss, help identify and prosecute offenders, and use your report to improve national fraud and cyber crime defences.