Cyber security for business

How to report a cyber crime

Guide

Different agencies have different remits in terms of investigating and assisting with cases of online fraud, data breaches and cyber crime.

Report a phishing attempt

If you think you may have incurred financial loss or have been hacked as a result of responding to a phishing message, you can report scam to Action Fraud.

Suspicious emails

If you receive an email which you're not quite sure about, forward it to the Suspicious Email Reporting Service: report@phishing.gov.uk. The National Cyber Security Centre (NCSC) will investigate it.

Suspicious texts

If you receive a suspicious text message, forward it to 7726 - it’s free. This will report the message to your mobile phone provider.

Report fraud and cyber crime

You can report fraud or cyber crime to Action Fraud at any time using their online reporting tool. Reporting online is quick, easy and can be done on any device.

Businesses, charities and other organisations experiencing a live cyber attack (one that is in progress) can use Action Fraud's 24/7 reporting service. Call Tel 0300 123 2040 to speak to specialist advisers. This service is available to businesses 24 hours a day, 7 days a week.

Report cyber crime in Northern Ireland

Businesses in Northern Ireland should report fraud and related cyber crime directly to Action Fraud unless they are requesting a call for service, in which case they can contact the Police Service of Northern ireland.

Reporting a cyber security incident

If you experience a cyber security incident, you can alert the NCSC for information or technical assistance. Incidents reported using this form are monitored 24/7 by a NCSC defence watch officer who will endeavour to reply at the earliest opportunity.

Reporting data breaches

If the cyber attack you experienced caused a data breach, reporting it to Action Fraud, the PSNI or the NCSC won’t automatically pass this onto the Information Commissioner's Office (ICO). Depending on the likely risk to individuals as a result of the breach, you may have to report the breach to the ICO within 72 hours.

Find out more about reporting serious breaches of personal data.

Why should you report cyber crime?

Depending on the scope of the crime, relevant agencies may be able to:

  • advise you on the appropriate cyber security measures
  • assist you in responding to the incident
  • assist in identifying and prosecuting offenders

In cases of serious crime, they may even refer your case to specialised law enforcement agencies such as the National Crime Agency.

For advice on reducing your cyber risk, see Cyber Essentials scheme.