Protect yourself from becoming a victim of phishing
How to tell if an e-mail is genuine or a phishing email
Phishing emails are attempts by scammers to trick you into giving out your personal details. This can include your passwords, credit card numbers and/or bank account numbers.
You might have received an email claiming to be from a bank or someone claiming to have an urgent unpaid invoice. Other scams may look as though they come from one of your social networks.
So how do you avoid being scammed? How can you protect yourself from becoming a victim of phishing?
What are the signs that an email might not be genuine?
- Are there disguised or incorrect links in the email?
Resting (but not clicking) your mouse pointer on the link should reveal the destination web address. For instance, on the screen the address might be www.crimestoppers-uk.org but, when you rest your mouse on the link, it shows www.fakeurl.org/index/crimestoppers.
Double check web addresses (URLs) in emails. A closer look at phishing emails often shows URLs that are slightly altered. For example, at a quick glance www.crimestoppers.org looks to be a genuine web address, but a closer look shows it’s not the correct address. The correct web address for Crimestoppers is www.crimestoppers-uk.org. - Is it an email from a company or person you don’t recognise?
Don't remember making a transaction with them or recognise anything about the sender? The email may not be genuine. - Did you order an item?
Phishing emails may tell you about an invoice that needs to be paid or to let you know an order has been dispatched.
The email may contain an instruction like “order details and invoice in attached file”. If you open this file it may put a virus on your computer. Think about using security software that scans emails for viruses: this can help to keep your computer and your personal details safe.
What to do if you have suspicions about an email
- Contact the organisation directly.
Go to their official website and use the contact details you find there. Do not use the number or web address in the message. Remember, your bank and other official sources will not ask you to provide sensitive information by email. - If you have received an email that doesn’t feel right, STOP!
If you think you have received a phishing email, you can forward it to: report@phishing.gov.uk. Send emails to this address that feel suspicious, even if you're not certain they're a scam – they will be checked.
What about suspicious text messages and phone calls?
- You can report suspicious text messages or scam call numbers, free of charge, to 7726.
To report a scam text, forward it to 7726 and then send the sender’s number when prompted.
To report a scam call, text 7726 with the word ‘Call’ followed by the scam caller’s number.
Also, your network provider can find out where the text came from and block or ban the sender.
How do you report online fraud if you are a victim?
If money has been lost or financial information has been provided as a result of a phishing scam, tell your bank immediately and report it to Report Fraud at reportfraud.police.uk or by calling 0300 123 2040. In Scotland, call Police Scotland on 101.
Who can you tell if you know who is sending scam emails?
Us! We're Crimestoppers, a national charity, independent of the police, and we take information about fraud - and many other crimes. You can call 0800 555 111 free, any time of the day or night, any day of the year.
Or you can fill in our quick and secure complete online form, here on our website - just follow this link:
Whether you decide to call or contact us online, you'll be 100% anonymous. Always. Guaranteed.
Cyber crimes
Phishing emails and scam texts are examles of cyber crimes. Follow the link below for loads of useful information that will help keep you and your family safe online:
Cyber crimes - and what to do about them
Fraud
Find out more about all sorts of fraud, and how to stay safe, here on our website
15 July 2026
