Trusted Reviews is supported by its audience. If you purchase through links on our site, we may earn a commission.Learn more.
How to report a scam email
In This Article
If you get a phishing or any other form of scam email in the UK, there are a number of bodies you can report it to. To bring it to the attention to authorities, you can forward it to the National Cyber Security Centre (SCSC). You can also alert your email provider and often the company that’s being impersonated.
This guide details how all the most common ways to report a scam email.
The Short Version
Download Certo to secure your phone today
Cybersecurity experts Certo offer a wide range of security benefits to protect you from spyware and other bad actors for your mobile phone. Download their app today, for both Android and iOS.
Step1
Forward it to the NCSC
The National Cyber Security Centre invites UK internet users to forward any phishing emails they receive toreport@phishing.gov.uk. You can alternatively take a screenshot of a suspicious email and send it to the same address. Even if you’re not certain that the email in question is a scam, they’d like to see it. The NCSC cannot let you know what action has been taken about anything you forward, but it will analyse and act on everything you send. This is a key way you can help the agency shut down dangerous sites, which are often linked to in scam messages.
Step2
Notify Action Fraud if you’ve been the victim of a crime
If a scam email has led to you, your business, or someone close to you losing money, it is a crime and should be reported to Action Fraud, the UK’s Nation Fraud and Cyber Crime reporting centre. To report a cybercrime, go tohttps://www.actionfraud.police.uk/and select your status from the Start reporting box. If you wish to be informed of any action taken about your case, you’ll have to create an account.
Step3
Flag it as a phishing email with your mail provider
Web-based email providers, includingGmail,ProtonMail, andOutlookprovide integrated tools for detecting and reporting phishing emails. To report a suspicious message in Gmail, open the email, click on the three-dots icon at the top right, select Report phishing, then click Report Phishing Message in the box that appears. The process is similar in other webmail services.If you have an IMAP/POP3 account, for example from your ISP, they’ll probably have a dedicated phishing reporting address that you can find in their documentation. For example, BT’ssecurity help pagesrequest you to forward phishing emails to them atabuse@bt.com– once again, the company says it will act on all emails, but will probably not reply.
Step4
Notify the organisation being impersonated
Many companies invite users to contact them if anyone is attempting to impersonate them for fraudulent reasons, such as phishing emails. While this feature lacks the scope to include a comprehensive list, see the FAQ below for a selection of useful company fraud reporting contact details.
Save 81% on a VPN with SurfShark
Surfshark has dropped the price of its VPN to £1.94 a month. Head over to Surfshark now to pay a one time price of £46.44 for 24 months of Surfshark and save 81%.
FAQs
Send spam emails purporting to be from Amazon tostop-spoofing@amazon.comas attachments or forwards. Go tohttps://www.amazon.co.uk/gp/help/customer/display.html%3FnodeId%3DGRGRY7AQ3LMPXVCVfor more information.
If you receive an email pretending to be from Apple, forward it toreportphishing@apple.com. Seehttps://support.apple.com/en-gb/HT204759for more information.
A real eBay message will also be available on the site itself in your Messages inbox. If you get an email purporting to be from eBay, forward it tospoof@ebay.co.uk. Find more information, including examples of common signs that you’re being phished athttps://www.ebay.co.uk/help/account/protecting-account/recognising-phishing-phone-calls-emails?id=4195.
Suspicious emails purporting to be from Facebook can be forwarded tophish@fb.com. Go tohttps://www.facebook.com/help/phishingfor more information on identifying phishing emails and securing your account in the wake of an attempt.
PayPal encourages those who’ve received suspicious messages purporting to be from it to forward them directly tospoof@paypal.com. For more information, seehttps://www.paypal.com/bm/webapps/mpp/security/report-problem.
We’ve already covered flagging suspicious mails up in Gmail, but Google has a wide range of other services, which scammers often impersonate. See Google’s scam avoidance and reporting page athttps://support.google.com/faqs/answer/2952493for more information on all of them.
You can also get phishing sites added to Google’s Safe Browsing tools, which will automatically alert Chrome and Google service users who try to visit them, by reporting their URL athttps://safebrowsing.google.com/safebrowsing/report_phish/.
You might like…
K.G. Orphanides is a writer and developer whose areas of expertise include internet security, VPNs, Linux for the desktop, small-scale game development, software preservation and computer audio techno…
Founded in 2003, Trusted Reviews exists to give our readers thorough, unbiased and independent advice on what to buy.
Today, we have millions of users a month from around the world, and assess more than 1,000 products a year.
Editorial independence means being able to give an unbiased verdict about a product or company, with the avoidance of conflicts of interest. To ensure this is possible, every member of the editorial staff follows a clear code of conduct.
We also expect our journalists to follow clear ethical standards in their work. Our staff members must strive for honesty and accuracy in everything they do. We follow the IPSO Editors’ code of practice to underpin these standards.
Why trust our journalism?
Founded in 2003, Trusted Reviews exists to give our readers thorough, unbiased and independent advice on what to buy.
Today, we have millions of users a month from around the world, and assess more than 1,000 products a year.
Editorial independence means being able to give an unbiased verdict about a product or company, with the avoidance of conflicts of interest. To ensure this is possible, every member of the editorial staff follows a clear code of conduct.
We also expect our journalists to follow clear ethical standards in their work. Our staff members must strive for honesty and accuracy in everything they do. We follow the IPSO Editors’ code of practice to underpin these standards.
