Look at the request
Phishing messages try to persuade you to give away information or take an unsafe action. They may claim there is a missed delivery, a blocked account or an urgent payment.
Do not rely on appearance
A logo, familiar name or polished writing can be copied. Poor spelling is not the only warning sign. Ask whether you expected the message and whether the request makes sense.
Check separately
Open the official app or type the address you already know. Contact the organisation through trusted details, rather than a number in the message. Do not reply with passwords or security codes.
If you have clicked
Do not enter further information. If you shared credentials, use the provider’s official recovery process. If money may be affected, contact your bank promptly. Read NCSC phishing advice.
Was this helpful?
Your feedback can help improve our resources. Share a suggestion through our contact page.
Send feedbackKeep learning
Older People
Helping a relative use technology
Support someone’s confidence while respecting their independence.
Online Safety
How to check a website before using it
A few checks before you sign in, share details or pay.
Online Safety
How to create a strong password
A practical starting point for keeping each of your accounts separate and secure.