Phishing
Updated 2026-09-29
Phishing is a fraudulent email or message designed to look like it comes from a trusted organisation, such as your bank or a government agency, aiming to trick you into revealing login details, clicking a malicious link, or downloading a harmful file.
When it matters
If you clicked a phishing link and entered your banking details, change your passwords and contact your bank immediately, since your account may be at risk of account takeover. The messaging version of this is called smishing when sent by SMS, and genuine banks never ask for your full password or one-time codes by message or email.
Read next
APK scam: what to do right now
If you installed an app from a link and your phone or banking now looks wrong, here is what to do in the next few minutes to limit the damage.
Read thisBusiness email compromise: what to do
A supplier or director email asked you to pay a changed bank account. Here is how business email compromise works and the fastest response.
Read thisCrypto scam: what you can do
If a crypto exchange or wallet blocks your withdrawal after you met the operator on a chat app, here is how to trace what happened and what to do next.
Read thisWhat to do right after a scam
If you just realised you sent money to a scam, here is the order of first actions: stop paying, call your bank, call 997, and report it.
Read this