Cyber security for business
How to report a cyber crime
Different agencies have different remits in terms of investigating and assisting with cases of online fraud, data breaches and cyber crime.
Report a phishing attempt
If you think you may have incurred financial loss or have been hacked as a result of responding to a phishing message, you can report scam to Action Fraud.
Suspicious emails
If you receive an email which you're not quite sure about, forward it to the Suspicious Email Reporting Service: report@phishing.gov.uk. The National Cyber Security Centre (NCSC) will investigate it.
Suspicious texts
If you receive a suspicious text message, forward it to 7726 - it's free. This will report the message to your mobile phone provider.
Report fraud and cyber crime
You can report fraud or cyber crime to Action Fraud at any time using their online reporting tool. Reporting online is quick, easy and can be done on any device.
Businesses, charities and other organisations experiencing a live cyber attack (one that is in progress) can use Action Fraud's 24/7 reporting service. Call Tel 0300 123 2040 to speak to specialist advisers. This service is available to businesses 24 hours a day, 7 days a week.
Report cyber crime in Northern Ireland
Businesses in Northern Ireland should report fraud and related cyber crime directly to Action Fraud unless they are requesting a call for service, in which case they can contact the Police Service of Northern ireland.
Reporting a cyber security incident
If you experience a cyber security incident, you can alert the NCSC for information or technical assistance. Incidents reported using this form are monitored 24/7 by an NCSC defence watch officer who will aim to reply at the earliest opportunity.
Reporting data breaches
If the cyber attack you experienced caused a data breach, reporting it to Action Fraud, the PSNI or the NCSC won’t automatically pass this on to the Information Commissioner's Office (ICO). Depending on the likely risk to individuals as a result of the breach, you may have to report the breach to the ICO within 72 hours.
Find out more about reporting serious breaches of personal data.
Why should you report cyber crime?
Depending on the scope of the crime, relevant agencies may be able to:
- advise you on the appropriate cyber security measures
- assist you in responding to the incident
- assist in identifying and prosecuting offenders
In cases of serious crime, they may even refer your case to specialised law enforcement agencies such as the National Crime Agency.
For advice on reducing your cyber risk, see Cyber Essentials scheme.