Expect convincing stories
A message may claim to offer outage compensation, restore bank access or check your emergency eligibility. A familiar logo or a local incident does not make the message genuine. Criminals can copy branding and change the name shown on a call.
Pause before acting
- Do not open a login link just because the message sounds urgent.
- Use a known app, a saved website address or a number from an existing bill.
- Never share a one-time banking code with an unexpected caller.
- Do not install remote-access software at someone’s request to receive a refund.
Verify independently
End the conversation and contact the organisation through a route you already trust. If your device shows a warning, do not call the number in a pop-up. Ask a trusted person for help if you are unsure.
If you have responded
Contact your bank promptly if payment details or money are involved. Change compromised passwords using a trusted device and follow the NCSC’s respond-and-recover advice. Keep the original message as evidence, without forwarding suspicious links to friends.
NCSC: advice for you and your family ↗
Check the linked guidance for updates. Follow local instructions during a real incident. This site does not provide live emergency information.