WhatsApp code scam: someone's asking for your code
Picture a sole trader who runs a cleaning business from her phone. A message arrives from a regular customer: "Sorry, I sent you a code by mistake. Can you send...
Intelligence
123 Reg data breach: what to do about follow-up scams
As at 30 October 2026. If you've had 123 Reg's email about its data breach, in our view the more practical risk now is the scam messages and calls that...
CSRB incident reporting: the proposed 24/72-hour model for MSPs
A plain-English look at the CSRB’s proposed 24/72-hour incident-reporting model for MSPs, what remains unsettled and what teams can organise before the measures commence.
Fake HMRC or Companies House message? How to check before you click or pay
Last checked: 29 October 2026 Short answer: Don't use the link, attachment or phone number in a message you're unsure about. Check it against GOV.UK instead: HMRC's list of genuine...
Is Your MSP in Scope for the Cyber Security and Resilience Bill?
A practical, fact-based guide to the Cyber Security and Resilience Bill's Relevant Managed Service Provider (RMSP) category, helping UK MSP directors work out whether the CSRB Bill applies to their...
Cyber Essentials vs ISO 27001: the difference, in plain English
If a customer or a tender asks about your cyber security, two names tend to come up: Cyber Essentials and ISO/IEC 27001 (usually shortened to ISO 27001). In a January...
What's happened?
Pick the one thing in front of you, and start there.
- I think I've been scammed
- My account's been hacked
- We've had a data breach
- A supplier says their bank details changed
- A customer sent us a security questionnaire
- A customer asked for Cyber Essentials
- We're filling in a cyber insurance form
- Someone complained about how we used their data
- Someone asked for the data we hold on them
- I'm helping an older relative avoid scams
- Someone's joining or leaving the team
- We're not sure where to start