What is phishing?

Phishing is a scam that uses a fake message to make you reveal information or do something unsafe. The message may imitate your bank or another organisation and ask you to open a link, share a password or send money. Text-message and phone-call versions have their own names. 123

By Secordit. Last checked: 7 November 2026.

Go to the steps · All glossary terms

How it works

  1. A message claims to come from someone you trust. 123
  2. It asks you to follow a link, open an attachment or share information. 123
  3. The criminal uses your response to steal information or money. 123

Real UK example

HMRC's August 2025 warning described fake tax repayment offers and demands for payments. The warning told readers to check contact through GOV.UK. The practical lesson is to verify the request elsewhere, rather than trust its branding. 4

Warning signs

  • An unexpected request for your password or payment details. 12356789
  • Pressure to respond before you can check. 123
  • A link or email address that does not match the organisation. 123
  • A familiar logo attached to an unfamiliar request. 123

What to do now

  1. Stop using the message. Open the organisation’s website yourself to check. 123
  2. If you entered a password, change it through the genuine service. Change it anywhere else you reused it. 123567
  3. Forward suspicious emails to [email protected]. Forward scam texts to 7726. 1231011

UK reporting and support

  • If money has gone or banking details were shared, call your bank using the number on your card. Or use 159 if your bank participates. 8912
  • Report fraud or hacking in England, Wales or Northern Ireland to Report Fraud. In Scotland, call Police Scotland on 101. 913
  • If someone is in danger, call 999. 13

How to protect yourself

  • Use different passwords for different accounts. 123567
  • Turn on two-step verification, especially for your email. 123567
  • Check unexpected requests through contact details you already trust. 123

Frequently asked questions

Can phishing be identified by bad grammar?

Not reliably. Mistakes can be a warning sign, but convincing messages can also be scams. Check the request independently. 1

Is phishing a type of malware?

No. Phishing is a way to deceive you. A phishing message can lead to malware, which is harmful software. 114

Can phishing happen over the phone?

Yes. Phone-based phishing is often called vishing. End suspicious calls and use a trusted number to check. 3

Matching kit

Account Lockdown Kit · £19 · Digital download.

A self-serve guide to securing email, phone and online accounts. It does not promise to stop every attack.

General information, not legal, financial or personalised security advice. Secordit is not a police or bank reporting service.

News Pulse

Account security, explained by email.

Read about News Pulse

Sources

  1. Report Fraud, Phishing - Report Fraud. Accessed 7 November 2026 (Europe/London).
  2. Report Fraud, Smishing - Report Fraud. Accessed 7 November 2026 (Europe/London).
  3. Ofcom, How to protect yourself from scam calls, texts and messages. Accessed 7 November 2026 (Europe/London).
  4. GOV.UK / HMRC, Scams warning as Self Assessment customers targeted - GOV.UK. Accessed 7 November 2026 (Europe/London).
  5. NCSC, Recovering a hacked account | National Cyber Security Centre. Accessed 7 November 2026 (Europe/London).
  6. NCSC, Top tips for staying secure online | Turn on 2-step verification (2SV) | National Cyber Security Centre. Accessed 7 November 2026 (Europe/London).
  7. ICO, 23andMe fined £2.31 million for failing to protect UK users’ genetic data | ICO. Accessed 7 November 2026 (Europe/London).
  8. UK Finance, Authorised Push Payment Fraud Reimbursement | UK Finance. Accessed 7 November 2026 (Europe/London).
  9. Report Fraud, Report Fraud alert: Police forces being impersonated in scam calls using ‘spoofed’ phone numbers - Report Fraud. Accessed 7 November 2026 (Europe/London).
  10. GOV.UK, Avoid and report internet scams and phishing: Report internet scams and phishing - GOV.UK. Accessed 7 November 2026 (Europe/London).
  11. Report Fraud, How to report suspicious messages, calls and websites - Report Fraud. Accessed 7 November 2026 (Europe/London).
  12. Stop Scams UK, 159 Phone number - Stop Scams UK. Accessed 7 November 2026 (Europe/London).
  13. Police Scotland, How to report a crime - Police Scotland. Accessed 7 November 2026 (Europe/London).
  14. NCSC, Scam 'missed parcel' SMS messages: advice on avoiding malware | National Cyber Security Centre. Accessed 7 November 2026 (Europe/London).