Secordit home
Contact

Help

First Response

Something has already happened. Start here.

If you've clicked a link, shared details, sent money, shared a code or let someone into your device, these are practical next steps for the next few minutes. They are guidance, not a promise that anything can be undone.

You don't need to send us your story to use this page. We don't report anything for you. You contact the official services yourself.

What's happened?

Pick the one that fits. We'll show you the first step.

For me or my family

For my business

See every kit or start with the Starter Checklist.

If money or banking is involved, contact your bank first

Use a number you already trust: the one on the back of your card, in your banking app or on your bank's official website. Don't use a number, link or caller ID from the call, text or email that worried you.

159 only works for participating banks. If your bank takes part, you can call 159 to reach it. Not every bank does, so check the list of participating banks on the Stop Scams UK 159 page (opens in a new tab). If yours isn't listed, use the number on your card or in your app.

Official UK reporting

You make these reports yourself. We don't send anything for you.

  • Your bank, if money, card or banking details are involved (see above).
  • Report the crime if you've lost money or been hacked because of a scam:
  • Suspicious emails: forward them to [email protected].
  • Suspicious texts: forward them to 7726. It's free.
  • Work laptop or phone: tell your IT department as well.

More detail: GOV.UK: Report internet scams and phishing (opens in a new tab).

Secordit gives practical guidance only. We can't recover money, investigate crimes or tell you for certain what has happened to your device or account, and we can't say what your bank or the police will decide.

You clicked a link

Clicking a link on its own doesn't mean your device is infected or that someone has taken over your accounts. What matters most is what happened next.

What to do now

  1. Close the page. Don't type passwords, codes or card details into it.
  2. If you entered banking or card details, or think a payment started, contact your bank now (see above).
  3. If you typed a password into the page, change it, and change it on any other account that uses the same password. Turn on two-step verification where it's offered.
  4. If the link downloaded something, or you followed instructions to install software, open your antivirus software if you have it, run a full scan and let it clean up anything it finds.
  5. If it happened on a work laptop or phone, tell your IT department.
  6. Forward the email to [email protected], or the text to 7726.
  7. If you've lost money or been hacked, report it using the official reporting routes above.

On this site

Official guidance: NCSC: if you've shared sensitive information (opens in a new tab).

You shared personal or login details

What to do depends on what you shared.

If you shared a password or login details

  1. Change the password on that account, using the service's official website or app rather than a link in a message. Change it on any other account that uses the same password.
  2. Turn on two-step verification, especially for email and banking.
  3. Check for things you don't recognise: sign-ins, changed security settings, messages sent from your account, and email forwarding rules.
  4. If you're locked out, use that service's own official account-recovery route. You'll find it on the service's official website or help pages.

If you shared banking or card details

Contact your bank now (see above).

If you shared other personal information

Details like your name, address or date of birth can be used to make later scam messages sound more convincing. Don't share any more, and take extra care with unexpected calls, texts and emails.

In every case, forward the message that asked for your details to [email protected] or 7726. If you've lost money or been hacked, report it using the official reporting routes above.

On this site

Official guidance: NCSC: recovering a hacked account (opens in a new tab).

You sent money or made a payment

  1. Contact your bank straight away, using a number you trust, or 159 if your bank is one of the participating banks. Tell them what happened.
  2. Report it as a crime: Report Fraud online or on 0300 123 2040 if you're in England, Wales or Northern Ireland, or Police Scotland on 101 if you're in Scotland.
  3. Don't send any more money to anyone involved. Be wary of anyone who contacts you offering to get your money back.
  4. Keep a record: screenshots, messages, payment details and any reference numbers you're given.
  5. Once your bank knows, secure the account or device involved using the other sections on this page.

Only your bank can tell you what it can do about the payment. We can't say whether money will be returned.

On this site

Official guidance: NCSC: if you've lost money (opens in a new tab).

You shared a code or passcode

  1. Don't share any more codes. Treat the account the code was for as at risk.
  2. If the code was for banking or for approving a payment, contact your bank now (see above).
  3. Using the service's official app or website, not a link in a message, sign in, change your password, log out other devices and apps, and check two-step verification is set up as you expect.
  4. If you can't get in, use that service's own official account-recovery route.
  5. Forward the message that asked for the code to 7726 (texts) or [email protected] (emails).
  6. If money moved or your account was taken over, report it using the official reporting routes above.

On this site

Official guidance: NCSC: recovering a hacked account (opens in a new tab).

You let someone access or see your screen

This often starts with a call or pop-up claiming to be your bank, broadband provider or "IT support".

  1. End the session. Hang up, close the screen-sharing app and disconnect the device from the internet.
  2. Straight away, using a different phone or device you trust, contact your bank (a number you trust, or 159 if your bank is one of the participating banks). Tell them someone may have seen or controlled your screen. Do this before you start cleaning up the device.
  3. Uninstall any app they asked you to install.
  4. From a different device you trust, change your email and banking passwords.
  5. Then follow the official guidance for your type of device. Some recovery steps erase anything that isn't backed up, so read the guidance fully before resetting or wiping anything, and get expert help if you're unsure.
  6. If it was a work device, tell your IT department.
  7. Report it using the official reporting routes above.

On this site

Official guidance: Bank Safe Online: malware and remote access scams (opens in a new tab) and NCSC: how to recover an infected device (opens in a new tab), which covers phones, tablets, PCs and laptops.

Not sure which fits?

See where to report, and checks you can use, look up a word in Scam Spotter A to Z, or browse all kits.

Helping someone else? Helping an Older Relative Spot Scams.