How to Report a Phishing Email in the UK

Report to the NCSC — Suspicious Email Reporting Service

The simplest and most important report you can make:

This is run by the National Cyber Security Centre. You do not need to include any message — just forward the email. The NCSC analyses submissions and works to take down the fraudulent websites the emails link to. You can also report suspicious websites at ncsc.gov.uk/section/about-this-website/report-a-suspicious-website.

Report Suspicious Text Messages

This is free on all UK mobile networks (O2, EE, Vodafone, Three, and others). 7726 spells “SPAM” on a telephone keypad. Your network will investigate and may block the sender.

Report HMRC Phishing Specifically

HMRC phishing — fake tax refund emails, unpaid tax threats — is one of the most common types in the UK. Report it to HMRC directly in addition to the NCSC:

• Phishing emails: Forward to phishing@hmrc.gov.uk
• Fake HMRC websites: Report at gov.uk/report-suspicious-emails-websites-phishing
• Suspicious HMRC calls: Report at gov.uk/report-suspicious-emails-websites-phishing

Report Royal Mail and Parcel Delivery Scams

Royal Mail parcel texts — asking you to pay a redelivery fee — are among the most frequently reported phishing attempts in the UK.

• Report to Royal Mail: royalmail.com/sending/uk/suspicious-content
• Also report to 7726 by forwarding the text

Report Financial Fraud to Action Fraud

If you have already been defrauded — you clicked the link and provided bank details or transferred money — report to Action Fraud:

• Online: actionfraud.police.uk
• Phone: 0300 123 2040 (Monday–Friday, 8am–8pm)

Action Fraud is the UK's national fraud and cybercrime reporting centre. Reports go to the National Fraud Intelligence Bureau, which builds cases against criminal networks.

Where do I report a phishing email in the UK?

Forward it to report@phishing.gov.uk — the NCSC's Suspicious Email Reporting Service. For suspicious texts, forward to 7726 (free). For HMRC specifically, also forward to phishing@hmrc.gov.uk.

Should I click the link in a phishing email to report it?

No — never click links in suspected phishing emails. Simply forward the email as-is to report@phishing.gov.uk. You do not need to include any message.

Will reporting a phishing email stop me being targeted again?

Reporting helps the NCSC take down fraudulent websites and contributes to patterns that lead to criminal investigations. It does not guarantee you will not receive future phishing attempts, but it reduces the risk for everyone.