Cyber security for business

Businesses should use the Report Fraud service as the main way to report fraud and cyber crime across Northern Ireland, England and Wales. You can report specific incidents to other agencies where required - for example, technical cyber threats to the National Cyber Security Centre (NCSC), urgent local issues to local law enforcement, or data protection breaches to the Information Commissioner's Office (ICO).

If your business is affected by fraud and cyber crime

From 4 December 2025, use the Report Fraud service instead of Action Fraud to report fraud and cyber crime.

Report online

Use the Report Fraud online reporting tool to report fraud or cyber crime as an individual or organisation at any time.

Report by phone

Call Report Fraud on Tel 0300 123 2040 to speak to specialist advisers, available 24/7.

If you are a business, charity or organisation under a cyber attack, you can use the 24/7 phone service for urgent help and advice on how to manage the attack.

Reporting fraud and cyber crime in Northern Ireland

In Northern Ireland, use Report Fraud unless police action is urgently needed, and you are requesting a 'call for service'. This may in cases of:

• ongoing crime or recent incident (in the last 24 hours)
• known local suspect
• vulnerable victim (for example, due to age)
• evidence at risk (like CCTV)
• preventing financial loss

If you are making a 'call for service' report, call 101. In an emergency, call 999. Do not use the Report Fraud service in these cases.

Reporting cyber security incidents to NCSC

For serious issues like ransomware or data breaches, you can also report to the NCSC. They offer technical support and advice, but this does not replace police or Report Fraud reports.

Reporting personal data breaches

If a data breach happens and it risks individuals’ rights and freedoms, you must notify the ICO within 72 hours. Reporting to other services like Report Fraud, PSNI or NCSC does not notify the ICO automatically. Find guidance on reporting personal data breaches.

Report suspicious emails, phone calls, text messages or websites

If you come across fraudulent emails, phone calls, messages, social media or websites, report these in the following ways.

Reporting suspicious emails

Forward suspicious emails to the NCSC at report@phishing.gov.uk. Reports help them take down harmful websites and protect others from scams.

Reporting suspicious text messages

Forward a suspicious text message to 7726. Your network provider will investigate the origin of the message and block or ban the sender, if it is found to be malicious. You can also take a screenshot or screen recording of the text message and send it to the NCSC at report@phishing.gov.uk.

If you think you have been scammed or hacked after clicking a link or responding to a text message, contact Report Fraud straight away and change your passwords.

Reporting suspicious phone calls

To report a suspicious phone call, send a text to 7726 with the word 'call' followed by the caller's number. Your provider will be able to block or ban the number if it is found to be malicious.

Reporting suspicious websites

The NCSC investigates and removes suspicious websites. If you come across a fake or suspicious site, report it to the NCSC.

Why should you report fraud and cyber crime

Reporting helps protect your business and fight wider crime. Agencies can give you containment advice, help you reduce losses, support prosecutions and strengthen national defences against fraud and cyber crime.