Contact the bank or payment provider now
If money has been sent, a card exposed or account access compromised, contact the real provider immediately using its app, card number or independently verified official contact details. Explain the payment, amount, time and suspected fraud. Ask about freezing the affected access, recalling a payment or the relevant dispute process. Do not wait for a marketplace conversation to finish. Recovery is not guaranteed.
Stop further access and preserve evidence
If you entered a password into a suspicious site, change it through the genuine service using a trusted device and secure any reused passwords. Review active sessions, recovery settings and payout details. Keep messages, the listing, receipts, account names, URLs and transaction references. Do not continue following the suspicious sender’s instructions. Seek appropriate technical support for a compromised business device rather than deleting everything before evidence is preserved.
Use the correct reporting route
Report suspected fraud in England, Wales or Northern Ireland through Report Fraud. In Scotland, contact Police Scotland on 101. Use 999 for an emergency or immediate danger. Report Fraud advises organisations under an active cyber attack to call 0300 123 2040 immediately. Tell the marketplace or relevant service through its official reporting process as well.
Forward suspicious emails to report@phishing.gov.uk. Suspicious texts can be forwarded to 7726 where supported by your mobile provider. Reporting a phishing message does not replace telling your bank when money or access is at risk.
Beware of a second “recovery” approach
Someone offering to recover stolen money for an advance fee may be exploiting the same incident. Verify any professional independently and do not share bank credentials or recovery codes. Keep a log of genuine support references and the actions taken. If customer or staff data may have been exposed, assess the incident and relevant reporting duties with suitable professional help. After immediate containment, fix the access or payment process that failed and explain the new check to the team.
YOUR NEXT STEP
Make the next move a clearer one.
- Contact the real bank or provider without delay.
- Secure affected access through the genuine service.
- Preserve messages, URLs and transaction evidence.
- Report through the appropriate UK route.
- Reject unverified recovery fees and credential requests.
Where we checked the details
Primary sources checked 11 October 2026. Rules, prices and eligibility can change. Confirm current terms with the official service.
General UK guidance and editorial checklists. Apply the official rules to your circumstances and seek qualified help where needed. This is researched guidance, not a claim that we have tested every provider or situation.
Spotted an update? Tell us →