Staying Safe Online

Straightforward advice to help you
spot scams and stay safe online. 

Scams are becoming more common and can happen to anyone.
They can arrive by email, text message, phone, WhatsApp or social media. 

The good news is that there are some simple things you can do to protect yourself. 

If something doesn't feel right, don't worry or feel embarrassed.
Take your time, ask someone you trust and check before you act. 

Stop. Think. Check. 

🛑 STOP 

Don't rush. 

Don't click a link, open an attachment, reply to a message or send money just because someone says you need to act quickly. 

Scammers often try to make you feel worried or rushed so that you don't have time to think. (www.ofcom.org.uk) 

💭 THINK 

Does something seem unusual? 

Ask yourself: 

✅ CHECK 

Make sure it is genuine before you respond. 

If someone says they are from your bank, a company, a government organisation or even someone you know, check with them another way. 

Use a phone number or website you already know is genuine. Don't use the contact details or links in the suspicious message. (www.ofcom.org.uk) 

Helpful tips

1. What might a scam look like? 

You may sometimes hear the word phishing. This simply means someone is trying to trick you into giving them information, money or access to an account. 

The NCSC defines phishing as scams using emails, texts or calls to trick people, often by directing them to a fake website or trying to obtain personal information. (National Cyber Security Centre) 

Look out for messages that: 

Scammers can make messages look very convincing and may use information about you that is available online or through previous data breaches. So recognising the person or organisation's name does not always mean the message is genuine. (www.ofcom.org.uk) 

2. Common scams to be aware of 

📱 Fake text messages 

You might receive a message pretending to be from: 

It might say that you need to make a payment, confirm your details or click a link. 

Don't click the link. Go directly to the organisation's website or app if you need to check something. 

Suspicious text messages can be forwarded to 7726 for free. (www.ofcom.org.uk) 

📞 Fake phone calls 

Someone may call pretending to be from your bank, the police, a company or another organisation you trust. 

They might ask for personal information, passwords, PINs or bank details. 

You don't have to stay on the phone. 

Hang up and, if necessary, contact the organisation yourself using a number you know is genuine. (www.ofcom.org.uk) 

💬 WhatsApp and social media 

Scammers can also contact you through WhatsApp, Facebook, Instagram and other social media. 

For example, someone might pretend to be a friend or family member and say they have a new phone number and urgently need money. 

Don't send money straight away. 

Contact the person using a number or method you already know. (www.ofcom.org.uk) 

📧 Fake emails 

An email might look as though it has come from someone you know or an organisation you use. 

Be particularly careful if it asks you to: 

If you're unsure, don't click. Go directly to the organisation's website instead. 

3. Protecting yourself 

Use different passwords 

Try not to use the same password for everything. In particular, make sure your email password is strong and different from your other passwords. The National Crime Agency recommends using three random words as one approach to creating a strong password. (National Crime Agency) 

Use two-step verification 

Some accounts offer an extra security step when you log in, such as a code sent to your phone. 

This is sometimes called two-step verification or two-factor authentication. 

Turn it on when it is available. It gives your account extra protection if someone finds out your password. 

The NCSC recommends using this additional protection, particularly for important accounts such as email. (National Cyber Security Centre) 

Be careful about what you share 

Think carefully about sharing personal information online, including on social media. Information that seems harmless can sometimes be used by scammers to make their messages more convincing. (National Cyber Security Centre) 

4. What should I do if I receive a suspicious message? 

If you haven't responded: 

Don't panic. 

For suspicious SMS messages, forward the message to 7726 free of charge. For suspicious emails, GOV.UK recommends forwarding them to report@phishing.gov.uk. (GOV.UK) 

For WhatsApp and other messaging services, use the app's own block and report options. (www.ofcom.org.uk) 

5. What if I've already clicked something? 

Don't panic. You're not alone. 

If you've clicked a link, replied to a message or shared information, don't be embarrassed. 

Tell someone you trust and get advice. 

If you've shared your bank details or sent money, contact your bank straight away using the number on your bank card, your bank's official website or its app. (National Cyber Security Centre)