Digital Safety & Online Security

Digital Safety & Online Security

The internet is woven into every part of modern life — banking, shopping, socialising, working, and public services. But with that convenience comes risk: fraud, identity theft, hacking, phishing, and online abuse. This guide explains how to stay safe online, how to recognise common threats, and exactly where to report them — with official department names, helplines, and direct website links.

---

Action Fraud — The UK’s National Fraud & Cyber Crime Reporting Centre

Action Fraud is the UK’s national reporting centre for fraud and cyber crime, run by the City of London Police. When you report to Action Fraud, your case is assessed by the National Fraud Intelligence Bureau (NFIB), which analyses the data and passes viable cases to the appropriate police force for investigation. Reporting fraud is not just about getting your money back — it helps build a national picture of criminal activity, leading to takedowns of scam networks that protect everyone.

When to Report to Action Fraud

• You have been tricked into transferring money to a fraudster (authorised push payment fraud)
• Your identity has been stolen and used to open accounts or take out credit
• You have been a victim of online shopping fraud (goods not received, counterfeit items)
• You have been targeted by a romance fraud or investment scam
• Your business has been hit by mandate fraud, CEO fraud, or invoice redirection
• You have received a fraudulent email, text, or phone call and want to report it
• You suspect a business or individual is running a scam (even if you have not lost money)

---

National Cyber Security Centre (NCSC) — The UK’s Cyber Defence Authority

The National Cyber Security Centre (NCSC), a part of GCHQ, is the UK’s national authority on cyber security. It protects government, businesses, critical infrastructure, and the public from cyber threats. For individuals, the NCSC provides practical, free tools to spot and report phishing, secure your devices and accounts, and recover from cyber incidents.

NCSC Reporting Tools — Free & Takes One Minute

Threat Type	How to Report	What Happens
Suspicious Emails	Forward to ✉️ report@phishing.gov.uk	NCSC’s automated system analyses the email and removes associated malicious websites. Over 300 million reports received since 2020; 315,000+ scam URLs taken down.
Scam Text Messages (SMS)	Forward to 7726 (spells SPAM)	Your mobile network provider (EE, Vodafone, Three, O2, etc.) investigates and blocks the fraudulent number. Free on all UK networks.
Scam Websites	🌐 Report a Scam Website	NCSC reviews and works to take down malicious URLs. Used by thousands of people daily.
Scam Phone Calls	Report to Action Fraud 0300 123 2040	NFIB analyses call data to identify and disrupt scam call centres. Also register with the Telephone Preference Service (TPS) at 🌐 tpsonline.org.uk.
Scam Adverts Online	🌐 ASA Complaint Form	Advertising Standards Authority (ASA) investigates misleading adverts. 📞 ASA: 020 7492 2222.

---

Information Commissioner’s Office (ICO) — Your Data Protection Rights

The Information Commissioner’s Office (ICO) is the UK’s independent regulator for data protection and freedom of information. If an organisation has misused your personal data, refused to provide information you have a right to see, or you want to complain about spam calls, texts, or emails, the ICO is your first point of contact. Under UK GDPR and the Data Protection Act 2018, you have the right to access, correct, and delete personal data held about you.

---

Protect Your Accounts

• Use strong, unique passwords — at least 12 characters, with a mix of letters, numbers, and symbols. Use a password manager (such as Bitwarden, 1Password, or the one built into your browser) to generate and store them.
• Turn on two-factor authentication (2FA): Enable 2FA on your email, banking, social media, and any account holding personal or financial data. Using an authenticator app is more secure than SMS-based 2FA.
• Update your devices and apps: Install security updates as soon as they are available. Criminals exploit known vulnerabilities in outdated software. Turn on automatic updates where possible.
• Back up your data: Use the 3-2-1 rule — at least 3 copies of important data, on 2 different types of media, with 1 copy stored offsite (cloud or external drive kept elsewhere).