Don’t get hooked: new warning urges the public to continue reporting phishy emails and texts with 41 million already reported

As of April 2025, the total number of phishing frauds reported to the Suspicious Email Reporting Service (SERS) reached over 41 million since its launch in April 2020. This has resulted in 217,000 frauds being removed from across 393,395 websites pages by the National Cyber Security Centre.

Insight revealed by Action Fraud shows the top industries impersonated in reported phishing emails were streaming services, tech, and telecommunication companies, with some posing as various UK government schemes. 

Action Fraud, the national fraud and cyber-crime reporting service, launched a phishing awareness campaign to urge the public to beware of phishing frauds and report all emails and messages if they look suspicious. 

Spam calls and suspicious text messages can be reported too. By using 7726, a free service offered by mobile network providers, customers can forward suspicious text messages, which helps the removal of fraud websites and allows networks to block users sending fraud text messages. Between April 2020 and April 2025, more than 27,000 frauds were removed because of being reported using 7726.

Detective Inspector Duncan Wynn, Head of Central Fraud Unit at Thames Valley Police, said:

“Fraudsters continue to exploit manipulative tactics to gain access to your personal information and money. 

I urge you to become part of the solution by ensuring you forward spam calls and texts messages to 7726 and forwarding suspicious emails to report@phishing.gov.uk 

Every fraud starts through a route of contact which is covered in our Fraud Protection toolkit

Knowledge and collective action are our biggest asset when rising the challenge of fraud.

I encourage you all to start having conversations about fraud, especially with any vulnerable family members or those in your community.

Together, we will continue to rise to the challenge of fraud.”

Superintendent Amanda Wolf, Head of the National Fraud Intelligence Bureau at the City of London Police, said: 

“We know it can be difficult to spot fake messages or tell if a call is genuine. Criminals can change tactics fast and use the technology available to constantly create genuine looking emails and messages or facilitate calls that feel authentic - all designed to trick us and try and steal personal and financial information. 

“Every phishing email reported helps us gain a better understanding of the tactics being used and enables us to tackle it head on by identifying malicious URLs trending in phishing emails and texts - they can be taken down and disrupted, preventing further activity. The more reports received, the more people we can protect, preventing them from becoming victims. 

“Do not get caught out, Stop, Think Fraud, and make sure you report suspicious-looking emails or messages if you receive them. You can forward emails to report@phishing.gov.uk, or forward spam text messages to 7726.”

Sarah Lyons, NCSC Deputy Director for Economy and Society Resilience, said:

“Since 2020, over 41 million phishing attempts have been reported to the Suspicious Email Reporting Service — a powerful sign that the public is staying alert to online threats, helping to protect themselves and others.

“But cyber criminals are not giving up - they are constantly finding new ways to trick people into clicking malicious links, sharing personal information, or handing over money.

“That is why it is more important than ever to stay alert. You will find clear, practical advice on how to spot and report frauds - and how to stay secure online - on the NCSC website.”

What is phishing?

'Phishing', ‘quishing’ or ‘smishing’ is when criminals use fake emails, text messages, QR codes, or phone calls to trick victims. 

The goal of a phishing message is to encourage the victim to click a malicious link, or scan a fraudulent QR code, which usually leads them to a genuine-looking website, designed to make victims part way with their financial and/or personal information. Criminals will use well-known brands or organisations the victim already has a connection with, like a bank or tradesperson, to make fake emails seem genuine and more convincing. 

How can you protect yourself?

If you have received an email that does not feel right, STOP! 

If you have received a text message that does not feel right, STOP! 

If you have received a call that does not feel right, STOP! 

For more advice on how to protect yourself from fraud: https://stopthinkfraud.campaign.gov.uk/ 

If you have lost money or provided financial information because of a phishing fraud, notify your bank immediately and report it to Action Fraud at actionfraud.police.uk or by calling 0300 123 2040. In Scotland, call Police Scotland on 101.