You have received a suspicious email — what to do
Do not click anything or reply. Do not delete it either — forward it to us first, then delete. If you have already clicked or entered a password, call us immediately; speed matters far more than embarrassment.
If something about an email feels wrong, it probably is. Here is what to do, in order.
If you have not clicked anything
- Do not click links, open attachments, or reply — not even to tell them to stop.
- Forward it to us before you delete it. We need the original to see where it came from.
- Then delete it.
If you have already clicked or entered a password
Call us now. Not email — call. The window between a password being taken and being used is often measured in minutes, and in that window we can lock the account and end active sessions before anything happens.
Nobody is going to be told off. The only thing that makes this worse is the hour or two people spend deciding whether to mention it.
The ones that catch careful people
- A change of bank details on an invoice from a real supplier you deal with regularly
- A message that appears to come from a director, asking for something urgent and unusual, often while they are travelling
- A login page that looks right, reached from a link rather than typed in yourself
- A file-sharing notification for a document you were half expecting
The habit that prevents most of it
Any request to move money or change bank details gets verified by phone, on a number you already had — never a number in the email. It is slower. It is also the single control that stops the expensive version of this.
Last checked . If these steps no longer match what you see, tell us and we will fix the article.