Scam Watch

How can you recognize Phishing email — UK NCSC SERS reporting standard?

TLDR

Phishing emails impersonate HSBC, Lloyds, HMRC, NHS, Amazon UK with brand accurate styling and urgent CTA ('click here to verify or account suspended'). UK NCSC's Suspicious Email Reporting Service (SERS) at report@phishing.gov.uk...

How it works

Phishing emails impersonate HSBC, Lloyds, HMRC, NHS, Amazon UK with brand accurate styling and urgent CTA ('click here to verify or account suspended'). UK NCSC's Suspicious Email Reporting Service (SERS) at report@phishing.gov.uk...

Red flags

  • Urgent pressure to click, pay, or share codes immediately.
  • A link or sender that does not match the official organization.
  • Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.

What to do

  1. 1Phishing emails impersonate HSBC, Lloyds, HMRC, NHS, Amazon UK with brand accurate styling and urgent CTA ('click here to verify or account suspended').
  2. 2UK NCSC's Suspicious Email Reporting Service (SERS) at report@phishing.gov.uk processed 33M+ reports since 2020, taken down 354,000+ scam URLs.
  3. 3WHAT TO DO: forward email as attachment to report@phishing.gov.uk, forward SMS to 7726, do not click.

Source

NCSC-UK

Source reviewed by Mythos Forensic Team

https://www.ncsc.gov.uk/guidance/suspicious-email-actions

FAQ

Is Phishing email — UK NCSC SERS reporting standard a real scam pattern?

Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.

What are the first warning signs?

Urgent pressure to click, pay, or share codes immediately.; A link or sender that does not match the official organization.; Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.

What should I do first?

Phishing emails impersonate HSBC, Lloyds, HMRC, NHS, Amazon UK with brand accurate styling and urgent CTA ('click here to verify or account suspended').; UK NCSC's Suspicious Email Reporting Service (SERS) at report@phishing.gov.uk processed 33M+ reports since 2020, taken down 354,000+ scam URLs.; WHAT TO DO: forward email as attachment to report@phishing.gov.uk, forward SMS to 7726, do not click.

Can LegalAudit check my case?

Yes. Start a free chat and paste the message, link, sender, or payment details for triage.