Phishing
A form of social engineering in which a fraudster sends deceptive communications (typically email) purporting to be from a legitimate organisation to trick the recipient into revealing personal information, passwords, or financial details. Phishing may constitute offences under the Fraud Act 2006 (fraud by false representation) and the Computer Misuse Act 1990.
Independent editorial summary — not the official statute text. Read the official version on legislation.gov.uk.
Phishing is carried out through misleading websites, emails, phone numbers, phone calls or text messages that try to trick the recipient into giving out private information such as bank details or passwords, or into downloading attachments or clicking malicious links. Official guidance warns against giving out such information or replying to messages unless the recipient is sure they are genuine.
The UK's National Cyber Security Centre (NCSC) operates a dedicated reporting route: suspicious emails can be forwarded to report@phishing.gov.uk for investigation, and suspicious text messages can be forwarded free of charge to 7726 so they can be reported to the recipient's mobile provider. Anyone who believes they have lost money or been hacked as a result of an online scam is directed to Report Fraud (Action Fraud) if they are in England or Wales, or to Police Scotland if they are in Scotland.
Related terms
Official sources
This explanation is drawn from the official sources below; every substantive statement is verified against them. For advice on a specific matter, see our find help page.