CRIME & SAFETY

Suspicious text message? Forward it to 7726 for free

GOV.UK’s guidance says that anyone unsure whether a text is genuine should not reply to it or give out private details such as bank details or passwords.

A smartphone screen showing the time and status icons
Photo: Skitterphoto / Wikimedia Commons, CC0

Most phone providers take part in a scheme that lets customers report a suspicious text message for free by forwarding it to 7726, the National Cyber Security Centre (NCSC) says.

When a text is forwarded to 7726, the provider can look into where it came from and arrange to block or ban the sender if it is found to be malicious. The NCSC says the purpose of a scam text is often to get the reader to click a link, which leads to a website that criminals use to download viruses to a computer or to steal passwords and other personal information.

The NCSC’s steps begin the same way on every phone: note the number that sent the message, then press and hold the message bubble (on Android, from inside the conversation). On an iPhone or iPad, tap More, select the message, tap the arrow at the bottom right of the screen, then enter 7726 and send. On an Android phone, tap the three vertical dots at the top right, tap Forward, then enter 7726 and send.

If 7726 does not work, the phone provider can explain how to report a text. A screenshot or screen recording of the message can also be sent to [email protected], the NCSC says.

Signs of pressure

Scammers try to gain trust quickly and to pressure people into acting without thinking, the NCSC says. It lists these tell-tale signs:

  • Authority: a message claiming to be from someone official, such as a bank, doctor, solicitor or government department
  • Urgency: a limited time to respond, such as “within 24 hours” or “immediately”
  • Emotion: language meant to cause panic, fear, hope or curiosity
  • Scarcity: an offer of something in short supply, such as concert tickets, money or a cure for medical conditions
  • Current events: a message that uses news stories, big events or times of year such as tax reporting

For a message that raises doubts, the NCSC says to contact the organisation directly, using the details on its official website and not the numbers or address in the message. The Financial Conduct Authority (FCA) says a genuine bank or business will not mind waiting if someone wants time to think.

If money has gone

GOV.UK says people in England or Wales who think they have lost money or been hacked because of an online scam or fraud can contact Report Fraud online or on 0300 123 2040. The NCSC’s page names Northern Ireland as well, and says that in Scotland the report goes to Police Scotland on 101.

The NCSC’s wording is conditional: a block depends on the sender being “found to be malicious”, and its page does not say how long an investigation takes. The page was last reviewed on 5 September 2022.