NCSC (National Cyber Security Centre) – UK

The National Cyber Security Centre (NCSC) is part of GCHQ and serves as the UK's technical authority for cybersecurity. While it primarily supports government and critical national infrastructure, it runs several consumer-facing services directly relevant to online fraud. The Suspicious Email Reporting Service (SERS) allows any UK internet user to forward phishing emails to [email protected]. The NCSC analyses submitted emails and, where possible, takes down fraudulent websites linked in them; in its first year the service took down tens of thousands of phishing sites.

The NCSC also operates the Active Cyber Defence programme, which includes Protective DNS (blocking malicious domains before they can reach users on participating networks), DMARC monitoring to prevent email spoofing of UK government domains, and the Web Check service for public sector organisations. Its Cyber Aware campaign provides practical, accessible security advice to consumers and small businesses on protecting accounts, using strong passwords, and recognising phishing.

Consumers should forward suspicious emails to [email protected] without clicking any links in the email. For scam text messages, forward them to 7726 (the UK's SMS reporting shortcode operated in coordination with mobile networks). The NCSC website at ncsc.gov.uk publishes guidance on specific threats, incident response guides, and free tools such as the Exercise in a Box for organisations testing their cyber resilience.