First, call your bank on the number printed on your card or on its official website, and tell them what happened. Speed matters most when money has just moved.
Not sure what to do first? What to do next covers a QR code, a phone call, a fake “verify you are human” check and a link.
Then report it to the official body in your country. Every link below goes to a government, police or national agency, except where the note says otherwise. UtilForge does not take reports itself.
October is Cybersecurity Awareness Month
UtilForge is a registered 2026 Champion of the campaign.
The campaign is led by the United States Cybersecurity and Infrastructure Security Agency (The Cybersecurity and Infrastructure Security Agency), America’s cyber defence agency, and the National Cybersecurity Alliance, a non-profit. In Europe, the European Union Agency for Cybersecurity runs European Cybersecurity Month. The Cybersecurity and Infrastructure Security Agency asks everyone to take four core steps, and each one below links to the Cybersecurity and Infrastructure Security Agency’s own guidance.
- Avoid and report phishing scams. How to spot a message that is trying to trick you, and what to do with it. UtilForge’s free Before You Pay goes through a payment request with you before money moves.
- Use strong passwords. The Cybersecurity and Infrastructure Security Agency’s Secure Our World guide for individuals and families.
- Use multifactor authentication and a password manager. A second check, such as a code on your phone, on top of your password, for your bank, email and social media.
- Update software. Updates fix security holes, so turn on automatic updates.
North America
- United StatesFederal Bureau of Investigation Internet Crime Complaint CenterOnline fraud, scams and cybercrime. Internet Crime Complaint Center never contacts people to ask for money.
- United States · organisationsReport to the Cybersecurity and Infrastructure Security AgencyCyber incidents, malware and vulnerabilities. (888) 282-0870, any time.
- CanadaCanadian Anti-Fraud CentreFraud and cybercrime, as a victim or a witness, with the Royal Canadian Mounted Police. Report online at reportcyberandfraud.canada.ca or call 1-888-495-8501, weekdays 10:00–16:45 Eastern.
South and Central America
- BrazilPolícia Federal: Comunicação de CrimesFederal crimes. For most fraud, the page directs you to your state’s Polícia Civil and its online police station, the Delegacia Eletrônica.
- Mexico · Mexico CityPolicía Cibernética, Secretaría de Seguridad Ciudadana de la Ciudad de MéxicoOnline fraud and internet crime. 55 5242 5100 ext. 5086, 24 hours.
United Kingdom and Ireland
- England, Wales and Northern IrelandReport FraudFraud, cybercrime, and suspicious messages, calls and websites. Report Fraud replaced Action Fraud in December 2025. 0300 123 2040.
- ScotlandPolice ScotlandReport fraud on 101 without delay.
- IrelandAn Garda SíochánaReport to your local Garda station, and to the platform where the scam happened.
Europe
- France17CyberHelp with any cyber attack or online fraud, from the police, the gendarmerie and Cybermalveillance.gouv.fr. Call 17 or 112. Formal online complaints go through THÉSÉE.
- GermanyOnlinewache list (Federal Ministry of Justice)Links to the online police station of each of the 16 states, where you can file a complaint.
- NetherlandsPolitieOnline report of internet fraud. 0900-8844.
- Spainthe Instituto Nacional de Ciberseguridad 017Free, confidential help with fraud, phishing and identity theft. Call 017, daily 08:00–23:00. For a formal complaint, go to a Policía Nacional station; 091 is its emergency number.
- Other European Union countriesEuropol: report cybercrime onlineA list of each European Union country’s national reporting portal.
Africa
- South AfricaSouth African Police ServiceOpen a fraud case at a police station. Crime Stop tip-offs: 08600 10111.
- South Africa · alsoYour bank, then the National Financial Ombud SchemeCall the bank first, on the number printed on your card. If its answer does not settle the matter, the Ombud takes complaints free of charge: 0860 800 900.
- South Africa · alsoSouthern African Fraud Prevention ServiceProtective Registration for people whose identity has been misused: 011 867 2234.
- South Africa · alsoInformation RegulatorFor misuse of personal information. Toll-free 0800 017 160.
- South Africa · alsoFinancial Sector Conduct AuthorityTo check whether an investment or insurance provider is licensed, or to report one that is not. Toll-free 0800 20 37 22.
- South Africa · alsoNational Cybersecurity HubSouth Africa’s national computer security incident response team.
- South Africa · alsoYima, by the Southern African Fraud Prevention ServiceA not-for-profit that records scams to warn others. It asks you to report to the police as well.
- KenyaNational Computer and Cybercrimes Coordination CommitteeCyber incidents, including anonymously. +254 716 148 341.
- GhanaCyber Security AuthorityFraud, phishing, impersonation and online blackmail. Call or text 292.
- NigeriaNigeria Police Force National Cybercrime CentreCybercrime and online fraud.
Middle East
Where a body’s own page could not be read, the entry says so. If money has gone, call your bank first, on the number printed on your card. A general emergency number is given where there is one; it is for emergencies, not the place to report a loss after the event. Where a mental-health support line is confirmed, it is named; where none is, the nearest hospital emergency department is the route for someone in distress.
- Saudi ArabiaCommunications, Space and Technology CommissionForward a scam text message free to 330330. For a loss, report to the Public Security through the “Kollona Amn” app or the Absher platform (absher.sa). Emergency 911. Support: the Ministry of Health’s psychological consultation line, 920 033 360.
- United Arab EmiratesGovernment portal: report a cybercrimeLists every route: the Ministry of Interior eCrime service, Dubai Police eCrime (ecrime.ae), Abu Dhabi Police Aman (800 2626) and the Federal Public Prosecution “My Safe Society” app. Emergency 999. Support: the National Mental Support Line, 800 4673.
- QatarMinistry of Interior, Economic and Cyber Crimes Combating DepartmentCall 2347 444 or the hotline 6681 5757, email cccc@moi.gov.qa, or report through the Metrash app. Emergency 999. Support: the National Mental Health Helpline, 16000, then option 4.
- KuwaitMinistry of Interior, Cyber Crime Combating DepartmentCall or message on WhatsApp 9728 3939, handled in confidence. Emergency 112.
- BahrainMinistry of Interior, General Directorate of Anti-Corruption and Economic and Electronic SecurityHotline 992, the Directorate’s anti-corruption line, which also takes fraud reports; online at acees.gov.bh. Emergency 999.
- OmanRoyal Oman PoliceHotline 8007 7444, listed by the police for online extortion and used, in their public notices, for online fraud; otherwise the nearest police station. Emergency 9999.
- JordanPublic Security Directorate, Cybercrime UnitCall 911, the unified emergency number, or go to the Criminal Investigation Department at the nearest police station, which is the route the Directorate gives.
- EgyptMinistry of Interior, General Administration for Combating Information Technology CrimesHotline 108, any time (reported by the state newspaper Al-Ahram; not yet read on the Ministry’s own page). General police emergency 122. Support: the Ministry of Health and Population’s mental-health line, 16328.
- IsraelIsrael Police online complaintFile a fraud complaint online, after signing in with the national identification system. Emergency 100. Support: ERAN, Emotional First Aid, 1201, a volunteer charity, any time.
- Israel · alsoIsrael National Cyber DirectorateReport a cyber incident, such as a hacked account or a phishing attack, on 119, any time, for first professional help. It does not replace a police complaint.
- IraqMinistry of Interior, Cyber Crimes DirectorateReport at the nearest police station, or call the unified emergency number 911. We have not yet confirmed a dedicated fraud number on an official Iraqi page.
Asia
- IndiaNational Cyber Crime Reporting PortalFinancial fraud and other cybercrime. Helpline 1930.
- SingaporeScamShieldReport a scam and get help. Helpline 1799, any time. Formal reports go to the Singapore Police Force.
- Hong KongAnti-Deception Coordination CentreScam alerts and enquiries. Anti-Scam Helpline 18222. Online reports go through the Police e-Report Centre.
- BangladeshBangladesh PoliceReport online crime at your local police station or to the Criminal Investigation Department’s Cyber Police Centre. Women can call Police Cyber Support for Women on 01320 000 888, a service for women only. Emergency 999.
- MaldivesMaldives Police Service, Anti-Scam CentreScam hotline 125. Support: the Ministry of Health’s mental-health line, 1677, any time.
- PhilippinesCybercrime Investigation and Coordinating CenterOnline, text, investment and romance scams. Hotline 1326, any time.
Australia and New Zealand
- AustraliaScamwatchScam contacts, scam websites and lost money, run by the National Anti-Scam Centre.
- Australia · police reportReportCyberCybercrime, including identity theft and fraud. 1300 CYBER1 (1300 292 371).
- New ZealandNational Cyber Security CentreOnline issues for individuals and small businesses. 0800 114 115, weekdays 07:00–19:00.
For organisations
- The Cybersecurity and Infrastructure Security Agency · organisations of all sizesAdditional steps for organisationsUse logging on your systems, back up data, encrypt data, have an incident response plan and use it, and be prepared for system disruptions.
- The Cybersecurity and Infrastructure Security Agency · for information technology teamsKnown Exploited Vulnerabilities Catalogthe Cybersecurity and Infrastructure Security Agency’s list of software flaws that attackers are already using, so your team can fix those first.
- The Cybersecurity and Infrastructure Security Agency · no-cost servicesCyber Hygiene ServicesFree scanning of internet-facing systems and web applications, aimed at critical infrastructure and other organisations. The Cybersecurity and Infrastructure Security Agency’s page explains who can receive them.
Your country is not listed?
Call your bank, then your local police. Keep the messages, numbers, links and payment details, because they are your evidence. Cancel and Keep Proof writes the message to your card provider and keeps a dated record.
Government services change, so if a link is wrong or your country is missing, write to support@utilforge.org.
UtilForge is a registered 2026 Champion of Cybersecurity Awareness Month, a programme of the National Cybersecurity Alliance, and takes part in European Cybersecurity Month independently.