Disconnect the affected device
Turn off Wi-Fi or unplug the network cable. This can interrupt an attacker and reduce further data loss.
+44 (0)1743 668200Follow these steps in order to contain the incident, protect your money and accounts, preserve useful evidence and begin a safe recovery.
Prepared and reviewed by IT Life-Raft
UK-based IT support and cyber recovery guidance. Last reviewed September 2026.
Turn off Wi-Fi or unplug the network cable. This can interrupt an attacker and reduce further data loss.
From another trusted phone or computer, change the password for your main email account first, then banking, shopping and social accounts.
Add app-based or passkey protection wherever possible. Review recovery email addresses, phone numbers and active sessions.
Tell the bank immediately about unfamiliar payments or exposed card details. In the UK, report fraud to Action Fraud as appropriate.
Run a full malware scan, remove unknown programs and browser extensions, apply operating-system updates and restart.
Check email forwarding rules, account activity and backups. Continue monitoring accounts and credit reports for unexpected changes.
The Been Hacked Fix UK toolkit provides a straightforward recovery process, with UK-based support options when you need extra help.
⬇️ Download ToolkitUse the NCSC response and recovery guide for independent advice. If money has been lost or cyber crime has occurred, report it through the police-led Report Fraud service. Organisations should also assess whether the incident must be reported to the ICO.
Recover now and secure your devices for the future.