Prefer listening? Have this guide read aloud.
Someone called me
Think of an unexpected call like someone knocking at your front door. If a stranger said they were from your bank and asked to come inside or take your money, you'd want to check who they were first.
A phone call is no different. Someone might sound friendly and professional, or even know your name, but that doesn't prove they're from the organisation they claim to represent.
You're in control. You don't have to answer their questions or stay on the phone. It's okay to hang up and contact the organisation yourself using a number you know is genuine.
What to do
- You are in control. You can end the call at any time. You do not owe the caller an explanation.
- Do not share passwords, one-time security codes or remote-access permissions.
- If you need to check a claim, call the organisation using a number from its official website, app or a statement you already have.
If you already did something
Don't panic, but act promptly if any of these things have happened.
- You shared a password: Change it promptly through the genuine website or app. If you used it for other accounts, change those passwords too.
- You shared banking details or authorised a payment: Contact your bank immediately through its official app or a number you know is genuine.
- You allowed someone to access your device: Follow Someone accessed my device for immediate steps.
Tell someone you trust. You don't have to work through this alone.
Was this guide helpful?
We welcome suggestions, corrections and ideas for making this guide clearer.
Send feedback about this guideThis opens your email app. Please avoid including passwords, bank details or other sensitive information.