Report
One address. One template.
Forward the message itself to [email protected], ideally as an attachment so the headers survive.
What to include
| Sender address | The full from address, exactly as shown |
| Date and time | When it arrived, with timezone |
| Domain check | The verdict from creditcorporation.co.uk/check/, if you ran it |
| What it claimed | Lender, group company, brand or other |
| What it asked for | Password, passcode, payment, chat app, other |
| Links | Paste the link targets without clicking them |
If you acted on the message before doubting it — clicked, replied or paid — also email [email protected] so the account team can check for activity straight away.
Reports are read by people, not a ticket robot. Lookalike domains get checked and, where appropriate, reported for takedown; payment-diversion attempts are flagged to the account teams. You will not be asked for passwords or passcodes in response to a report — if a reply asks for them, treat the reply itself as suspect.
™