Report

One address. One template.

Forward the message itself to [email protected], ideally as an attachment so the headers survive.

What to include

Sender addressThe full from address, exactly as shown
Date and timeWhen it arrived, with timezone
Domain checkThe verdict from creditcorporation.co.uk/check/, if you ran it
What it claimedLender, group company, brand or other
What it asked forPassword, passcode, payment, chat app, other
LinksPaste the link targets without clicking them

If you acted on the message before doubting it — clicked, replied or paid — also email [email protected] so the account team can check for activity straight away.


Reports are read by people, not a ticket robot. Lookalike domains get checked and, where appropriate, reported for takedown; payment-diversion attempts are flagged to the account teams. You will not be asked for passwords or passcodes in response to a report — if a reply asks for them, treat the reply itself as suspect.