What should I do if I have transferred money in response to a phishing email?

If you believe money has been transferred or payment details provided as a result of a phishing email, the following steps should be taken as quickly as possible:

1. Contact your bank immediately. Explain that you believe you have been the victim of a scam and ask them to stop or reverse the payment if possible. Banks have dedicated fraud teams available around the clock.

2. Report the incident to Action Fraud (the UK's national reporting centre for fraud and cybercrime) or by calling 0300 123 2040.

3. Report the incident to the University Cyber Security Team via the Report a Breach form on the IT Services portal. Even if no University systems were directly involved, the team can advise and ensure no wider compromise has occurred.

4. Contact the MySurrey Hive team via Surrey Support for further advice. The University understands that falling victim to fraud is distressing, and the team can signpost appropriate support.

These scams are sophisticated and deliberately target students, particularly around key periods such as the start of term, accommodation sign-up, and results days. There is no need to feel embarrassed — reporting promptly is the most important thing.