What this is about
Five drills, as with a fire alarm: something has gone wrong — what do you do first? Calmly practised now, it comes to mind faster when it counts.
What you practise
Know the first steps in an emergency before you need them, and have the important numbers on paper.
The interactive exercise needs JavaScript. Without it, you can read through all messages with their explanations here.
Drill 1: On the phone
You've just read a one-time passcode out to a caller. After hanging up, it feels wrong.
What do you do first?
- ✓ Call your bank straight away — on the number on your card, or via 159 — and have your card and online banking blocked. – Exactly. With bank details, every minute counts: block first, everything else afterwards.
- ✗ Wait and see whether any money goes. – By then it's usually too late. With the code, the caller can move money now — act straight away.
- ✗ Call the caller back and ask him not to do anything. – The caller is the scammer. Call your bank — on the number on your card.
Passed on bank details, a card number or a one-time passcode: call your bank straight away — on the number on your card, or via 159 — and have your card or online banking blocked.
Drill 2: At the computer
You've let a so-called technician access your computer. He's still connected and moving the mouse pointer.
What do you do first?
- ✓ Disconnect the computer from the internet at once — Wi-Fi off or cable out — and switch it off. – Exactly. Without a connection, the stranger can't do anything more. Then change your important passwords from a different device.
- ✗ Quickly change your online banking password on the same computer. – Not on this device: the stranger may be watching every keystroke. Disconnect first, then change passwords from another device.
- ✗ Ask the technician to log off. – That's out of your hands. Cut the connection yourself — Wi-Fi off, cable out.
Allowed remote access: first disconnect the device from the internet and switch it off. Then change passwords from another device, tell your bank, and have the device checked before you use it for banking again.
Drill 3: On a website
You entered your password on a page that looked like your email provider. Only afterwards did you notice the strange address.
What do you do first?
- ✓ Change the password at once — on the real site, opened yourself — and everywhere else you use it. – Exactly. A new password makes the stolen one worthless. Afterwards, set up a passkey or two-step verification where you can.
- ✗ Delete the email with the link — that's it dealt with. – The scammers still have the password. Change it — and report the email to report@phishing.gov.uk.
Entered a password: change it at once, everywhere you use it, and your security questions too. Then set up a passkey or two-step verification where you can.
Drill 4: Just tapped
You tapped the link in a parcel text. A page opened — but you didn't enter anything.
What do you do?
- ✓ Stay calm: close the page, install the latest update and watch out for further odd messages. – Exactly. A tap on its own is usually harmless as long as you didn't enter or install anything. Up-to-date software closes known holes.
- ✗ Close all your accounts straight away. – There's no need. You didn't enter anything — installing updates and staying alert is enough.
Only clicked or tapped, entered nothing: no reason to panic. Close the page, install updates, let the built-in antivirus check your computer — and forward the scam text to 7726, then delete it.
Drill 5: Money gone
An hour ago you transferred £129 to a shop that turns out to be fake.
What do you do first?
- ✓ Call your bank straight away — sometimes a payment can still be recalled. – Exactly. The sooner the bank knows, the better the chance. Then report it to Report Fraud and keep all messages.
- ✗ Tell nobody — it's embarrassing. – That only helps the scammers. It happens to careful people too. Your bank, the police and your family can help — and telling protects others.
Sent money: contact your bank straight away, then report it — in England, Wales and Northern Ireland to Report Fraud, in Scotland to Police Scotland on 101. Keep statements and messages. And talk about it: shame only helps the scammers.
Your emergency card
Fill it in, print it and keep it next to the phone or with your bank documents. If a stranger has had access to your computer, you shouldn't use it — then paper helps. Nothing you type here is saved.
Emergency card
159 — connects me safely to my bank (most UK banks)
999 — police emergency · 101 — police, not urgent
Report Fraud — reportfraud.police.uk · 0300 123 2040
Emergency plan: practice-makes-safe.org/en/emergency
Keep the plan within reach
- The lifebuoy at the top of every page leads straight to the emergency plan.
- Print the plan once and keep it with the card.
- Save the plan as a bookmark on your phone and computer.
Sources (checked 1 October 2026)
the drills follow the steps of the emergency plan; numbers and sources are listed there (checked 27 September 2026). Also: Report Fraud, Courier fraud · Stop Scams UK, 159.
All companies, people, addresses and numbers in the exercises are invented. Any resemblance to real companies or people would be purely coincidental and unintended.