Phishing emails impersonating financial services firms are common. Fraudsters mimic branding, tone, and urgency to trick recipients into clicking malicious links or surrendering credentials. Knowing the tell-tale signs protects your business.
Common warning signs
- The sender address does not end in our official domain — look at the full address, not just the display name.
- The email creates artificial urgency: threats to suspend your account, demands for immediate payment, or very short deadlines.
- Links in the email lead to a domain that resembles ours but is slightly different — for example, an extra hyphen, a misspelling, or a different top-level domain.
- Attachments you were not expecting, particularly compressed files or macros-enabled documents.
- Poor grammar or inconsistent formatting, though sophisticated attacks may look polished.
What to do if you receive a suspicious email
Do not click any links or download any attachments. Do not reply to the email or call any number given within it. If you want to check whether a message is genuine, navigate directly to our website by typing the address into your browser, or call us on the number listed there. You can report the suspicious email to us and to Action Fraud (actionfraud.police.uk).
Hovering over links before clicking
On desktop, hovering your cursor over a link shows the actual destination URL in your browser's status bar. On mobile, press and hold the link to preview the address. If the URL looks unfamiliar or does not match our official domain, do not proceed.
We lend only to UK limited companies and LLPs, and the loan is to the company with no director personal guarantee. As business finance outside the consumer-credit regime, it is not covered by the Financial Ombudsman Service or FSCS.
See also: How do I report a suspicious message claiming to be Credicorp?, What will Credicorp never ask me for?.