If you believe your account has been accessed without authorisation, speed matters. The faster you act, the more limited the potential damage.
Immediate steps
- Change your password immediately from a device you trust, using a network you control.
- Revoke active sessions if your account portal provides this option — this logs out any other active logins.
- Disable or rotate 2FA if you believe your authentication device has also been compromised, then re-enrol on a clean device.
- Contact Credicorp without delay using the official number or secure message facility on our website. Explain what you have observed and ask us to flag your account for additional scrutiny.
Review what may have been seen or changed
Log into your account as soon as it is secured and check recent activity: logins, drawdown requests, repayment schedule changes, and contact detail updates. Make a note of anything unfamiliar and share those details with our support team.
Notify relevant parties
If sensitive company information has been exposed, you may need to notify your accountant, other financial providers, and — depending on the nature of the data — the ICO under your own GDPR obligations as a data controller. Also report the incident to Action Fraud.
We lend only to UK limited companies and LLPs, and the loan is to the company with no director personal guarantee. As business finance outside the consumer-credit regime, it is not covered by the Financial Ombudsman Service or FSCS.
See also: How do I keep my Credicorp business account secure?, How do I report a suspicious message claiming to be Credicorp?.