Answering alone is usually limited
Speaking or hearing a recording does not by itself give a caller access to a bank account or phone, although it confirms that contact reached someone.
Technology, platforms and channels
What should I do after a suspicious phone call?
If you are deciding what to do after a scam call, hang up and do not call back using a number the caller supplied. Your next step depends on what happened: merely answering is different from sharing information or a code, installing software, moving money or giving someone control of an account or device.
Page S-003Guidance pageReviewed 29 August 2026
Key Guidance
End the call and do not call back using a number the caller supplied. Write down what happened, then verify the claim through an official route. If you disclosed access, installed software or paid, protect the affected account, device or money at once before reporting the call.
Start with Key Guidance for the short answer. Then read the sections that match what happened and what you need to do.
Understand the issue
Why this matters to you
A suspicious call is not one fixed event. The effect changes with the action taken during and after it.
Information changes later credibility
Names, account details or personal circumstances can support more convincing follow-up contact or identity checks.
Codes and approvals can authorise access
A one-time code, push approval or password may let another person enter or change an account.
Software or payment creates urgent risk
Remote-access tools, transfers, card payments or cryptocurrency can require immediate technical or financial intervention.
Consequences and movement
What may happen next
Choose the branch that matches the furthest action you took. If several apply, start with money, account access and device control.
I only answered or spoke
End contact, do not call the displayed number back and independently check any claim that still concerns you.
I shared information or a code
List exactly what you disclosed, secure the relevant accounts and tell the genuine provider that a caller may try to impersonate you.
I installed software or allowed access
Disconnect the affected device from the internet and use another trusted device to protect important accounts and seek technical help.
I paid or moved money
Contact the bank, card provider, exchange or other payment service at once through a trusted route and ask what can be stopped or recovered.
Practical response
What you should do
Do not spend time proving who called before addressing a direct effect. Protect what changed, then preserve and report the evidence.
- End the controlled conversationHang up. Do not press buttons, transfer to another number or remain on the line while checking the story.
- Use a number you selectCall the organisation through its official website, genuine app, card or statement. Caller ID and a matching department name are not enough.
- Record the factsKeep the displayed number, time, claimed identity, request, links, software, payment details and anything you disclosed.
- Secure accounts and devicesChange compromised sign-in details, remove unfamiliar sessions, enable two-step verification and get device help where access was granted.
- Contact the payment routeIf money moved or card details were used, tell the provider at once and ask about blocking, recall, reimbursement or dispute routes.
- Report the callSend the number to 7726 where supported by your mobile provider and report actual fraud through the national route for your location.
Look more closely
Your response should match what happened during the call
A missed call, a conversation, shared information, remote access and a payment create different risks. Start with the most significant action that happened and protect the affected account, device, information or transaction accordingly.
The call reaches the phone.
A trusted role, number or situation is claimed.
The caller directs checks, codes, software or contact.
Value, sign-in details or device control changes hands.
Independent action protects and records what changed.
Selected history
Historical cases and lasting lessons
Independent call-back and 7726 reporting
The UK communications regulator advises using a checked number rather than one supplied by the caller and allows suspected scam-call numbers to be forwarded to 7726.
Lasting lesson: The displayed number is evidence of the contact, not proof of the caller's identity.
Impersonation and remote-access calls
Suspicious callers commonly combine urgency with requests for information, security steps, software or payment.
Lasting lesson: The requested action reveals the risk more reliably than the professional tone or familiar caller ID.
Transferable understanding
Patterns over time
The call keeps verification inside the story
The caller may offer to transfer you, provide a reference or tell you exactly what to search for.
Small disclosures create later confidence
Information that seems harmless can be repeated in a follow-up call to make it feel connected and official.
Urgency reduces independent checking
A threat, expiring opportunity or active-fraud claim is used to keep you from ending the call.
The channel can change
A phone call may lead to text, email, remote-access software, a bank transfer or a private-messaging account.
Plain-language answers
Common questions
Can someone hack my phone because I answered?
Answering an ordinary call does not by itself grant access. Risk increases if you followed links, installed software, shared sign-in details or approved access.
Should I call the number back?
Not to verify the claim. Find the organisation's number independently. A displayed or returned number can be spoofed, redirected or controlled by the caller.
What if I said yes or spoke my name?
Do not assume that one word authorises a transaction. Monitor relevant accounts and focus on any concrete information, approval or payment you provided.
Should I block the number?
Yes after preserving useful details, but blocking one number does not prevent the same people from using another number or channel.
Match the response to what changed
End the call, verify independently and act first on any exposed money, account or device. Reporting can follow once the immediate risk is contained.
Scamology Insights
The furthest stage determines the first action
These learning resources can help you record who called, what identity they claimed, what they asked for and whether any details, access or money were shared. Links are intentionally withheld in this production version.
Continue understanding
Explore related guidance
Evidence and currency