What Cyber Conduct provides

Cyber Conduct provides general cybersecurity information and practical guidance. It is intended to help you understand common digital-safety situations and decide what to do next.

What Cyber Conduct is not

Cyber Conduct is not:

• a bank
• law enforcement
• a forensic investigation service
• emergency services
• professional legal advice
• professional financial advice
• a guaranteed security service

General guidance

Guidance on Cyber Conduct is general in nature and may not account for every detail of your specific situation. For anything involving money, legal risk, or an emergency, contact the relevant institution or authority directly, in addition to using this site.

We aim for accuracy and will correct known errors, but we can't guarantee that every piece of guidance is current or complete for every situation.

Scam Radar

Scam Radar is a community-reporting feature intended to help people identify possible scam patterns and suspicious activity. Reports are submitted by members of the public and are not automatically proof that a person, organisation, account, website or contact detail is fraudulent.

Cyber Conduct may use automated checks and moderation processes to determine whether a report is suitable for publication. A published report has not necessarily been independently verified in every detail.

Responsible reporting

If you submit a Scam Radar report, you must use the feature for its intended purpose: sharing useful information about suspected scams or suspicious activity.

Do not submit:

• passwords, PINs, one-time passwords or recovery codes
• banking credentials or other authentication secrets
• identity documents or unnecessary personal information
• private residential addresses or other sensitive private information
• threats, harassment or material intended to target another person
• false reports intended to damage someone's reputation
• malicious code, abusive material or content unrelated to scam reporting

Public reports

Scam Radar reports that are published become visible to website visitors. You should therefore assume that anything you submit as part of a report may be made public.

Cyber Conduct may edit for safety or presentation, reject, unpublish or remove a report where appropriate. This can include reports containing sensitive personal information, abusive material, threats, misleading claims, or information that does not serve the purpose of Scam Radar.

Indicators and organisations

Scam Radar may display information such as partially masked phone numbers, email addresses, websites or other indicators when they are relevant to a report.

Do not use Scam Radar to accuse a private individual of criminal or fraudulent behaviour without a legitimate cybersecurity reporting purpose. Where a report mentions an organisation, the report should describe the suspicious activity rather than present an unverified accusation as established fact.

Official reporting

Scam Radar does not replace reporting a crime, fraud, financial loss, account compromise or other incident to the relevant bank, service provider, platform, authority or emergency service.

If you are dealing with an active incident, use Cyber Conduct's guidance to help you take practical steps, but contact the appropriate organisation directly when formal action or investigation is required.

Changes

Cyber Conduct may change its features, guidance and these terms as the platform develops. Where changes materially affect how a feature is used, the relevant information will be updated on the website.