Cyber attacks: what to do if banks, phones or the internet go down

Why this matters

The National Risk Register 2025 includes scenarios for cyber attacks on, among other things, a UK retail bank, telecommunications systems and electricity infrastructure. Its foreword notes that the CrowdStrike IT outage revealed the widespread impacts of technology failure on services essential to daily life. Outages like this are usually temporary, but they can catch people without a backup.

Before: simple preparation

Money

• Keep some cash in a mix of coins and notes, as well as cards, in case electronic payments or cash machines are disrupted. Be Ready says the amount depends on your household’s needs.

Offline copies

• Write important phone numbers on paper: family, neighbours, your GP, utilities, your bank and your insurer.
• Keep printed copies of important documents and a list of regular medication and doses.
• Download or print maps. See offline maps.
• Back up important data, including photos and files, and protect the backup as carefully as your accounts. Know how to restore it.
• Keep a battery or wind-up FM radio for updates.

Accounts and devices

Be Ready and the NCSC advise securing your email account first. Use a passkey where available. Otherwise use strong, unique passwords with 2-step verification, and consider a password manager. Install updates and turn on automatic updates.

During: if cards, phones or the internet fail

Card payments and banking

• Use cash for essentials.
• Get updates from your bank’s official website or app, or from news on the radio. Do not use phone numbers or links from unexpected messages.

Phones and internet

Be Ready’s advice for phone and broadband outages:

• If your landline is not working, try your mobile. If your mobile network is down but Wi-Fi works, you may be able to use Wi-Fi Calling.
• If you cannot reach 999 or 112, try both a mobile and a landline. Emergency calls from mobiles connect to any available mobile network.
• If you still cannot get through and it is safe, go to your nearest police station, fire station, ambulance station or hospital, or ask emergency responders directly.
• If you feel able to, check on people in your community who may need help, such as neighbours who live alone.

See also comms when phones are down.

After: scams that follow incidents

The NCSC warns that criminals often exploit current news stories and big events to make scams seem relevant. The NCSC’s tell-tale signs are:

• Authority: claiming to be your bank, a government department or another official body.
• Urgency: a short deadline or threats of fines.
• Emotion: trying to make you panic, fearful, hopeful or curious.
• Scarcity: offering something in short supply.
• Current events: a message tied to the news.

The NCSC’s advice is to stop, break contact and consider the language the message uses. Contact the organisation directly, using details you find yourself rather than any in the message.

How to report

Report Fraud is where people in England, Wales and Northern Ireland report cyber crime and fraud. The old Action Fraud web address now redirects to it. In Scotland, report to Police Scotland on 101.