Reported financial losses have escalated from £1.2 million in 2024/25 to £6.3 million in 2025/26. Concurrently, reports of account hacking incidents have risen by 34 per cent, establishing it as the most frequently reported form of cyber crime across the UK. The scope of account takeovers extends beyond email and social media to include gaming, streaming, travel, and online delivery accounts.
During Cybersecurity Awareness Month, Report Fraud has initiated a campaign to educate the public on safeguarding their online presence. Key recommendations include adopting passkeys where available and implementing robust account security measures. Account hacking involves criminals gaining unauthorised access to online accounts to perpetrate further fraud. Compromised accounts can be used to impersonate the owner, target friends and family, solicit money, sell counterfeit tickets, or engage in other fraudulent activities. A prevalent tactic involves using hacked accounts to impersonate trusted contacts.
The impact of a single compromised account can be far-reaching, potentially leading to loss of access to vital accounts, exposure of personal information, and the distress of identity theft. Friends, family, and colleagues may also fall victim if they trust messages originating from a compromised account. However, simple steps can significantly improve online security and deter criminals.
To protect yourself online, it is advised to use passkeys whenever possible, as they offer superior security and ease of use compared to traditional passwords. Where passkeys are not an option, employ strong, unique passwords managed by a password manager and enable two-step verification. Reviewing privacy settings on social media to restrict content visibility to intended audiences is also crucial. Exercise caution when sharing personal information online, as details like birthdays, locations, family relationships, or pet names can be exploited by fraudsters. Always verify unexpected messages by contacting the sender through an alternative method, such as a phone call or text message, before responding.
Individuals who suspect their account has been hacked are encouraged to report the incident to Report Fraud and seek guidance on account recovery and security.
“"As part of Cybersecurity Awareness Month, Report Fraud is hosting a webinar on protecting your email and social media accounts from hackers and fraudsters. The session will cover the latest threats, practical security measures, and the simple steps you can take to keep your accounts safe from compromise. Whether you’re looking to strengthen your own online security or help protect friends and family, this webinar will provide expert guidance and actionable advice."
Registration for the webinar is available via the provided link.
