2 min read
What's happening
Email is the master key to many accounts: whoever controls it can trigger password resets and read your alerts. If your business email is compromised, an attacker could try to reset your finance login or quietly watch for opportunities. Treat it as urgent.
What to do
First, regain control of the email and secure it with its own strong password and 2FA. Then, on your Credit Corp account, change your password, confirm 2FA (ideally an authenticator app, not email codes), review sessions, and check no reset was triggered. Report concerns via reporting suspected fraud.
Related reading

Setting up an authenticator app for two-factor authentication
Two-factor authentication adds a second step to sign-in: after your password you enter a six-digit code from…
Read →
Changing your sign-in email address
Your sign-in email is also where resets and alerts go, so keeping it current matters. Changing it is simple,…
Read →
Managing trusted devices and active sessions
Your account keeps a list of the devices and browsers currently signed in. Reviewing it — and removing…
Read →
Reporting suspected fraud to Credit Corp
If you spot something wrong — a scam pretending to be us, a strange login, an unexpected change — report it…
Read →Funding for UK limited companies
Credit Corp lends to your company, not to you personally — short-term working capital with no personal guarantee. See what your business could access.