How to recognise genuine Credit Corp communications

What we will and will not do

Fraudsters impersonate lenders because it works — a message that looks official can push a busy director into acting fast. Knowing our real behaviour makes the fakes obvious:

• We will never ask for your full password, PIN or a full 2FA setup code.
• We will never phone or text to demand an urgent payment to a new bank account.
• We will never pressure you to move money to keep it 'safe'.
• Our emails come only from addresses ending @credicorp.co.uk.

Check before you act

When a message asks you to do something — click a link, confirm details, make a payment — stop and verify through a channel you already trust. Do not use the phone number or link in the message itself. Instead, type credicorp.co.uk into your browser yourself and sign in, or call the number on a statement you already have. Genuine requests will still be there when you arrive; scams fall apart the moment you go around them.

Common impersonation tactics

Watch for urgency ('act within the hour or your facility is suspended'), a slightly-wrong sender address (credicorp-support.com rather than credicorp.co.uk), a link whose visible text and real destination differ, and requests to 'verify' by logging in through a supplied link. Any one of these is reason enough to stop. See spotting phishing and smishing for worked examples.

Report anything suspicious

If you receive a message pretending to be from us, report it — see reporting suspected fraud. Reporting helps us shut down the scam faster for every other borrower.