PanicStation.org
UK USA
uk Legal, police, prison & official contact urgent case number email • cannot verify sender • official looking legal email • fake court notice email • fake police notice email • fake prison message email • suspicious “case reference” email • “action required” case email • threatening legal email • unexpected legal notice email • asked to pay a fine by email • asked to confirm identity by email • link in “case file” email • attachment in legal email • sender address looks wrong • spoofed official email • verify using official website • pressure to act today email • “warrant” mentioned in email • “summons” mentioned in email

What to do if…
you receive an email saying your “case number” requires urgent action but you cannot verify the sender

Short answer

Treat it as suspicious until proven otherwise: do not click anything in the email. Verify the claim using independently found contact details, and report the message.

Do not do these things

  • Don’t click links, open attachments, or scan QR codes from the email “to view your case”.
  • Don’t reply with personal details (date of birth, address, National Insurance number, passport/driving licence images, bank details) “to confirm identity”.
  • Don’t call any phone number in the email or use any “reply-to” address it gives you.
  • Don’t pay a “fine”, “fee”, or “urgent settlement” through a link, gift cards, crypto, or bank transfer because the email pressured you.
  • Don’t forward the email to friends/colleagues “to ask what to do” if it contains sensitive data — take screenshots instead.
  • Don’t assume it’s real because it uses official logos, formal language, or a “case number”.

What to do now

  1. Pause and separate the claim from the message. Your only job right now is to avoid a costly mistake (clicking, paying, or sharing identity details).
  2. Do a quick harm check: did you click, open an attachment, or type anything in?
    • If yes, disconnect the device from the internet (turn off Wi-Fi/mobile data), then continue.
  3. Capture what you need without interacting further.
    • Screenshot the email (including the sender address, subject line, and any “case number”).
    • Leave the email where it is for now so you can report it — don’t keep re-opening attachments.
  4. Verify via an independent route (not from the email). Use contact details you find yourself via official channels:
    • If it claims to be police: call 101 (non-emergency) and ask whether the force has any legitimate contact/process matching what’s described. If you feel in immediate danger, call 999.
    • If it claims to be a court/tribunal matter: find the relevant court/tribunal contact details via official GOV.UK listings and ask how genuine notices are issued and whether they can confirm anything using your details (they may be limited in what they can confirm, and that’s OK).
    • If it claims prison/probation involvement: use official GOV.UK contact routes for prison/probation services and ask whether the email matches any legitimate communication method.
  5. Do a quick red-flag scan (one is enough).
    • urgent threats (arrest, prosecution, “warrant”, “summons”) unless you act “today”
    • demands for payment via link, bank transfer, gift cards, or crypto
    • pressure to keep it secret or not speak to anyone
    • mismatched sender domain, odd punctuation, or generic greeting
    • unexpected file types (especially ZIP or HTML attachments)
  6. Report the email as phishing.
  7. If you clicked a link, entered details, or downloaded anything, do fast containment.
    • Change the password for the account you used from a separate, trusted device (go to the real site/app directly, not via the email).
    • Turn on two-factor authentication (2FA) if available.
    • If you shared bank/card details or made a payment, contact your bank immediately using the number on your card or the bank’s official app/website.
  8. If you lost money or think an account/device was compromised, report it through the right channel.
    • England/Wales/Northern Ireland: report to the UK’s fraud reporting service (online or by phone).
    • Scotland: report to Police Scotland (typically via 101 unless it’s an emergency).
  9. Make a “safe verification note” and stop engaging with the email.
    Write down: the alleged organisation, the alleged case number, what it demanded, and any deadline it claimed. Use that note when you contact official channels.

What can wait

  • You do not need to work out whether the “case number” format looks right.
  • You do not need to reply “just to check”.
  • You do not need to send identity documents or proof of address today.
  • You do not need to decide right now whether to take legal advice — first, verify safely.

Important reassurance

Scammers routinely impersonate police, courts, and other official bodies because it triggers panic and quick compliance. Feeling shaken is a normal response to a message designed to rush you.

Scope note

This is first-steps guidance to prevent harm and verify safely. If it turns out there is a genuine legal matter, you may need tailored advice from the relevant official body or a qualified legal professional.

Important note

This guide is general information, not legal advice. Communication practices vary by organisation and situation. If you believe there is immediate risk to you or someone else, call emergency services.

Additional Resources
Support us