Visit our new website
Our new website is coming soon - you can view some of the new features by clicking the link. Check back for updates on careers, firearms and explosives licensing, crime prevention advice and more.
Visit our new website
Search Site

Leave page quickly

DDoS attack

This section contains further advice if you have been a victim of distributed denial of service attack. This is where the computer system is overloaded with traffic from multiple sources causing the system to crash/shut down.

DDoS Attack

What to do now?


  • If your business suffers a DDoS attack, call your Internet Service Provider (ISP), or hosting provider if you do not host your own web server.
  • Keep a timeline of events and save server, web and email logs, any packet capture, network graphs or reports.


This should be reported directly to Action Fraud via their online reporting tool or via the telephone: 0300 123 2040. Action Fraud are the National Fraud and Cyber Recording Centre.

If you are suffering a live cyber threat that is in progress, call Action Fraud, do not use the online reporting tool.

You should only report direct to the police if the crime is in progress and the suspect is known to you locally. In an emergency (click here to see examples) please call 999 or the alternative emergency number 112; for the deaf, hard of hearing or speech impaired call 18000 to use Next Generation Text Service (replaces TextRelay); or use emergencySMS. Otherwise please call 101 (the national police non-emergency number), or .

Contact your bank where appropriate, to make them aware of the incident so that they can take appropriate steps to protect your accounts.

What happens next?

Action Fraud will record the details of the crime and pass to the National Fraud Intelligence Bureau (NFIB) to conduct initial checks. Based on their findings they will allocate the investigation onto the most appropriate police force to deal with the crime. This may be based on where the suspect has been located or where the NFIB feel the crime best sits. Action Fraud will send you a letter notifying you of your crime reference number and which police force has been allocated your crime. You can also track your crime on the Action Fraud website.

Live cyber reports are sent to the relevant police agency within the UK in order to get the best response. This can be your local police force or the National Cyber Crime Unit (NCCU), which is part of the National Crime Agency.

The police may also make a referral to Victim Support for you, here is more Victim and witness information.

What else can I do?

  • In technical terms, DDoS attacks can come in many forms, and like many aspects of the internet require in-depth knowledge to fully understand and guard against them.
  • If you have reason to believe that you are a potential target of a DDoS attack, we recommend that you locate and consult a DDoS protection specialist who is equipped with this knowledge and the accompanying tools to protect your business. He / she should be able to recommend and implement a technical solution to mitigate the threat to your business.