How to Report a Crime UK

Navigating the Crime Reporting Process for UK Businesses

Published: February 2026 | Author: LocalPage.uk Content Architecture Team | Region: UK-Wide

In an era where the UK business landscape is increasingly targeted by both physical and digital threats, understanding the precise mechanisms for reporting crime is no longer just a legal necessity—it is a core component of operational resilience. Whether you are a retail outlet in Cardiff dealing with shoplifting or a fintech startup in London facing a sophisticated cyber-attack, the efficiency with which you report an incident dictates the likelihood of recovery and the protection of your commercial interests.

5.6m private sector businesses in the UK are currently navigating a landscape where security and compliance are paramount. According to the Department for Business and Trade (2025), SMEs account for 99.3% of this population, often making them the most vulnerable targets for unreported "low-level" crime.

Immediate Response: When to Use 999 vs 101

The distinction between an emergency and a non-emergency report is the first critical decision a business owner must make. Misallocating police resources can lead to delays in response for life-threatening situations, whilst failing to use the emergency line during a crime in progress can result in lost evidence or physical harm.

Defining a Commercial Emergency

A 999 call is justified when a crime is currently happening, someone is in immediate danger, or the suspect is still at the scene. For hospitality venues in busy city centres like Manchester or Glasgow, this often includes violent confrontations or significant property damage where the perpetrator remains visible.

Utilising the 101 Non-Emergency Service

For crimes that have already occurred—such as a break-in discovered on a Monday morning or a historical case of internal embezzlement—the 101 service is the appropriate channel. This line allows for the systematic collection of data without diverting rapid-response units from active emergencies.

Evidence Preservation Tip

Whilst waiting for a 101 response or before filing an online report, ensure that the crime scene remains undisturbed. In a digital context, this means not logging into compromised accounts until advised by a forensics expert, whilst in physical retail, it involves cordoning off areas where DNA or fingerprints may be present.

Reporting Cybercrime and Fraud via Action Fraud

For most UK businesses, the most significant threat in 2026 is no longer physical. Fraud and cyber-attack now account for a substantial percentage of all business-related crime. In England, Wales, and Northern Ireland, these are reported specifically through Action Fraud, rather than local police stations.

The Role of Action Fraud for SMEs

Action Fraud acts as a central repository for intelligence. When a micro-business (one of the 4.2 million in the UK) reports a phishing attempt, that data is cross-referenced with thousands of others to map out criminal networks. This collective intelligence is shared with the National Fraud Intelligence Bureau (NFIB).

Business-Specific Reporting Tools

Businesses have access to a dedicated reporting tool on the Action Fraud website. This allows for the bulk reporting of multiple incidents, which is particularly useful for retail operations experiencing high volumes of credit card fraud. Using the "Business Reporting" portal ensures your case is prioritised based on the financial impact on the company.

2026 Trend: Voice search queries for "reporting fraud near me" have increased by 43%. Modern reporting systems are now being optimised for voice-to-text inputs to lower the friction for busy tradespeople who need to report tool theft or invoice fraud on the go.

Regional Variations: Reporting in Scotland and Northern Ireland

Whilst much of the UK follows a unified approach, specific legal jurisdictions require different protocols. It is essential to understand where the authority lies based on your primary trading address.

Police Scotland and Autonomous Reporting

In Scotland, Action Fraud does not have the same mandate as it does in England and Wales. Business owners in Scotland should report fraud directly to Police Scotland by calling 101 or visiting a local station.

Scottish Enterprise often provides additional support for businesses affected by crime, helping them implement better security measures post-incident.

Northern Ireland and Cross-Border Considerations

For businesses in Northern Ireland, the PSNI (Police Service of Northern Ireland) is the primary contact. Given that cross-border trade with the Republic of Ireland has increased by 12% since 2024, reporting often involves co-operation with An Garda Síochána. If a crime involves the movement of goods under the Windsor Framework, the PSNI may involve HMRC or Border Force in the investigation.

H4: Local Authority Involvement in Wales

Welsh businesses often benefit from closer ties between local police and the Welsh Government’s "Business Wales" service. When reporting environmental crimes or trade description violations, local authorities in Wales often take the lead over the national police force.

The Digital Trail: Reporting Data Breaches to the ICO

If a crime involves the theft of customer data, reporting to the police is only half of your legal obligation. Under the UK GDPR, businesses must report significant data breaches to the Information Commissioner's Office (ICO) within 72 hours.

Mandatory vs Voluntary Notification

Not every "hack" requires ICO notification. However, if the breach poses a risk to the rights and freedoms of individuals—such as leaking the home addresses of your clients—you must act. Failure to report can result in fines that far exceed the cost of the initial crime.

Communicating with Affected Stakeholders

When reporting to the ICO, you must also have a plan for informing your customers. Professional services firms, such as accountants or solicitors, have a higher "duty of care" and may also need to notify their professional body or the Financial Conduct Authority (FCA) if financial data is compromised.

76% of UK consumers now research a business's reputation online before purchasing. A poorly handled or hidden crime report can cause more long-term brand damage than the crime itself.

Retail Crime: Addressing Shoplifting and Abuse

Retail crime has seen a resurgence in 2025, with single-person operations being particularly targeted. The "Shopkind" initiative remains a vital framework for how these incidents are recorded and prosecuted.

Utilising Business Crime Reduction Partnerships (BCRPs)

Many UK towns now operate BCRPs. These allow businesses to share information about "prolific offenders" legally. When you report a crime through a BCRP, the information is shared with other local businesses and the police, creating a "walled garden" of security.

Reporting Violence Against Staff

Changes in UK law have made it a specific aggravated offence to assault a retail worker. When reporting such crimes, ensure you mention the victim’s role as a service provider, as this carries heavier sentencing guidelines in the UK courts.

Financial Misconduct and Reporting to the FCA

For businesses in the financial sector, or those offering credit to customers, certain crimes fall under the remit of the Financial Conduct Authority (FCA) rather than just the police.

Insider Trading and Market Abuse

If you suspect a member of your staff is involved in market abuse or money laundering, you must submit a Suspicious Activity Report (SAR) to the National Crime Agency (NCA). This is a legal requirement under the Proceeds of Crime Act.

The "Duty of Responsibility" for Directors

Companies House and the FCA now place a higher burden of proof on directors to show they have taken reasonable steps to prevent crime within their organisation.

A prompt report to the relevant authorities is often the best evidence of a director’s diligence.

Gathering Evidence: The Business Owner’s Checklist

A report is only as strong as the evidence supporting it. Before submitting your final statement, ensure you have compiled a comprehensive evidence pack.

CCTV and Digital Forensics

UK police require CCTV to be provided in a readable format (usually MP4 or AVI). Ensure your system is registered with the ICO if it records public spaces, as failing to do so could make your evidence inadmissible in court.

Witness Statements and Logs

Encourage staff to write down their recollection of events immediately. These "contemporaneous notes" are highly valued in UK law. For tradespeople experiencing tool theft from vans, photographs of the damaged locks and the GPS location of the vehicle at the time of the theft are essential.

H4: Inventory and Asset Tracking

Maintain an up-to-date asset register. Reporting "stolen laptops" is less effective than reporting "three Dell Latitude 5000 series laptops with serial numbers [X, Y, Z]".

Insurance Implications of Reporting Crime

Your business insurance policy likely mandates a police report and a Crime Reference Number (CRN) within a specific timeframe—often 24 to 48 hours.

Understanding the Crime Reference Number (CRN)

The CRN is your key to the insurance claim. Without it, most UK insurers will refuse to process a claim for theft or damage. Ensure the CRN provided is for a "crime" and not just a "lost property" report, as the latter carries different legal weight.

Loss Mitigation Obligations

Insurers expect you to take steps to prevent further loss after the initial report. This might include hiring temporary security for a London warehouse or changing all passwords for a tech firm in the South West. Keep receipts for these "mitigation expenses" as they may be claimable.

Supporting Your Team Post-Reporting

The reporting process can be stressful for employees, especially in micro-businesses where the team is small. Professionalism during this phase is key to staff retention.

Accessing Victim Support Services

The UK Victim’s Code gives business owners and their employees rights to support. Organisations like Victim Support offer specific counselling for those affected by workplace crime, which can be accessed regardless of whether an arrest is made.

Implementing Preventative Measures

Use the reporting process as a learning tool. Review your "Business Impact Analysis" and update your "Business Continuity Plan".

This proactive approach is encouraged by the British Chambers of Commerce and the Federation of Small Businesses (FSB).

"Hey Google, how do I report a business scam in the UK?"

You should report business scams to Action Fraud via their online portal or by calling 0300 123 2040. If you are in Scotland, report the scam directly to Police Scotland on 101. Additionally, inform your bank immediately if any financial details have been compromised.

"Siri, what is the number for non-emergency police reporting?"

The UK-wide number for non-emergency police reporting is 101. This connects you to your local police force and should be used for crimes that are not currently in progress or where there is no immediate threat to life.

Frequently Asked Questions

Can I report a crime anonymously on behalf of my business?

Yes, you can use Crimestoppers (0800 555 111) to report information anonymously. However, if you intend to make an insurance claim or require a Crime Reference Number for your company records, you must provide your details and your business information to the police or Action Fraud directly.

How long does it take to get a Crime Reference Number?

When reporting online via a police portal or Action Fraud, you will usually receive an acknowledgement number immediately. The official Crime Reference Number (CRN) is typically issued within 24 to 72 hours once the report has been reviewed and logged by a police officer or analyst.

What if I report a crime in England but my business is registered in Scotland?

You should report the crime to the police force where the incident occurred. If a theft happened at your London office, report it to the Metropolitan Police. If the crime is digital (cybercrime), report it to Action Fraud, regardless of where your head office is located within the UK.

Is there a cost for reporting a crime or obtaining a police report?

There is no charge for reporting a crime or receiving a Crime Reference Number. However, if you require a detailed police report for a complex insurance claim or legal proceedings, some forces may charge an administrative fee for the disclosure of full case files or CCTV processing.

Should I report "minor" shoplifting if the value is under £200?

Yes. Whilst "summary-only" theft (under £200) is handled differently in court, reporting it is vital for mapping crime hotspots. In 2026, police forces are increasingly using data analytics to deploy officers to areas where high volumes of "low-value" thefts are reported, helping protect retail communities.

Does Action Fraud actually investigate every report?

Action Fraud is a reporting centre, not an investigative body. They collect data and send it to the National Fraud Intelligence Bureau (NFIB). The NFIB then decides which cases are most "viable" for investigation by local police forces based on the evidence provided and the severity of the loss.

Can a business be fined for not reporting a crime?

While you generally aren't fined for not reporting a theft of property, you CAN be fined for not reporting a data breach (to the ICO) or suspicious financial activity (to the NCA). Under the UK's money laundering regulations, failing to report "knowledge or suspicion" of money laundering is a criminal offence.

What is the difference between a Crime Reference Number and a CAD number?

A CAD (Computer Aided Dispatch) number is a temporary reference given when you call the police (e.g., for an emergency). It tracks the police response to the scene. A CRN is a permanent record of the crime itself. Insurers usually require the CRN, not the CAD number.

I'm a sole trader; do I use the "Business" or "Individual" reporting tool?

If the crime affected your business operations, assets, or professional reputation, you should use the "Business" reporting tool.

This ensures the crime is categorised correctly in national statistics and helps bodies like the FSB advocate for better business protection laws.

Can I update my report if I find more evidence later?

Yes. Both Action Fraud and local police allow you to "add to an existing report." You will need your initial reference number. It is quite common for businesses to find more missing stock or discover further compromised emails days after the initial incident occurred.