Crypto fraud victims in the UK have one designated first reporting destination: Action Fraud (actionfraud.police.uk), operated by the City of London Police. Reporting there creates a Crime Reference Number, feeds intelligence to the National Fraud Intelligence Bureau, and is the required first step before banks and insurers will process related claims. What reporting to Action Fraud does not do is directly recover funds — individual recovery is rare, and that expectation needs to be set before the report is filed. Bitok Arena's review of the UK crypto fraud reporting framework covers the complete reporting sequence, realistic outcome expectations, and the APP reimbursement route that applies when bank transfers were involved.
Action Fraud collects cryptocurrency fraud reports and passes them to the NFIB for intelligence analysis that enables enforcement actions — prosecutions, asset seizures, platform takedowns. Individual report outcomes are typically a Crime Reference Number and notification status. Most UK crypto fraud victims do not recover funds through Action Fraud reporting alone. The reports matter because they build the intelligence picture that makes the enforcement actions possible. Report with accurate expectations: contribution to enforcement, not.
The information to prepare before filing a report significantly affects how useful the report is to NFIB intelligence analysis. Dates and amounts of each fraudulent transaction; cryptocurrency types involved; the platform, application, or contact method used by the fraudsters; all communications received (screenshots of WhatsApp messages, emails, social media contacts); website URLs or social media profiles used; blockchain transaction IDs for any transactions identifiable from wallet or exchange history; and the contact details used by or with the fraudsters. The more specific and documented the report, the more useful it is for identifying patterns and building enforcement cases.
The Complete UK Crypto Fraud Reporting Sequence
The optimal reporting sequence for UK cryptocurrency fraud depends on whether fiat bank transfers were part of the fraud. If fiat money was transferred from a UK bank account to a cryptocurrency exchange or wallet as part of the scam, the bank is the first contact — before Action Fraud — because time-sensitive bank reporting enables potential transfer recalls that the NFIB cannot facilitate after the fact. UK banks are required under the Payment Systems Regulator's mandatory reimbursement regime (effective October 2024) to consider reimbursement when customers are misled into making bank transfers under fraudulent misrepresentation — this is the Authorized Push Payment (APP) fraud framework.
Bitok Arena reviewed the UK cryptocurrency fraud reporting framework and documented the correct reporting sequence.
Step 1 (if bank transfer involved) — Contact your bank immediately; request account hold and recall; banks have trained tellers to identify Bitcoin ATM scam patterns.
Step 2 — Action Fraud — actionfraud.police.uk (24/7 online) or 0300 123 2040; collect Crime Reference Number; required for insurance claims and bank complaint escalation.
Step 3 — FCA report — For unauthorized investment firms: register.fca.org.uk; FCA can add the entity to the Warning List, alerting other potential victims.
Step 4 — CIFAS protective marker — If personal data was obtained: cifas.org.uk; alerts member institutions to apply extra verification to new credit applications.
The APP fraud reimbursement framework changed significantly under the Payment Systems Regulator's mandatory scheme effective October 2024. Unlike the previous voluntary Lending Standards Board code, the PSR scheme places mandatory reimbursement obligations on both the sending and receiving payment service providers in most APP fraud cases, with a maximum reimbursement of £415,000 per claim. Consumer protection requires that the victim did not act with gross negligence. The scheme covers UK Faster Payments and CHAPS transfers — not cryptocurrency transfers themselves, but the fiat bank transfers that funded cryptocurrency exchanges or wallets as part of the fraud. Report to the bank as the first step if any part of the fraud involved a UK bank account transfer.
What Action Fraud Actually Does With Reports
Action Fraud reports are processed by the National Fraud Intelligence Bureau, which applies intelligence analysis tools to identify patterns across the full report dataset. When multiple reports identify the same fraudulent platform, phone number, bank account, or individual, the NFIB builds a case file that can be referred to regional police forces or specialist units (the Metropolitan Police Cyber Crime Unit, the South East ROCU) for active investigation. Reports that do not form part of an identifiable pattern may receive no active investigation but are retained in the dataset for future pattern matching as more reports arrive.
Bitok Arena reviewed the APP fraud mandatory reimbursement regime for UK crypto fraud victims involving bank transfers.
Scope — Applies to GBP bank transfers made under fraudulent misrepresentation; covers Faster Payments and CHAPS; maximum reimbursement £85,000 per claim.
Requirement — Victim must have taken reasonable caution (not gross negligence); both sending and receiving banks share liability under the PSR mandatory scheme (effective October 2024).
Coverage exclusion — Does not cover cryptocurrency directly stolen from wallets (not via bank transfer); only applies to GBP transfers made under deception.
The Crime Reference Number from Action Fraud serves practical purposes beyond enforcement: it is required for insurance claims that cover fraud (some home insurance policies include fraud cover); it is documentation that a crime was reported, which may be required by employers in some regulated industries who require disclosure; it is the reference for any follow-up contact with Action Fraud or the police; and it may be required by your bank when making an APP fraud reimbursement claim.
Prevention as the Priority
The consistent finding from UK crypto fraud victim data is that prevention is dramatically more effective than the reporting and recovery process. The FCA's Financial Services Register provides the single most effective pre-investment prevention tool: before engaging with any company offering cryptocurrency investment services or returns, checking whether the firm is FCA-authorized (register.fca.org.uk) takes less than two minutes and would prevent the vast majority of UK cryptocurrency investment fraud cases. Unauthorized firms not on the FCA register — which describes every UK crypto investment fraud operation — should trigger immediate withdrawal from the interaction.
Action Fraud collects UK crypto fraud reports and routes them to the NFIB for intelligence analysis — not direct fund recovery. Individual reports rarely produce individual outcomes; they build the intelligence picture that enables eventual law enforcement action. Report because it's correct and because it contributes. Not because it reliably recovers what was lost.
For UK Bitcoin holders who engage in regular on-chain activity, the fraud prevention framework applies directly: any communication claiming to represent a Bitcoin competition, exchange, or service that requests seed phrases, wallet access codes, or additional fees to release funds or prizes is fraud. No legitimate on-chain competition requires seed phrases or wallet access from participants. Transactions from self-custody wallets to competition entry addresses are the only activity a legitimate competition requires. Maintaining that understanding prevents the need for Action Fraud reports from on-chain competition contexts.
Bitok Arena's review of UK cryptocurrency fraud reporting identifies Action Fraud as the correct primary reporting channel, with the bank as the first contact if fiat transfers were involved (for APP fraud reimbursement consideration under the PSR mandatory scheme). Individual report outcomes rarely produce direct recovery; collective reporting patterns enable enforcement actions that occasionally produce asset seizures and victim restitution. The FCA Financial Services Register check before engaging with any cryptocurrency investment firm is the single most effective UK crypto fraud prevention tool available — 90 seconds that prevents losses that Action Fraud reporting cannot recover.