Online security for UK businesses

Cybercrime can affect any business. Whether it's a suspicious email, a fake website or a scam text message, taking a few simple precautions can help keep your business safe and secure.

Not a business? Go to our British Gas residential website for help.

In this article

Spotting suspicious emails

Recognising genuine British Gas business websites

Staying safe online

Protecting your British Gas online account

If you've already responded to a suspicious message

Spotting suspicious emails

Fraudsters often send emails or text messages pretending to be trusted organisations. These messages may ask you to click a link, share information or make a payment.

Before responding, take a moment to check:

We’ll always identify ourselves

We’ll address you by name and include your British Gas business customer account number when contacting you about your account, so you can be confident it's really us.

We’ll never ask for sensitive information

We’ll never ask for passwords, personal information or account updates by email. We also rarely send attachments, except with your welcome email.

Look out for trusted emails and links

Our emails only come from trusted British Gas and Centrica email addresses, and links will only take you to the British Gas business website or other trusted British Gas services.

Top tip: Hover over links before clicking. If you're unsure where a link leads, don't click it. Instead, go directly to the British Gas business website.

Genuine email vs suspicious email

Uses your name and British Gas business customer account number
Comes from a trusted British Gas or Centrica email address
Doesn't ask for passwords or sensitive information
Uses "Dear customer"
Comes from an unusual email sender
Asks for sensitive information

Example of a phishing email

Dear Customer,

We have noticed unusual activity on your British Gas Business account.
To avoid suspension, please confirm your payment details immediately.

Click the secure link below to verify your account:
https://britishgas-support.com/login

Failure to act within 24 hours may result in service interruption.

Kind regards,

British Gas Support Team

customer-service@britishgas.co.uk

Always check website links

Before clicking a link, hover over it to check where it leads. Most links in our emails will take you to the British Gas business website or another trusted British Gas service.

Some email providers may display a longer security or redirect link instead of the final website address. If you're unsure whether a link is genuine, don't click it.

Instead, open a new browser window and go directly to britishgas.co.uk/business to access your account or make a payment.

Received a suspicious email?

If you're in doubt over any email claiming to be from us, don't click any links. Please attach it to a new email and send it to: phishing@britishgas.co.uk

Then delete it from your inbox.

Recognising genuine British Gas business websites

Fraudsters sometimes create fake websites that look similar to British Gas business webpages. These websites are designed to trick people into entering passwords, payment details or other sensitive information.

Before signing in or making a payment, always check the website address carefully.

Genuine British Gas business website

https://www.britishgas.co.uk/business

Examples of suspicious website addresses

britishgas-support.co.uk
britishgas-login.net
british-gas-business.com

Fraudsters often use extra words, hyphens, unusual spellings or different domain endings such as.net or.com to make a website appear legitimate. If the address doesn't exactly match https://www.britishgas.co.uk/business - don't enter any information.

Top tip: If you're unsure whether a website is genuine, open a new browser window and type https://www.britishgas.co.uk/business directly into your browser rather than following a link from an email or text message.

Staying safe online

Choose strong passwords

Use unique passwords for each account and avoid reusing them across different websites. Strong passwords help keep your business information secure.

Keep your devices secure

Install software updates as soon as they're available and only use trusted websites when logging in or making payments.

Stay alert to suspicious emails

Only open attachments if you're confident they come from a legitimate sender, and take care before clicking links or sharing information.

Did you know?

43% of UK businesses identified a cyber security breach or attack in the last 12 months.1

Protecting your British Gas online account

Your online account gives you access to important information about your energy services.

How to keep your account protected
  • Keep your contact details up to date in your online account
  • Sign out when using shared devices
  • Report anything suspicious immediately

Check your security settings today and enjoy greater peace of mind every time you log in.

Log in to your online account

What to do if you've already responded to a suspicious message

If you think you've interacted with a suspicious email or message:

  • Contact your bank immediately
    If you've been tricked into providing your banking details, contact your bank immediately and let them know.
  • Report the incident
    If you've lost money, report it to your bank and to Action Fraud (for England, Wales and Northern Ireland) or Police Scotland (for Scotland).
  • Change your passwords
    If you've shared them, especially if you use the same password elsewhere.
  • Contact your IT team
    If the message was received on a work device.
  • Let us know
    By forwarding the email to phishing@britishgas.co.uk

Need more support?

Find independent advice and report suspected fraud using the organisations below.

Citizens Advice

Action Fraud

Business energy fraud

Back to My online account

Additional information

  1. Cyber security breaches survey 2025 - GOV.UK