Client protection

Security &
Fraud Awareness

Last updated: 19 August 2026

Protecting yourself from financial crime

Fraudsters may impersonate financial firms, advisers, banks, regulators or other trusted organisations. They may use convincing websites, email addresses, telephone numbers or documents and may possess personal information about their intended victim. Please remain cautious whenever you receive an unexpected request concerning money, investments, account access or personal information.

Verify unexpected communications

Do not rely solely on the name, telephone number, email address or website displayed in a message. If a communication claims to be from Whitehall and you are uncertain whether it is genuine, stop the conversation and contact us independently at office@whitehallwm.com using an address or contact method you already know to be authentic. Do not use contact details supplied within the suspicious communication.

Requests we will not make unexpectedly

Whitehall will not contact you unexpectedly by email, text message or telephone and ask you to disclose a complete password, PIN or one-time security code; transfer money to a so-called “safe account”; install remote-access software; circumvent an agreed verification process; or keep a payment or investment instruction secret. Any such request should be treated as suspicious.

Payment and bank-detail changes

Criminals may intercept genuine correspondence or impersonate a trusted contact in order to substitute fraudulent payment instructions. Before acting on any new or amended bank details, independently verify the instruction through a previously established contact method. Do not rely upon a reply to the message that introduced the change.

Protect your information and devices

Use a strong, unique password for each important account and enable multi-factor authentication wherever it is available. Keep operating systems, browsers and security software up to date. Do not share access credentials, approve an unexpected login request or allow an unknown person to control your device remotely. Take particular care when using shared devices or public Wi-Fi and sign out when you have finished.

Common warning signs

Warning signs may include unexpected contact; pressure to act immediately; instructions to maintain secrecy; promises of guaranteed or unusually high returns; requests for unusual payment methods; subtle spelling changes in a website or email domain; or requests for confidential information that would not ordinarily be required. A professional-looking message is not, by itself, evidence that it is genuine.

If you receive a suspicious communication

Do not click links, open attachments, make a payment or continue the conversation. Preserve the message, telephone number, website address and any relevant documents. Contact Whitehall independently at office@whitehallwm.com so that we can review any communication purporting to originate from us.

If money or information may have been compromised

Contact your bank or payment provider immediately and follow its fraud-reporting procedure. Change any affected passwords from a trusted device and notify other relevant account providers. In England, Wales and Northern Ireland, fraud and cybercrime can be reported to Report Fraud online or by calling 0300 123 2040. In Scotland, contact Police Scotland on 101. If the matter concerns an investment, pension or regulated financial service, consult the Financial Conduct Authority’s scam guidance and verify firms through the FCA’s official services.

Further official guidance

The UK National Cyber Security Centre provides practical guidance on recognising and reporting phishing and suspicious messages. These external resources are provided for general assistance; in an emergency or where there is an immediate risk of harm, contact the police.

Important notice

This page provides general fraud-awareness information only. No security measure can eliminate every risk, and the inclusion of this guidance does not constitute a guarantee against loss, fraud or cybercrime. You remain responsible for exercising appropriate care and for acting promptly if you suspect that your information, account or funds may be at risk.