Keeping an eye on who is signing in to your company account is one of the simplest and most effective security habits you can build. A quick check now and then can catch a problem early, before anyone can do harm.
How to check your recent sign-in activity
Sign in to your account at clients.credicorp.co.uk/login and go to Settings → Security. Look for a section labelled Recent activity, Sign-in history or Login sessions. This shows a list of recent sign-ins, typically with:
- The date and time of each sign-in.
- The device or browser used (for example, "Chrome on Windows" or "Safari on iPhone").
- An approximate location based on the IP address.
- Whether the sign-in succeeded or failed.
What a normal sign-in looks like
Most sign-ins will be from devices and locations you recognise: your office computer, your phone, your home broadband connection. A sign-in from a new device or a different city is not automatically a problem — it might be you travelling, working from a different site, or using a new phone — but it is worth a closer look if you were not expecting it.
Red flags to watch for
Take action if you see any of these in your sign-in history:
- A sign-in from a country you have never visited or done business in.
- A sign-in at an unusual time — for example, the middle of the night when nobody on your team is working.
- Several failed sign-in attempts in a short window — this can mean someone is trying to guess a password.
- A sign-in from a device or browser you do not recognise combined with a location that does not match your team.
- A sign-in that succeeded but you know nobody on your team was active at that moment.
What to do if you see something suspicious
- Change your password immediately. Go to Settings → Security and choose a strong, unique password that you do not use anywhere else. See choosing a strong password for your business account.
- Check which devices are trusted. Review the list of trusted devices in your security settings and remove any you do not recognise. See what is a trusted device and how do I remove one.
- Review your contact details. Confirm your phone number and email address are still correct — a common fraud tactic is to change these so that future alerts go to the criminal. See why keeping your contact details up to date matters for security.
- Check for unauthorised changes. Look for new users added to the account, changes to bank details, or requests you did not raise.
- Tell us. Contact us through a verified channel and let us know what you saw. We can help you secure the account and investigate. See how to report suspected fraud to Credicorp.
What we do on our side
Credicorp monitors for unusual sign-in patterns automatically. If our systems detect a sign-in that looks out of the ordinary — such as a new device in an unexpected location — we may send you an alert or require an extra verification step. These checks happen in the background and do not slow down normal sign-ins. See what account activity alerts tell you for the alerts you may receive.
Building a regular habit
Pick a regular time to glance at your sign-in history — once a week is a good rhythm, or whenever you are already signed in to check a statement. The check takes less than a minute, and it is one of the most effective ways to catch a problem before it becomes serious.
If you use a shared account
If more than one person on your team signs in to the same account, make sure each person has their own user login rather than sharing credentials. Individual logins give you a clear audit trail and let you remove access for one person without resetting everyone else. See adding users to your company account and managing who can access your company account.
See also: Advance-fee and fake loan offer scams, How Credicorp will — and won't — contact you, How do I spot a scam pretending to be from Credicorp?.