If you notice unfamiliar activity — a drawdown you did not request, an unknown user added to the account, or a login from a device or location you do not recognise — treat it as a potential security incident and act straight away.
Immediate steps
- Change your password immediately using the Forgotten password? flow, which invalidates all existing sessions across every device.
- Review the audit log — go to Account > Activity Log to see a timestamped list of every login, drawdown request, and settings change in the last 90 days.
- Remove any unfamiliar users — go to Account > Users and revoke access for anyone you do not recognise.
- Contact Credicorp support immediately — call or email us and ask for an account freeze. We can pause all drawdown activity while you and our team investigate. Provide your Companies House number for fast verification.
What Credicorp will do
Once we receive a security incident report, we freeze outbound transactions, flag the account for our security team, and send you a written timeline of all recent account events. We will work with you to establish whether any transactions need to be disputed and, where appropriate, refer the matter to Action Fraud.
Prevention
Enable two-factor authentication (2FA) under Account > Security — it is the single most effective control against account takeover. Ensure that every user on the account uses a unique, strong password and that access is revoked promptly when staff leave.
We lend only to UK limited companies and LLPs, and the loan is to the company with no director personal guarantee. As business finance outside the consumer-credit regime, it is not covered by the Financial Ombudsman Service or FSCS.
See also: I cannot log in to my Credicorp account — what should I do?, How do I reset my Credicorp account password?.