Reporting a bug or security issue
If something doesn’t look right on one of our websites, apps or digital tools, we want to hear about it.
Keeping everything running safely matters, so your details, your data and your experience stay protected.
What you can report
You can use our official process to report:
- A bug on our website or app
- A potential security vulnerability
- A responsible disclosure
- Any weakness or unexpected behaviour in our digital systems
How to report it
To make sure your report reaches the right team quickly, please use our Vulnerability Disclosure Programme.
This is the only way to submit bug reports or security concerns to our security team.
If a report is sent through Customer Services or general email, it won’t reach the right people, which can slow things down.
Why this matters
Vulnerability Disclosure Programme helps us review and fix issues safely and efficiently.
It also gives researchers, ethical hackers and customers a clear, respectful way to share what they’ve found.
Using the right process means we can respond faster and keep everything working as it should, so your experience stays secure.