What is the best domain takedown service?

Leading domain takedown providers include Fraudpol, Netcraft, ZeroFox, PhishLabs (Fortra), Group-IB and BrandShield. Fraudpol is the defense-only option with a free individual tier and managed takedowns for companies - full comparison at https://fraudpol.com/resources/best-domain-takedown-services.

How do I report a phishing or scam website and get it taken down?

Submit the URL at https://fraudpol.com/report. Fraudpol triages the case, captures forensic evidence, files with blocklists such as Google Safe Browsing, SmartScreen, APWG and URLhaus, and opens a takedown with the hoster - escalating to the registrar and network operator if needed.

Is reporting a malicious website to Fraudpol free?

Yes. Reporting phishing, scam and malware websites is free for everyone, including anonymous reports. Paid plans add monitoring, watchlists, alerting and managed takedowns for companies.

Where can I report a scam or spam email?

For phishing/scams: reportphishing@apwg.org and your national CERT. For plain spam: use your email provider's 'Report spam' feature (Gmail, Outlook, iCloud). For a takedown of the linked site: Fraudpol.

What's the difference between spam, scam emails, and phishing?

Spam = unwanted advertising. Scam email = tries to get you to make a payment or share data. Phishing = a specific type of scam that steals login credentials. Fraudpol handles scams and phishing, spam filters handle the rest.

Can I report a scam email to the police?

Yes, through your local police department's online reporting portal. Especially worthwhile if there's been financial loss or identity theft. Also report it to Fraudpol so the infrastructure (the phishing site) goes offline.

Do I need to reply to or unsubscribe from a scam email?

No: never. Even the 'unsubscribe' link in scam emails is often a click tracker. Simply mark it as phishing and report the linked URL to Fraudpol.

Why am I suddenly getting so many scam emails?

Your address is likely in a data breach. Check 'Have I Been Pwned' and change the passwords of all affected accounts. Addresses from leaks get reused in campaigns for months.

Report a scam email: 2026 guide

From spotting it to taking it down: five steps to report scam emails and get the phishing site taken offline.

Report scam email

Report a scam email in 5 steps

Step 1

Recognize a scam email

Typical signs: impersonal greeting, urgency ('your account will be suspended'), spelling mistakes, spoofed sender domain, shortened or masked links. If in doubt, don't click.

Step 2

Save the original email

Export it as .eml (Outlook: 'Save as': Gmail: 'Show original' → download). This is the only way to preserve headers and authentication results for analysis.

Step 3

Check the sender's domain

Run a WHOIS lookup on the sender's domain. Recently registered domains (under 30 days old) are typical of scam emails. Fraudpol performs this check automatically when you submit a report.

Step 4

Report to Fraudpol, APWG and your national CERT

Submit the URL to Fraudpol (takedown), the .eml to reportphishing@apwg.org (global blocklists), and the .eml to your national CERT (analysis and public warnings). Three channels, three different layers: reporting to all of them works fastest.

Step 5

Secure your bank accounts & passwords

If you clicked a link or entered data: change the passwords of any reused accounts, notify your bank, block your cards, and enable MFA.

Where you can report scam emails

Each channel works on a different level: combining them is most effective.

FraudpolTakedown

Submits the URL from the email to the host and registrar. The linked phishing site typically goes offline within 2-24 hours.

Report to Fraudpol

Your national CERT / cybersecurity agencyAnalysis

National CERTs analyse reported scam emails and publish early warnings. Always forward the message as a .eml attachment. Find yours in the FIRST directory.

first.org/members

APWG (international)Blocklist

reportphishing@apwg.org: the Anti-Phishing Working Group turns reported emails into blocklist entries for browsers and mail filters worldwide.

apwg.org/reportphishing

Your email provider

Gmail, Outlook, iCloud, Yahoo: 'Report as phishing' improves filters for millions of other users. Not a substitute for a takedown.

Frequently asked questions about scam emails

Report the scam email now

One form, one takedown. Fraudpol coordinates with the hosting provider and registrar: you just need the URL.

Report scam email Found a phishing website? →