Guides on reporting online abuse
Practical, neutral walkthroughs on how phishing, malware and scam websites are investigated, reported and taken down: written by the Fraudpol team.
Reporting
How to report a phishing site to the registrar (and what to write)
Find the right abuse address, attach the right evidence and use wording that actually gets acted on.
Read guideReporting
What is an abuse contact and how do you find it?
Who publishes abuse addresses, how to look up both the registrar and the network, and what to do with dead ends.
Read guideTakedowns
How long does a phishing takedown actually take?
Realistic timelines per phase, what makes a case slow, and how Fraudpol measures its own durations.
Read guideBrand protection
Typosquatting: how to find lookalike domains of your brand
The variant patterns attackers use, the signals that separate parked names from live threats, and what to do about each.
Read guideIncident response
Your website was hacked and used for phishing: what to do now
The first hour, finding the entry point, cleaning properly and getting the browser warning lifted.
Read guideReference
Where to report phishing in your country
Official national reporting bodies worldwide, and how they fit with a hoster and registrar takedown.
Read guidePhishing
12 phishing indicators to check before you click
A hands-on checklist Fraudpol analysts use to score a suspicious URL in under a minute.
Read guideMalware
How a malware URL is actually taken down
From IoC capture to ASN escalation: the full lifecycle of a malware takedown request.
Read guideFundamentals
Domain abuse explained: hosts, registrars, ASNs
Who controls what on the internet, and which party actually removes a malicious site.
Read guideFraud
Fake shop checklist: 10 signals that give a scam store away
How to spot a fraudulent webshop, preserve evidence and file a report that gets acted on.
Read guideHow-to
How to report a scam website (and what happens next)
The complete process from first suspicion to a 404: with the exact authorities to contact.
Read guideSocial Media
How to report social media scams and fake accounts
Step-by-step reporting on Instagram, Facebook, TikTok, X and LinkedIn: and when to escalate.
Read guideBrand Protection
Brand impersonation protection: stop fake sites using your name
Detect, document and remove websites that impersonate your brand: from phishing to counterfeit stores.
Read guideFundamentals
How to identify a fake website: 8 red flags anyone can spot
Practical checks for URL, HTTPS, reviews, images and payment methods before you trust a site.
Read guideCryptocurrency
Cryptocurrency scam reporting: recover and report crypto fraud
Preserve blockchain evidence, notify exchanges and file with law enforcement for crypto scams.
Read guideHow-to
How to report to Google Safe Browsing: a step-by-step guide
File phishing and malware reports with Google Safe Browsing and understand what happens next.
Read guideTakedown
Domain takedown service: how malicious sites are removed
What a managed takedown service does, how it files with hosters and registrars, and how long it takes.
Read guideComparison
Best domain takedown services in 2026: compared
Fraudpol vs Netcraft vs ZeroFox on scope, pricing and defense-only policy.
Read guideFree tools that go with these guides
No account needed: abuse contact lookup, URL defanger, site status check and the lookalike domain scan.
See also the confirmed abuse registry and measured provider response times.