How to report a scam website (and what happens next)
Reporting a scam website is more than sending an email. Done right, the site is blocked in Chrome within hours and removed at the host within 24-72. This guide walks you through the exact steps and what happens on the other side of your report.
1. Confirm it's actually a scam
A bad review is not fraud, and a slow shipper is not a takedown-worthy scam. Before you file, run the 10-signal fake-shop check or, for a phishing page, the 12-indicator phishing check. Three or more hits is enough to report.
2. Preserve evidence before it disappears
- Full-page screenshot with the URL bar visible.
- Save the HTML source (
Ctrl+U → File → Save): kits rotate content quickly. - Copy the exact URL, including query string.
- If you already interacted: order confirmation email in raw source, transaction IDs, contact addresses.
3. File with the right parties (in parallel)
Different recipients have different powers. File all in one sitting:
- Fraudpol: opens a case with the hosting provider and, if silent, escalates to the registrar and upstream ASN. See Report a scam website.
- Google Safe Browsing and Microsoft SmartScreen: browser-level warnings within hours.
- APWG (
reportphishing@apwg.org) if the page harvests credentials. - National consumer authority: FTC (US), Trading Standards (UK), or the consumer protection body in your country (econsumer.gov collects cross-border complaints).
- The impersonated brand: their trademark or fraud team can pursue a UDRP or direct registrar action.
- Your bank, if money moved: file a chargeback within 60 days.
4. What the timeline actually looks like
- Hour 0-6: Fraudpol triages the case, enriches with WHOIS / ASN / hash data and files the first abuse mail to the host.
- Hour 6-24: Safe Browsing and SmartScreen typically ingest and start warning users.
- Hour 24-72: Cooperating hosts remove content. Silent hosts trigger ASN escalation.
- Day 3-7: Registrar suspension for the domain if the host is bulletproof.
- Closed: URL returns 404 / 410 or DNS is sinkholed. Fraudpol issues a signed timeline PDF.
5. After the takedown
Attackers commonly relaunch the same kit on a sibling domain within a week. If you're monitoring a brand or a personal identity, keep the case open: Fraudpol's watchlist radar catches re-launches and cross-references indicators against the closed case so escalation is instant, not restart-from-zero.
Have a URL to report right now?
Fraudpol triages the case, files with the right blocklists and opens a takedown with the hosting provider: usually within minutes.
Report a scam websiteRelated guides
Frequently asked questions
Where do I officially report a scam website?
For takedown: Fraudpol. For consumer warnings: FTC (US), Action Fraud (UK), econsumer.gov for cross-border cases. For browser blocking: Google Safe Browsing and Microsoft SmartScreen.
Do I need to be a victim to report a scam site?
No. Anyone who encounters a suspicious site can report it. Prevention reports (before someone is defrauded) are just as valuable.
How long does it take to take down a scam website?
Typical timeline: browser warnings within hours, hoster takedown in 24-72 hours, domain suspension in 3-14 days depending on the registrar.
Can Fraudpol recover my money?
No. Fraudpol's role is takedown and evidence preservation. For financial recovery, contact your bank, PayPal, or file a police report: Fraudpol's evidence packet is designed to support these claims.
Is reporting a scam website anonymous?
Yes, you can report anonymously. Providing an email address only enables status updates and follow-up questions.