Online scams can cause financial loss, identity theft, and lasting security risks. Reporting scam activity to authorities creates an official record, supports investigations, and may help prevent others from becoming victims.
Before submitting a report, victims should preserve relevant evidence, contact the appropriate agency, and notify their bank or payment provider when money or account details are involved. Prompt, accurate reporting can improve the chances of protecting compromised accounts and recovering losses.
Recognizing When an Online Scam Should Be Reported
An online scam should be reported when someone uses deception to obtain money, personal information, account access, or other valuable data. Common warning signs include false investment opportunities, impersonation, fake shopping websites, phishing messages, and requests for urgent payment.
Report attempted scams even when no money was lost. Sharing details can help authorities identify wider fraud campaigns, warn other consumers, and connect related complaints. Suspicious messages, websites, advertisements, or accounts may also violate platform rules and should be reported to the relevant service.
Immediate reporting is especially appropriate when financial information has been exposed, an account has been taken over, identity theft is suspected, or the scammer continues making contact. Threats, blackmail, harassment, or attempts to exploit a child or vulnerable person may require prompt police attention.
Reporting scam to authorities is appropriate whether the victim suffered a financial loss or only encountered an attempted fraud. A report creates an official record and may support investigations, even though authorities cannot guarantee recovery of money or removal of every fraudulent account.
Preserve Evidence Before Reporting the Scam
Save all relevant evidence before deleting messages, blocking the sender, or closing the account involved. Capture screenshots showing usernames, email addresses, phone numbers, website URLs, timestamps, payment instructions, and the scammer’s claims.
Keep original emails, attachments, text messages, and chat records whenever possible. Do not alter files or forward suspicious attachments unnecessarily, as changes may affect useful technical information. Record the sequence of events while the details remain fresh.
Preserve payment confirmations, bank statements, cryptocurrency transaction IDs, receipts, and shipping information. If a website is still accessible, copy its address and take screenshots, but avoid entering further information or interacting with the scammer.
Store copies in a secure location, such as an encrypted drive or protected cloud account. This evidence can support reporting a scam to authorities, your bank, the relevant platform, or law enforcement. Never send passwords, authentication codes, or unnecessary personal data with a report.
Identify the Correct Authority for Your Location
The appropriate reporting body depends on your country, state, or territory and the nature of the scam. Use official government websites to locate the recognised cybercrime, consumer-protection, or financial-regulatory authority for your area.
Common options include:
- A national cybercrime reporting portal for online fraud
- A consumer-protection agency for deceptive businesses or advertisements
- Local police for threats, identity theft, or significant losses
- A financial regulator for investment or banking fraud
Check whether the authority accepts reports from residents only, as some portals restrict submissions by location. If the scammer operates abroad, your local authority can explain whether an international referral is available.
Reporting scam to authorities does not replace contacting your bank, payment provider, or the platform involved. Submit separate reports when appropriate, using each organisation’s official website rather than links supplied by the suspected scammer.
How to File a Scam Report Online
Begin reporting a scam to authorities through the official government website or fraud-reporting portal for your country or region. Verify the web address carefully, since scammers sometimes create imitation forms that collect personal information.
Select the category that best describes the incident, such as phishing, identity theft, investment fraud, or an online purchase scam. Complete each required field accurately, using clear dates, website addresses, usernames, telephone numbers, and payment details.
Describe what happened in chronological order without speculation. Upload relevant screenshots, emails, receipts, messages, or transaction records when the portal permits attachments. Avoid submitting unnecessary passwords, full payment-card numbers, or other sensitive information.
Review the report before submitting it and save the confirmation page, reference number, and any follow-up instructions. Some agencies allow anonymous reports, while others require contact information for further questions. Reporting scam to authorities does not always guarantee an investigation or recovery of lost funds.
Information Authorities Need From Scam Victims
Provide a clear account of what happened, including the date and time, how contact began, the scammer’s claims, and the steps you took. Describe whether the incident involved phishing, impersonation, investment fraud, malware, or another online scam.
Include identifying details such as usernames, email addresses, telephone numbers, website addresses, payment references, and account names used by the suspected scammer. Preserve these details exactly as they appeared, since small differences may assist an investigation.
Authorities may request transaction records, receipts, bank statements, cryptocurrency wallet addresses, screenshots, emails, messages, and relevant files. Explain the amount lost, currency used, payment method, and whether further payments or contact are expected.
When reporting a scam to authorities, provide accurate personal contact information and state whether your accounts or identity may have been compromised. Do not send passwords, authentication codes, or unnecessary copies of identity documents unless an official agency specifically requests them through a verified channel.
Reporting Online Scams to the Relevant Platform
Report the scam through the platform’s official reporting tools, such as account menus, safety centres, or support forms. Avoid links supplied by the scammer, which may lead to additional fraud or malware.
On social media, marketplaces, and messaging services, report the user, listing, message, or advertisement directly. Select the most accurate category, explain what occurred, and include relevant transaction details without sharing unnecessary personal information.
Fraudulent websites and online advertisements can often be reported to the hosting service, search engine, advertising network, or domain registrar. Platform reporting complements reporting scam to authorities but does not replace formal reports to government agencies or police.
Request removal of harmful content or accounts when the platform provides that option. Save confirmation numbers, emails, screenshots, and submission dates. Removal is not guaranteed, and platforms may limit the information they disclose about their investigation.
Submitting reports to social media, marketplaces, and messaging services
Use the platform’s built-in reporting function rather than replying to the suspected scammer. Select the category that best describes the conduct, such as fraud, impersonation, misleading sales, or unauthorized activity.
On social media, report the profile, individual post, advertisement, or direct message involved. Marketplaces usually allow reports for fraudulent listings, counterfeit products, payment requests outside the platform, or sellers who misrepresent goods.
Messaging services may provide options to report a contact, message, group, or channel. Submit the relevant account details and retain copies of messages, usernames, profile links, listing URLs, and transaction records for reporting scam to authorities.
Avoid deleting evidence before completing the report, unless continued contact creates a safety risk. Do not send further payments or personal information. Platform reviews may result in content removal, account restrictions, or no action, depending on the service’s policies and available evidence.
Reporting fraudulent websites and online advertisements
Report the fraudulent website to your national consumer-protection or cybercrime agency using its official website. Include the complete URL, the date you encountered it, and a clear description of the deception. Do not visit the site again after submitting the report.
Fraudulent online advertisements should be reported through the platform’s built-in reporting tool. Select the category related to fraud, scams, or misleading content, and provide the advertisement’s link, advertiser name, screenshots, and any messages received.
Search engines and web browsers may also accept reports about phishing or deceptive websites. Their reporting forms can help support warnings or blocking measures, although removal is not guaranteed. Website hosting providers may accept abuse reports when their contact details are publicly available.
When reporting scam to authorities, submit evidence without sharing unnecessary passwords, payment details, or identity documents. If the website collected financial information, contact the bank or payment provider separately and explain that the information was entered on a fraudulent website.
Requesting removal of harmful content or accounts
Contact the platform hosting the scam and use its built-in reporting, abuse, or impersonation form. Select the category that best describes the violation, such as fraud, identity theft, fake shopping, or malicious content.
Provide the direct URL, account name, message details, and a brief explanation of the harm. Include evidence where the form permits attachments, such as:
- Screenshots showing the scam or impersonation
- Payment requests or suspicious contact details
- Dates, usernames, and relevant transaction references
Request removal of fraudulent posts, advertisements, websites, profiles, or messages, and ask the platform to restrict associated accounts. Do not continue communicating with the scammer or click further links while collecting information.
Platform action may not be immediate or guaranteed. Save the complaint reference number and any responses. If the content remains available or causes financial harm, include these details when reporting the scam to authorities and notify your bank or payment provider separately.
Report the Financial Loss to Your Bank or Payment Provider
Contact your bank, card issuer, or payment provider as soon as you discover a scam-related loss. Use an official telephone number or secure banking application, rather than contact details supplied by the suspected fraudster.
Explain how the payment was made, when it occurred, and whether you authorized it. Ask whether the transaction can be cancelled, recalled, frozen, or disputed through the provider’s applicable fraud or chargeback process.
Provide transaction references, recipient details, screenshots, messages, and copies of relevant communications. Keep records of your notification, including case numbers, dates, and the names or departments of representatives contacted.
If your account or card details were exposed, request replacement credentials and review recent activity for unauthorized transactions. Reporting scam to authorities does not replace notifying the financial provider, and reimbursement is not guaranteed, particularly when a payment was voluntarily authorized.
When to Contact Police After an Online Scam
Contact the police when an online scam involves threats, extortion, stalking, identity theft, unauthorized account access, substantial financial loss, or suspected criminal exploitation. Call emergency services if you face immediate physical danger.
Use the police non-emergency number or visit a local station unless urgent circumstances require emergency assistance. Reporting scam to authorities can create an official record and help link related incidents across jurisdictions.
Provide organised evidence, such as:
- Messages, emails, phone numbers, usernames, and website addresses
- Transaction records, receipts, account details, and dates
- Screenshots, recorded correspondence, and descriptions of financial losses
Do not delete communications or confront the suspected scammer. Police may direct you to a specialist cybercrime unit or national reporting service. Their ability to investigate or recover money depends on the available evidence, the location of the offender, and applicable law.
Protect Your Accounts While Authorities Review the Report
Reporting scam to authorities should be followed by immediate account protection. Use a trusted device, particularly if the scam involved malware, remote-access software, or suspicious downloads. Disconnect unfamiliar devices and run reputable security scans before signing in again.
Take these steps:
- Change compromised passwords and any reused passwords.
- Create unique passwords for email, banking, and social media accounts.
- Enable multi-factor authentication where available.
- Sign out of active sessions and remove unfamiliar devices or applications.
- Contact service providers if account recovery details were changed.
Monitor bank accounts, payment services, credit reports, and login alerts for unusual activity. Consider placing a fraud alert or credit freeze where available in your jurisdiction. Keep records of suspicious transactions and access notifications for investigators.
Do not respond to continuing scam messages or pay anyone claiming they can recover lost funds. Preserve the communications, block the sender, and update the existing report if threats, impersonation, or repeated attempts continue.
Changing compromised passwords and enabling multi-factor authentication
After reporting a scam to authorities, change any password that may have been exposed from a trusted, malware-free device. Begin with your email account, since it may be used to reset other services, then secure banking, shopping, social media, and cloud accounts.
Use a unique password for every account, preferably generated and stored in a reputable password manager. Do not reuse a password shared with the scammer, even if the account shows no suspicious activity.
Sign out of all other sessions, remove unfamiliar devices, and review recovery email addresses and phone numbers. Check for forwarding rules, unfamiliar applications, or changed security settings that could allow continued access.
Enable multi-factor authentication wherever available. An authenticator app or hardware security key generally provides stronger protection than text messages, although SMS verification is safer than no second factor. Store recovery codes securely, preferably offline.
Monitoring bank accounts, credit reports, and online activity
After reporting scam to authorities, review bank and payment accounts frequently for unfamiliar transactions, withdrawals, or changes to account details. Set up transaction alerts where available, and contact the financial institution immediately about activity you did not authorize.
Check credit reports for newly opened accounts, hard inquiries, or changes to personal information. Follow the reporting and fraud-alert procedures available in your country, and retain copies of correspondence with credit agencies and financial providers.
Monitor email, social media, cloud storage, and other online accounts for unfamiliar logins, password-reset messages, sent communications, or altered recovery details. Review security notifications directly through official applications rather than links in unexpected messages.
Keep a dated record of suspicious activity, including screenshots, transaction references, device alerts, and contact attempts. Continuing monitoring can reveal delayed misuse and provide authorities with updated evidence if the scam affects additional accounts.
Reporting continuing contact or repeated scam attempts
If scammers continue contacting you after an initial report, do not respond, click links, open attachments, or provide further information. Preserve each message, phone number, email address, username, and website address as potential evidence.
Record the date, time, communication method, and nature of every contact. Keep screenshots that show the sender’s details and the full message where possible. Avoid deleting conversations until the relevant platform or authorities confirm they are no longer needed.
Update your existing report or submit a new one through the appropriate fraud-reporting agency, platform, or law-enforcement channel. Mention the original reference number and explain how the repeated attempts relate to the earlier incident. This supports reporting a scam to authorities with complete, current information.
Use the platform’s blocking and reporting tools after preserving evidence, and review privacy settings to limit further contact. If messages contain credible threats, stalking, or immediate danger, contact local police or emergency services without delay.
What Happens After Reporting a Scam to Authorities
After reporting a scam to authorities, you may receive a confirmation number or reference ID. Keep it securely, as it can help you request updates or connect related reports to the same investigation.
Authorities may review the evidence, identify patterns, and refer the case to another agency or law-enforcement department. They may contact you for clarification, documents, transaction records, or information about the scammer’s communications.
A report does not guarantee that lost money will be recovered or that an investigation will result in prosecution. Some agencies provide limited updates because investigations can involve confidential information or multiple jurisdictions.
Continue monitoring your accounts and preserve any new messages, invoices, or suspicious activity. If the scammer contacts you again, add the details to your existing report and inform your bank, payment provider, or the relevant platform.