How to Identify a Scam Website

Before reporting, confirm the site is fraudulent. Common signs include:

  • Domain registered very recently (check whois.domaintools.com)
  • No verifiable physical address or contact information
  • Prices that are impossibly low
  • Spelling errors and poor grammar throughout
  • No SSL certificate or a free SSL with no other legitimacy signals
  • Payments only via crypto, wire transfer, or gift cards
  • Copied content from legitimate websites

Where to Report a Scam Website

Google Safe Browsing

Report phishing and malware sites to Google at safebrowsing.google.com/safebrowsing/report_phish/. Google will review the site and may add it to their blocklist, which also feeds into Chrome browser warnings.

Microsoft / Bing

Report unsafe websites to Microsoft at microsoft.com/en-us/wdsi/support/report-unsafe-site. This flags the site in Bing and across Microsoft Defender's threat intelligence network.

ICANN & Domain Registrar

Find the scam website's domain registrar using lookup.icann.org, then report abuse directly to the registrar's abuse contact. Registrars can suspend fraudulent domains.

Phishing Databases

  • PhishTank: phishtank.com – Community-driven phishing reporting
  • OpenPhish: openphish.com/report.html
  • Anti-Phishing Working Group: apwg.org – reportphishing@apwg.org

National Cyber Authorities

  • UK – NCSC: report.ncsc.gov.uk
  • US – CISA: cisa.gov/report
  • Australia – ACSC: cyber.gov.au/report
  • EU – ENISA: enisa.europa.eu

Payment Platforms

If the scam website accepts PayPal, Stripe, or other payment methods, report it directly to that platform. They have abuse teams that can cut off the scammer's payment processing.

⚠️ Document the Website First

Before the site is taken down, screenshot every page, including the product pages, checkout, and any terms. Use web.archive.org/save to archive the site. This evidence is critical for any legal or investigative process.

What Happens After You Report

Once reported, different things can happen depending on the platform:

  • Google/Bing: The site may appear with a safety warning in search results within days
  • Registrar: The domain may be suspended within 24–72 hours if confirmed fraudulent
  • Authorities: Reports are logged and may contribute to larger investigations

If the scam website caused you financial loss, also file a formal fraud report with your national authority.