If you have come across a website that looks fraudulent, reporting it is one of the most useful things you can do. A single report can lead to the site being flagged in browsers or taken offline, which protects everyone who visits it after you.
This guide explains where to send a report, what information to include, and what to do first if you have already paid. Reporting takes only a few minutes and you do not need to be certain the site is a scam to raise it.
Paste an address for a free safety check: encryption, malware and phishing, domain age and more.
Before you report anything, deal with the money. If you paid by card or through a payment service, contact your bank or card provider straight away and tell them you think the payment went to a fraudulent site. Ask whether the payment can be stopped or reversed, and whether your card should be cancelled. The sooner you act, the better the chance of recovering funds.
If you entered a password on the site, change it anywhere else you use it, and turn on two-factor authentication where you can. Then move on to reporting the site so others are warned.
Copy the full URL of the page, not just the home page. Include any link you were sent, since that is what others may click.
Capture the pages that matter: the offer, the checkout, any fake reviews or contact details. Screenshots survive even if the site is later changed or removed.
A short, factual account of what the site did and why you believe it is a scam. Note the date and how you found it.
If you paid, include the amount, the date and the payment method. Do not share full card numbers in a public report.
Reports are how scam sites get caught. When a safe-browsing service or a browser confirms a site is deceptive, it can show a warning to millions of people before they ever reach the page. When a registrar or host acts, the site can disappear entirely. Even reports that do not lead to immediate action build a record that helps investigators spot patterns and shut down repeat offenders.
You do not need proof, and you will not get in trouble for reporting a site that turns out to be genuine. Honest reports made in good faith are exactly what these services rely on.
If you want to check your instinct first, you can run the address through our free safety check. It looks at whether the site is flagged for malware or phishing, whether the connection is encrypted, and how long the domain has existed. A site that is already flagged confirms your suspicion, and a clean result is a useful reminder that no single tool is the final word, so trust the wider signals too.
There is no single place. Report the address to a safe-browsing service such as Google Safe Browsing so browsers can warn people, to the site's domain registrar or web host so they can take it down, and to your national consumer-protection or fraud authority. If you found the site on a marketplace or platform, report it there as well.
Include the exact web address, screenshots of the important pages, a short factual description of what happened and when, and, if you paid, the amount, date and payment method. The more specific you are, the easier it is for the recipient to act.
Contact your bank or card provider immediately and tell them the payment may be fraudulent. Ask whether it can be stopped or reversed and whether your card should be cancelled. If you entered a password, change it anywhere else you use it and turn on two-factor authentication. Then report the site.
Sometimes, and often quickly. A domain registrar or web host can suspend a site that breaks their terms, and a safe-browsing service can flag it so browsers warn visitors. Even when a site is not removed at once, your report adds to a record that helps investigators act against repeat offenders.
No. Reports made honestly and in good faith are exactly what these services depend on. You do not need to be certain a site is a scam before raising it, so if something looks wrong it is fine to report it.
Run the address through our free safety check. It shows whether the site is flagged for malware or phishing, whether the connection is encrypted and how old the domain is, which helps you confirm a scam before you report it.
Free, anonymous, and no signup. Know before you buy.