Knowing how to report a website properly can stop a scam from reaching more victims, get malware-infected pages flagged before they spread further, or push illegal content offline faster. The tricky part is that there isn’t one single “report a website” button that covers every situation — where you report depends entirely on what the website is actually doing wrong.
This guide breaks down exactly which organization or platform to contact based on the type of problem, what information to gather beforehand, and what typically happens after you file a report.
Table of Contents
Why It Matters Where You Report
Many people assume reporting a website means emailing the site owner or leaving a bad review — but the organizations that can actually take action are usually search engines, browsers, hosting companies, domain registrars, or government agencies, not the website itself.
Choosing the wrong channel wastes your time and delays action. The table below is a quick reference before we go through each situation in detail.
| Type of Problem | Best Place to Report |
| Phishing or fake login pages | Google Safe Browsing, browser’s built-in report tool |
| Scam or fraud (financial) | FTC (ReportFraud.ftc.gov), IC3.gov |
| Malware or infected site | Google Safe Browsing, your antivirus vendor |
| Copyright infringement | Site’s hosting provider, DMCA takedown request |
| Illegal content (exploitation, extremism) | NCMEC CyberTipline, FBI, hosting provider |
| Site impersonating a brand | The brand’s official abuse/security contact |
| Generally abusive or harassing site | Hosting provider’s abuse email, domain registrar |
Step 1: Identify What the Website Is Actually Doing Wrong
Before reporting, be specific about the issue. “This site seems sketchy” is harder to act on than “this site is impersonating my bank’s login page to steal passwords.” Common categories include:
- Phishing — a fake page designed to steal usernames, passwords, or payment details by impersonating a real company.
- Malware distribution — a site that installs harmful software on a visitor’s device, often without their knowledge.
- Financial scams — fake stores, investment schemes, or fraudulent services designed to take money without delivering anything real.
- Copyright or trademark infringement — a site using content, images, or branding without permission.
- Illegal content — material involving exploitation, extremism, or other content banned under law.
- Harassment or impersonation — a site built to target, defame, or impersonate a specific person.
Step 2: Gather Evidence Before You Report
Reports move faster and get taken more seriously with solid documentation. Before filing anything, collect:
- The exact website URL (not just the general domain name)
- Screenshots of the page, especially anything showing deceptive claims or fake branding
- The date and time you encountered it
- Any related emails, messages, or payment records if money was involved
If the site pressured you into sending money or personal information, save any messages leading up to that point — these details often matter for financial fraud reports.
Step 3: Report Based on the Specific Issue
Reporting a Phishing or Fake Login Website
Google Safe Browsing lets you submit any URL you suspect is phishing or unsafe. Once verified, browsers like Chrome, Firefox, and Safari can show a warning to future visitors before they even load the page.
- Go to Google’s Safe Browsing report page (safebrowsing.google.com/safebrowsing/report_phish).
- Paste in the suspicious URL.
- Add any relevant details, such as which brand it’s impersonating.
- Submit the form.
Most major browsers also have a built-in “Report this site” option directly in their menu, which sends similar information without leaving the browser.
Reporting a Scam or Fraudulent Website
In the United States, two main federal channels handle online scam and fraud reports:
- FTC (Federal Trade Commission) — file at ReportFraud.ftc.gov for scams, fake stores, fraudulent charges, or deceptive business practices.
- IC3 (Internet Crime Complaint Center), run by the FBI — file at ic3.gov for more serious internet crimes, especially involving financial loss.
Both agencies use these reports to identify patterns across many victims, which can lead to broader investigations even if your individual case isn’t pursued on its own.
Reporting a Site With Malware
If a website tries to install harmful software on your device, report the URL to Google Safe Browsing the same way you would a phishing site — Google’s system checks for both categories. You can also report it directly to your antivirus provider, since many companies maintain their own blocklists that update independently of Google’s system.
Reporting Copyright or Trademark Infringement
If a site is using your content, photos, or branding without permission:
- Identify the site’s hosting provider — you can usually find this through a WHOIS lookup or a “who is hosting this site” tool.
- Send a DMCA takedown notice (a formal legal request under the Digital Millennium Copyright Act) to the host’s designated abuse or copyright contact.
- Include the original content you own, the infringing URL, and a statement that you have a good-faith belief the use is unauthorized.
Most hosting providers have a dedicated DMCA or abuse email listed in their footer or terms of service page.
Reporting Illegal Content
For content involving child exploitation, extremism, or other clearly illegal material:
- NCMEC’s CyberTipline (report.cybertip.org) is the primary US channel specifically for reporting child sexual abuse material — never attempt to download or further distribute such content yourself.
- The FBI’s Internet Crime Complaint Center (IC3) also accepts reports involving serious criminal activity online.
- The site’s hosting provider can usually be pressured to remove content quickly, since hosting illegal material typically violates their own terms of service.
Reporting a Site Impersonating a Real Brand
If you spot a fake site pretending to be a bank, retailer, or other real company, the fastest path is often contacting that company’s official security or abuse team directly — most major brands have a dedicated email (often something like security@ or abuse@ their domain) for exactly this situation, since they have a strong incentive to shut down impersonators quickly.
Step 4: Report to the Hosting Provider or Domain Registrar
Regardless of the specific issue, every website exists on a server owned by a hosting provider, and every domain name is managed by a domain registrar. Both typically have abuse-reporting processes, since hosting illegal or clearly abusive content usually violates their terms of service.
To find this information:
- Run a WHOIS lookup on the domain to identify the registrar.
- Search for the hosting provider using a “who is hosting this website” tool.
- Look for an “abuse” contact email, often listed publicly by hosts and registrars specifically for this purpose.
Reports to hosts and registrars can result in the entire site being suspended, which is often faster than waiting on a government agency’s response.
What Happens After You Report a Website?
Response times and outcomes vary significantly depending on where you reported and how serious the issue is.
- Google Safe Browsing reports are typically reviewed automatically and can result in a warning being added within a short period if confirmed.
- FTC and IC3 reports are usually aggregated with other complaints rather than individually investigated on the spot — they contribute to broader patterns that can trigger larger enforcement actions.
- Hosting provider abuse reports vary by company, but clear violations of terms of service (illegal content, active phishing) are often acted on faster than borderline cases.
- DMCA takedown requests typically require the host to notify the site owner and give them a chance to respond, unless the content is removed voluntarily first.
Common Mistakes When Reporting a Website
- Reporting to the wrong place. Sending a scam report to a copyright takedown form (or vice versa) delays action since it isn’t reviewed by the right team.
- Not saving evidence first. Screenshots and URLs can disappear if the site is taken down before you document it — always capture evidence before or immediately after reporting.
- Assuming nothing happens after reporting. Even when you don’t get a direct response, aggregated reports to agencies like the FTC contribute to larger investigations you won’t personally see the outcome of.
- Confusing a bad review with a formal report. Leaving a negative review doesn’t reach hosting providers, registrars, or law enforcement — it only affects public perception, not the site’s technical status.
- Engaging directly with a scam site’s owner. Replying to a phishing or scam email to “call them out” can sometimes confirm your email is active, leading to more targeted attempts.
Best Practices Before and After Reporting
- Report through official channels only — never pay a third party claiming they can “remove” a website for you.
- If money was involved, also contact your bank or card issuer directly, since chargebacks often move faster than any website report.
- Keep a copy of everything you submit, including confirmation numbers or reference IDs from agencies like the FTC or IC3.
- If the site targets a specific platform (a fake app, a scam social media profile), also report it directly within that platform, since app stores and social networks have their own enforcement teams separate from browsers or hosting providers.
Frequently Asked Questions
How do I report a website for being a scam? In the United States, file a report with the FTC at ReportFraud.ftc.gov, and for more serious cases involving financial loss, also file with the FBI’s Internet Crime Complaint Center at ic3.gov.
How can I report a phishing website? Submit the URL directly to Google Safe Browsing’s report form, or use your browser’s built-in “Report this site” option, which sends similar information to help flag the page for other visitors.
Can I get a website taken down completely? Sometimes, but it depends on the severity of the issue. Reports to hosting providers or registrars can result in full suspension for clear violations, like active phishing or illegal content, while less severe issues may only lead to a warning label rather than removal.
Who do I contact to report copyright infringement on a website? Identify the site’s hosting provider through a WHOIS or hosting lookup tool, then send a formal DMCA takedown notice to their designated copyright or abuse contact.
What information do I need before reporting a website? Gather the exact URL, screenshots of the page, the date you found it, and any related communications (emails, payment records) if the site involved a financial transaction.
Is reporting a website anonymous? Most agencies, including the FTC and IC3, allow you to file a report without your identity being shared with the website owner, though some limited personal information may be required internally to process the complaint.
Final Thoughts How to Report a Website
Learning how to properly report a website comes down to matching the problem to the right channel — Google Safe Browsing for phishing and malware, the FTC or IC3 for scams, hosting providers for illegal or abusive content, and the brand itself for impersonation. Gathering solid evidence first and reporting through the correct official channel gives your report the best chance of actually leading to action, rather than disappearing into the wrong inbox.
If you’re dealing with an active scam involving money right now, don’t wait to perfect your report — contact your bank immediately, then follow up with the FTC or IC3 afterward.
