How to Report a Scam Email (and Who to Contact)

Reporting a scam doesn't just help others — it creates a record, helps shut down the fake domains faster, and matters a lot if any money changed hands. The good news: it takes a few minutes, and you don't need to click anything dangerous to do it.

This guide covers where to report, in what order, depending on what happened.

Quick version: Report phishing to the impersonated company, forward scam texts to 7726, and file with the FTC at reportfraud.ftc.gov. If you lost money, contact your bank first.

If you only received it (no money lost)

Work down this list — do the ones that apply:

1. Report it to the company being impersonated. Most big brands have a phishing address, such as spoof@paypal.com, stop-spoofing@amazon.com, or reportphishing@apple.com. Forwarding the email helps them take down the fake site.
2. Forward phishing to the APWG at reportphishing@apwg.org, an anti-phishing working group that uses reports to fight scam infrastructure.
3. For scam texts, forward the message to 7726 (it spells SPAM) so your carrier can act, then delete it.
4. Report to the FTC (US) at reportfraud.ftc.gov. This feeds law-enforcement databases even when you weren't harmed.
5. Use your email's built-in "Report phishing" button so your provider learns to filter similar messages.

Forwarding an email to report it is safe — you're not clicking the scammer's links, just passing the message along.

If you lost money

Move fast; the order matters:

1. Call your bank or card issuer immediately, using the number on the back of your card. Ask them to stop or reverse the payment and watch for fraud.
2. For a wire or money-app transfer (Zelle, Venmo, Cash App), contact both your bank and the app's support right away — these are harder to reverse, so speed is everything.
3. For gift cards, contact the card's issuer (the brand on the card) and ask if they can freeze the balance; report the serial numbers.
4. Report to the FTC at reportfraud.ftc.gov and, for larger losses or crypto, to the FBI's IC3 at ic3.gov.
5. Document everything — screenshots, amounts, dates, and any reference numbers.

What to include in your report

A report is far more useful with specifics. Before you delete anything, capture:

• The sender — the full email address or phone number, not just the display name.
• The message itself — a screenshot, plus the subject line and any links (don't click them; just note the visible address).
• Dates and times you received and acted on it.
• What you did — clicked, replied, paid, or shared information.
• Amounts and references — payment amounts, card last-four, and any confirmation or reference numbers.

Keeping this in one place makes bank disputes and FTC reports faster, and gives investigators something to work with if losses are large.

Where to report, by scam type

Different scams have a best first stop. Use this as a quick map:

| Scam type | Report to | | --- | --- | | Phishing email | The impersonated company + APWG (reportphishing@apwg.org) + FTC | | Scam text | Forward to 7726, then the FTC | | Robocall / phone scam | FTC at reportfraud.ftc.gov (and the Do Not Call registry) | | Money lost | Your bank first, then FTC, then IC3 for large/crypto losses | | Identity theft | identitytheft.gov (US), which builds a recovery plan | | Fake website | The hosting company and Google Safe Browsing |

When in doubt, the FTC at reportfraud.ftc.gov is the right catch-all in the US — it routes information to the relevant agencies.

"Can I get my money back after a scam?"

Sometimes — and your odds are best the faster you act. Card payments and bank transfers can occasionally be reversed or disputed if you report quickly. Wires, gift cards, and crypto are much harder to recover, which is exactly why scammers prefer them. There's no guarantee, but reporting immediately is your best shot and creates the paper trail you'll need.

If your parent or someone you care for was scammed

Help them call their bank, change exposed passwords, and report it — without blame. Then set up a simple "second look" habit so the next attempt gets caught earlier. See the guides on protecting elderly parents from scams and family scam protection.

Catch the next one before it costs anything

Reporting is the cleanup. The cheaper win is not getting caught next time. When a message looks off, forward it to FraudRoom at check@fraudroom.com first and get a plain-English risk level back — so you stop the scam before money or information ever leaves your hands.

FAQ

Where do I report a phishing email?

Forward it to the impersonated company's phishing address, to the APWG at reportphishing@apwg.org, and file a report with the FTC at reportfraud.ftc.gov. Also use your email provider's "Report phishing" button.

Who do I call if I've been scammed online?

Call your bank or card issuer first, using the number on your card, to stop or dispute the payment. Then report to the FTC, and for larger or crypto losses, the FBI's IC3 at ic3.gov.

How do I report a scam text message?

Forward the text to 7726 (SPAM) so your carrier can act, then delete it. You can also report it to the FTC at reportfraud.ftc.gov.

Is it safe to forward a phishing email to report it?

Yes. Forwarding the message doesn't click its links or run anything — you're just passing it along. Don't click links or open attachments first; simply forward the email as-is to the reporting address.

Does reporting a scam actually do anything?

It helps. Reports let companies take down fake sites, let carriers block scam numbers, and feed law-enforcement databases that spot patterns. For your own case, a prompt report also strengthens any dispute with your bank.

Key takeaways

• No money lost: report to the impersonated company, the APWG, and the FTC.
• Money lost: call your bank first, then report to the FTC and IC3.
• Acting fast gives you the best (though not guaranteed) chance of recovery.
• Reporting is cleanup — checking messages first is how you avoid needing it.

Related reading

• What to do if you clicked a phishing link
• Is this email a scam? How to check if it's real or phishing
• How to protect elderly parents from online scams