GUIDES

How to Report a Scam Online

Falling for a scam can feel overwhelming, but reporting it is one of the most important steps you can take. This guide walks you through collecting evidence, organizing it properly, and filing reports with the right authorities.

1. Stop and Document Everything Immediately

Before you change passwords, close accounts, or confront the scammer, preserve the evidence. Screenshots, URLs, emails, and chat logs can disappear quickly.

  • Take screenshots of the website, messages, and any payment pages.
  • Copy and save the full URL of any suspicious site.
  • Record dates, times, and the amount of any money lost.
  • Save emails with original headers if possible.
  • Note phone numbers, usernames, wallet addresses, or any contact details used by the scammer.

2. Organize Your Evidence with ScamTrace IQ

A disorganized folder of screenshots is hard to explain to an investigator. ScamTrace IQ turns scattered files into a structured, timestamped case.

How to build a case

  1. Open ScamTrace IQ and create a new case. Give it a clear name like "Phishing Email — June 2026".
  2. Add every URL you visited. The browser extension can capture the page title, URL, and a screenshot in one click.
  3. Log contacts: email addresses, phone numbers, usernames, crypto wallet addresses — anything the scammer used to reach you.
  4. Upload screenshots and notes. Each item gets a timestamp and a SHA-256 hash so integrity can be verified later.
  5. Export a PDF report when you are ready to file. The report includes a cover page, timeline, evidence list, and embedded hashes on every page.
  6. Export a ZIP package if the authority accepts bulk evidence. It contains the PDF, all screenshots, and a manifest file with per-file hashes.

Everything stays local in your browser. No cloud account is required, and no data leaves your device unless you choose to share the exported package.

3. Where to Report a Scam

Different scams go to different agencies. Filing with the right office increases the chance your report contributes to an investigation.

Federal Trade Commission (FTC)

Visit site

Best for: General fraud, identity theft, impostor scams, robocalls, and deceptive business practices in the United States.

  1. Go to reportfraud.ftc.gov and click 'Report Now'.
  2. Choose the scam category that matches your experience.
  3. Fill in your contact information and details about what happened.
  4. Attach your ScamTrace IQ PDF report or upload screenshots directly.
  5. Submit and save the confirmation number.

Internet Crime Complaint Center (IC3)

Visit site

Best for: Internet-facilitated crime including phishing, ransomware, cryptocurrency fraud, and hacking. Operated by the FBI.

  1. Visit ic3.gov and click 'File a Complaint'.
  2. Read the terms and confirm you understand IC3 is a reporting body, not an investigative promise.
  3. Enter victim information, financial transaction details, and the perpetrator's information.
  4. Upload your evidence package. IC3 accepts ZIP files and PDFs.
  5. Review and submit. You will receive a complaint ID.

FBI Crime Complaint Center

Visit site

Best for: Serious cybercrime, ransomware, large financial losses, or scams crossing state or international borders.

  1. Use the same IC3 portal for FBI-related cybercrime reports.
  2. Include all transaction records, wire receipts, and crypto transfer hashes.
  3. Be specific about amounts, dates, and any follow-up contact from the scammer.

Consumer Financial Protection Bureau (CFPB)

Visit site

Best for: Fraud involving banks, credit cards, loans, money transfers, or payment apps.

  1. Select the financial product or service involved.
  2. Describe the problem and any attempts to resolve it with the company first.
  3. Attach supporting documents including your ScamTrace IQ timeline.

Your Local Police Department

Best for: Scams involving in-person meetings, local businesses, or when you need a police report for insurance or bank claims.

  1. Call the non-emergency line or visit the station in the jurisdiction where you live.
  2. Bring a printed copy of your ScamTrace IQ PDF report.
  3. Request a case or incident number for your records.

Anti-Phishing Working Group (APWG)

Visit site

Best for: Phishing emails and spoofed websites. Reports help build blocklists and warn other users.

  1. Forward phishing emails to reportphishing@apwg.org.
  2. Include full email headers if you know how to extract them.
  3. Report phishing URLs through the APWG web form.

4. What to Include in Every Report

  • Timeline: When did you first encounter the scam? When did you lose money or data?
  • Financial details: Amounts, payment methods, transaction IDs, and wallet addresses.
  • Communication records: Emails, texts, DMs, or chat logs with the scammer.
  • Website evidence: URLs, screenshots of the site, and any terms or promises made.
  • Personal impact: How the scam affected you financially or emotionally.
  • ScamTrace IQ export: A PDF or ZIP package with hashed evidence for integrity verification.

5. Protect Yourself After Reporting

  • Change passwords for any accounts the scammer may have accessed.
  • Enable two-factor authentication on email, banking, and social accounts.
  • Monitor bank and credit card statements for unauthorized charges.
  • Place a fraud alert or credit freeze if personal information was stolen.
  • Do not engage further with the scammer — block numbers and report accounts on the platform where contact happened.

Start Your Evidence Case Now

The sooner you document everything, the stronger your report will be. ScamTrace IQ helps you organize evidence into a professional package ready for any authority.