How to report a website (step-by-step guide)

There are millions of websites online, and unfortunately, many of them engage in scams, fraud, or other harmful activities. If you come across a malicious website, it’s important to report it right away. Internet law and cybersecurity regulations can’t keep up with the ever-evolving web, so reporting these threats can help make the web safer for everyone.

In this guide, I’ll help you identify violations, collect evidence, and submit reports to Google, hosting providers, domain registrars, and law enforcement. I’ll also cover legal considerations, whistleblower protections, and steps to take if a site stays active.

Why you should report a website

The fewer malicious websites you come across, the less likely you are to fall victim to scams. Keeping the internet safe is a shared responsibility, and by reporting fraudulent, phishing, or illegal websites, you help prevent identity theft and harmful content from spreading. In some cases, your efforts can even aid law enforcement in shutting down dangerous sites.

Even if your report doesn’t lead to law enforcement taking action, notifying the search engine, hosting providers, or domain registrars can still make a difference. These organizations can remove harmful sites from search results, suspend hosting services, or revoke domain registrations, limiting the number of people these malicious websites can reach.

What happens when you report a website?

In most cases, the site gets flagged for review, and the outcome depends on where you submit the report. For example, if you report a phishing site to Google, it may result in the website being removed from search results. Reporting the same site to the hosting provider might result in the site being taken down. If the website involves illegal content or copyright violations, law enforcement may also get involved.

Keep in mind that website reports are usually processed by automated systems first, so it may take some time for a human to fully review the issue. Additionally, it may take more than a single report for the site to be reviewed—spreading the word and getting others to report it can speed things up. 

Is it legal to report a website?

Yes, reporting a website is legal, as long as you are doing it in good faith. That said, false or malicious reports could lead to legal consequences, including defamation claims or penalties for filing fraudulent complaints.

Can you report a website anonymously?

Yes, most platforms allow you to report a website anonymously, which can be helpful if you’re worried about potential retaliation, like an unfair defamation lawsuit. However, anonymous reports can slow down the investigation since there’s no way for authorities to follow up with you, especially in cases that require legal action or further details.

Step 1: Identify the issue on the website

Before reporting a malicious website, make sure you’ve clearly identified the issue. This reduces delays and improves the chances of effective actions being taken—whether that means a site is flagged, taken down, or referred to the proper authorities.

Common reasons to report a website

Websites can be reported for various reasons, from scams to harmful content. Below are some of the most common issues that warrant a report.

Fraudulent or scam websites

These sites trick users into making purchases or investments under false pretenses. They’re fairly widespread, but spotting red flags is easy—watch for poor design, suspicious links, grammar mistakes, and unrealistic offers. Even if a site looks polished, it may sell counterfeit goods, run fake promotions, or impersonate legitimate businesses to steal money. Learn about common scams and how to avoid them.

Phishing and spoofing sites

Some fraudulent websites imitate trusted platforms, like banks or email providers, to steal login credentials or financial details. They often use similar domain names, logos, and layouts to trick users. To stay safe, it’s best to learn how to recognize and avoid phishing links.

Websites with malware or viruses

Malicious sites can spread malware like viruses, spyware, and ransomware that can infect your device, steal information, or lock your accounts for ransom. If you come across one, don’t click anything—leave immediately and report it.

Copyright infringement and DMCA violations

If a website is illegally sharing copyrighted content like movies, music, or software, you can file a Digital Millennium Copyright Act (DMCA) request with search engines, hosting providers, or a law enforcement agency. The DMCA is a U.S. law that protects copyright holders by letting them request the removal of unauthorized content from websites and search results.

Reporting policy violations helps protect digital rights and ensures creators get the recognition and compensation they deserve.

Inappropriate, illegal, or harmful content

Websites promoting hate speech, violence, child exploitation, illegal drug sales, or human trafficking should be reported to law enforcement, NGOs, and regulatory bodies.

Keep in mind that reporting hate speech can be complicated, especially in countries like the U.S., where the First Amendment strongly protects free speech. However, speech that incites violence, expresses a serious intent to cause harm, or severely targets individuals—such as doxxing someone’s location with threats—is not protected.

Sites violating advertising rules

Websites involved in deceptive advertising, internet fraud, or misleading endorsements may violate platform policies. If you come across such a site, you can make a cybercrime complaint through the search engine’s feedback section. 

Step 2: Gather evidence before reporting

Your report should include solid evidence, as this strengthens your case and improves the chances of action being taken.

How to take screenshots for website reports

It’s important to capture images of the site as evidence. On Windows, you can press Win + Shift + S to open the Snipping Tool and select the area you want to capture. On macOS, press Cmd + Shift + 4 to snip a specific section or Cmd + Shift + 3 for a full-screen screenshot.

For more precise editing and annotation, tools like Lightshot and Snagit offer extra features such as easy sharing, custom cropping, and markup options, making them useful for detailed website reports.

What information should you collect?

Before sending a report, make sure your screenshot includes the website’s URL, content, error messages, or any suspicious elements, along with the date and time. If the issue involves transactions, include receipts, emails, or chat logs. If applicable, provide IP addresses or security warnings from antivirus programs.

In the email or form, clearly explain what is wrong with the website and highlight any harmful consequences caused by its content. If possible, include information about the website owner and any relevant communication or logs, such as emails or messages, to strengthen your report.

Tools for verifying website ownership or hosting

The tools below can help you uncover a website’s ownership or hosting details, though some information may be hidden based on the domain owner’s privacy settings. Before you begin, check out these tips on identifying safe websites. If the site seems unsafe, use these tools to find out more:

• Whois lookup: Tools like Whois allow you to check the domain registration details, including the owner’s information (if public), registration date, and hosting provider.
• DNS lookup tools: Services like MXToolbox help identify DNS records, including IP addresses and hosting provider info.
• IP lookup: Tools like ExpressVPN’s IP checker can help you identify a website’s IP address and geolocation, which may give clues about the hosting provider.
• SSL certificate checker: Tools like Qualys SSL Labs can verify SSL certificates and provide insights about the website’s server, which may indicate ownership or hosting provider.
• Web hosting lookup tools: Websites like Hosting Checker can help determine a website’s web hosting provider.
• Google Search Console: If you have access to the site’s Google Search Console, it can provide ownership verification via various methods, such as HTML tag placement, DNS record changes, or Google Analytics access.

Step 3: How to report a website to different authorities

Different platforms and organizations have their own processes for reporting harmful or malicious websites. Below are the steps for some of the most commonly used reporting systems.

How to report a website to Google

If you’d like to report a website to the Google Safe Browsing team, follow these steps:

1. Go to Google’s Safe Browsing report page.
2. Enter the website’s URL.
3. Click the box to complete the CAPTCHA.
4. Fill out additional information about the malicious website in the description box.
5. Click on the Submit button to file a report.

You can use Google’s Transparency Report to track reported sites anonymously. If Google determines a website violates its policies, the site’s status will be updated in the report. The Transparency Report also provides insights into how policies and actions of governments and corporations affect privacy, security, and access to information online. 

How to report a website to Microsoft

To report a website to Microsoft Security Intelligence, follow these steps:

1. Go to the Microsoft Security Intelligence page.
2. Paste the website’s URL in the Which site do you want to report? field.
3. Under What threats did you find on the site?, select either Phishing or Malware or other threats to describe the issue.
   
   
4. Choose the website’s primary language.
5. Complete the CAPTCHA.
6. Click the Submit button to file your report.

How to report a website to hosting providers

If a website is hosted on a specific server, reporting it to the hosting provider can lead to takedowns. Here’s how to do it: 

1. Use a hosting provider lookup tool to identify the host.
2. Gather evidence of the issue.
3. Visit the hosting provider’s website.
4. Fill out the reporting form (the process might vary depending on the provider).
5. Submit your abuse report.

How to report a website to domain registrars

Domain registrars manage website domain names. As such, if a site is violating policies (e.g., by phishing or fraud), you can report it by doing the following:

1. Identify the domain registrar using a lookup tool.
2. Collect evidence and go to the registrar’s website.
3. Locate the reporting section and complete the form (this process might vary depending on the registrar).
4. Submit your report.

How to report a website to law enforcement or government agencies

Reach out to your country’s law enforcement or government agencies to report websites with harmful or illegal content. For example, here’s how to report a website for illegal content in the U.S.:

To report a website to the Federal Trade Commission (FTC), follow these steps:

1. Go to FTC’s ReportFraud page (reportfraud.ftc.gov).
2. Click on the Report Now button.
   
   
3. Choose the option that best describes the issue. If none apply, select Something else and click on the Continue button.
4. Then, hit the Submit button to file your report.

You can also report a website to the Internet Crime Complaint Center (IC3), but keep in mind that you can’t do it anonymously. Once you’re ready, follow these steps:

1. Go to the IC3 site (ic3.gov).
2. Click on the File a Complaint button.
3. Accept the Terms and Conditions.
4. Fill out the necessary information in the description box.
   
   
5. Select the option that best matches the issue with the website.
6. Include details about the victims, any financial transactions involved, and a description of the incident. 
7. Add your digital signature and click the Submit Complaint button.

If you’re in the European Union, you can report an illegal site through Europol (europol.europa.eu/report-a-crime/report-illegal-content-on-the-internet). If you’re in the U.K., you can use Action Fraud (actionfraud.police.uk)—but note that you’ll need to create an account to submit a report.

How to report a website to Amazon

If you come across a dishonest seller on Amazon and want to report their site, it’s a simple process:

1. Go to the product page for the fraudulent product (note: you want the product page rather than the seller’s Amazon storefront).
2. In the Additional Details section, select Report an issue with this product or seller.
3. Under What’s wrong with this page?, select the relevant issue.
   
   
4. Under What is the issue?, select the relevant issue and fill in the details.
5. Check the box confirming that you’re acting in good faith, then click Submit.

How to report a website to Facebook

If you’re a business and you have a Meta Business Suite, you can visit the Brand Rights Protection section to report any brands infringing on your trademark.

If you’re a regular user and you want to report a page, here’s how:

1. Visit the page you want to report, and under the cover photo, select the three dots.
2. Select Report Page.
3. You’ll be asked what you want to report—click Something about this Page.
   
   
4. Select the reason you’re reporting (e.g., Scam, fraud, or false information).
5. Depending on what you select, Meta might ask you to submit a report. Otherwise, they’ll just log your feedback on the page.

If you want to report a site to another social media platform, they all have similar built-in reporting features.

Legal consequences and protections for reporting a website

Reporting a website is generally safe if done in good faith. However, understanding the legal implications can help you avoid risks while ensuring your report is effective.

Can a website be taken down for illegal content?

Yes, but it depends on the violation. Hosting providers and law enforcement can remove sites with illegal content, such as child exploitation, fraud, or copyright infringement. However, not all reports result in immediate takedowns, especially if legal action is required.

Will reporting a website get me in trouble?

No, as long as you provide accurate information and act in good faith. Most platforms and authorities offer anonymity, and the goal is to help keep the internet safe. However, it’s important to ensure your report is accurate and based on legitimate concerns. Submitting false or malicious reports can have legal consequences, such as defamation claims.

Whistleblower protection and anonymity laws

Many countries have laws that protect individuals who report illegal activities. Platforms like Google Safe Browsing and cybersecurity agencies allow anonymous reporting. 

If you’re concerned about retaliation, check your country’s whistleblower protection and Good Samaritan laws, which protect those who report illegal activities online. Alternatively, you can use privacy-focused reporting options.

Consult legal counsel if you’re concerned about potential risks when reporting a website. Responsible reporting helps create a safer online space while staying within legal limits.

Alternative actions if reporting doesn’t work

Not all reports lead to immediate action. If a website remains online, there are additional steps you can take to limit its impact and protect yourself.

What if the website remains online after reporting?

Some sites evade takedowns by switching domains or using offshore hosting. If the site remains active, consider reporting it to multiple authorities, such as search engines, hosting providers, and cybersecurity organizations. 

You can also follow key internet privacy practices and spread awareness through online forums or watchdog groups to help expose the site. This makes it harder for the site owners to spread the malicious domain, reducing its effectiveness and the viability of their efforts. 

How to contact internet watchdog organizations?

To contact internet watchdog organizations, follow these steps:

1. Identify the appropriate organization: There are various organizations focused on different issues. For example:

• • Anti-Phishing Working Group (APWG) for phishing-related emails or sites.
  • eConsumer for cybercrime-related issues.
  • Internet Matters for online safety and security, especially for children.
  • The Electronic Frontier Foundation (EFF) for broader internet safety concerns.

2. Visit the website: Each organization typically has a Contact or Report section. On some sites, you may need to send an email to report the issue.
3. Fill out the report abuse form: Provide as much detail as possible, including screenshots, URLs, and a description of the issue.
4. Follow up: Some organizations allow you to track the status of your report.

Remember, many of these organizations focus on specific issues, so be sure to choose the right one for the problem you’re reporting.

Can legal action be taken against a website?

Yes, legal action can be taken against a website if it violates laws, such as distributing illegal content, engaging in fraud, or infringing on copyrights. Depending on the nature of the violation, you can report the website to relevant authorities, like law enforcement or regulatory bodies, who may initiate legal proceedings.

In some cases, individuals or organizations can also pursue civil lawsuits to seek damages or force the website to shut down. However, the process can be complex and varies depending on the jurisdiction.

How to protect yourself from a website that cannot be removed?

If a website can’t be removed, take steps to protect yourself:

• Block the site: Use browser settings or extensions to prevent it from loading. If you’re using Chrome, you’ll need to download an extension like Block Site or SiteBlock from the Chrome Web Store. After installing, simply add the website URL to the extension’s block list, and the site will no longer be accessible.
• Enable security features: Turn on browser safety tools to detect and block malicious sites.
• Avoid interaction: Don’t click on links, enter personal information, or download anything. The more you interact with the site, the higher the chance of your device getting infected with viruses or malware.
• Report it regularly: Keep reporting the site to search engines, hosting providers, or relevant authorities.
• Notify cybersecurity organizations: Report the site to organizations like CERT (Computer Emergency Response Team) to help track and warn others about potential threats.

These steps help reduce the risks posed by harmful websites. If you’ve already interacted with the site, consider using a dark web scan to check for leaked information. 

Making the internet safer

By reporting harmful websites and taking the necessary precautions, you help create a safer online environment for everyone. While reporting is vital, staying informed and proactive in protecting yourself also plays a key role.

How to protect yourself from fraudulent websites

To protect yourself from fraudulent websites, follow these tips:

1. Check the website’s URL: Ensure the site uses “https” and look for a padlock symbol, indicating it’s secure. Be cautious of misspelled or strange domain names.
2. Use security tools: Install antivirus software, anti-malware tools, scam alert extensions, and a firewall to block malicious sites and protect your device from infections. You could also use ExpressVPN, which offers malicious site blocking to prevent access to harmful websites. Additionally, ExpressVPN’s ad blocker helps block shady ads that could lead you to malicious sites.
3. Look for contact information: Legitimate websites provide clear contact details. If this information is missing or seems suspicious, be cautious.
4. Avoid clicking on suspicious links: Never click on links from unknown emails or pop-ups. They may lead to phishing sites.
5. Read reviews: Check reviews and ratings from other users before making any purchases on a website or sharing personal information. You can also take advantage of website reputation checkers like APIVoid and Spamhaus.
6. Educate yourself: Follow best practices to stay safe online. Be cautious of websites that appear suspicious or offer deals that seem too good to be true. Look out for red flags, such as poor design or mismatched URLs. Also, check if the website is listed among known scam shopping sites.
7. Be cautious with personal info: Only share sensitive information on trusted, well-known websites.

Additionally, some fake sites may claim to have moved all operations to a dedicated app and try to redirect you to download it. That’s why it’s important to know how to spot fake apps as well.