Most people do the same thing with a scam email: roll their eyes, delete it, and move on. Understandable. But deleting is a missed chance. That two-minute report you skip is exactly what helps a mail provider block the sender, gets a fake bank site taken down, and keeps the next person, maybe your own parent, from clicking it.
Reporting is easier than people think, and you never need to have lost money to do it. Here is where each type of scam goes, and how to send it off in a minute or two.
Key takeaways
- Reporting phishing helps providers block senders and take down fake sites, protecting people beyond just you.
- Each channel has a home: emails, texts, calls, and fake websites all go to different places.
- Use the built-in “report phishing” buttons in Gmail, Outlook, and Apple Mail first, they are one tap.
- Forward scam texts to the 7726 short code and file bigger fraud with your national authority.
Why bothering to report actually matters
It is easy to assume your single report vanishes into a void. It does not. Mail providers use aggregated reports to train the filters that catch the next wave, so every “report phishing” tap makes the whole system smarter.
Reports also give agencies the volume they need to act. When thousands of people flag the same fake delivery text, that pattern becomes a case, and cases are what get numbers shut down and sites removed. Your report is one data point in something much larger than your inbox.
Reporting phishing emails
Your email app almost certainly has a dedicated button for this, and using it is far better than just deleting, because it sends the full message headers to the provider.
The one-tap buttons
In Gmail, open the message, tap the three-dot menu, and choose “Report phishing.” In Outlook, use the “Report” option and pick phishing. In Apple Mail, you can move it to Junk, and on iCloud you can forward suspected phishing to Apple’s abuse address. These built-in tools are the fastest and most useful first move.
Reporting as “phishing” is different from marking as “spam.” Spam is annoying junk mail. Phishing is a deliberate attempt to steal your details or money. Choosing “phishing” routes the message to the team that actually investigates fraud, so pick it when the intent is to trick you.
Forwarding to a reporting service
Beyond your provider, you can forward phishing to central services. In the United States, the Anti-Phishing Working Group accepts forwards at [email protected], and suspected IRS impersonation goes to [email protected]. In the United Kingdom, forward scam emails to [email protected], run by the National Cyber Security Centre.
Reporting scam texts and calls
Text and phone scams have their own quick channels, and they are worth memorizing because these arrive at the worst moments.
| Scam type | Where to report | How |
|---|---|---|
| Scam text | Your mobile carrier | Forward the message to 7726 (spells SPAM) |
| Scam text | In-app | Use “Report Junk” under the message |
| Scam call | National do-not-call or fraud line | File online with number and time |
| Phishing email | Your mail provider | “Report phishing” button |
| Fake website | Search engine and browser | Use “report a phishing site” tools |
The 7726 short code is the one to remember. It is free, works on most carriers, and forwards the scam text straight to the team that blocks these numbers. After you forward it, delete the original and do not reply.
On an iPhone, tap “Report Junk” beneath a message from an unknown sender to flag it to Apple and your carrier at once. On Android Messages, press and hold the message, then choose “Block and report spam.” Both take one tap and cover you in the moment.
Reporting fake websites
If a phishing link led you to a fake login or store, the page itself can be taken down. Google’s Safe Browsing team accepts reports of phishing pages, and browsers like Chrome and Firefox have a built-in “report” option under the help or menu section.
Reporting the site protects everyone who lands on that link after you. It is a small act with a wide reach, and it pairs naturally with knowing how to check a page in the first place.
When you file, include the full web address of the fake page, a short note of what it pretended to be (a bank login, a delivery tracker, a store checkout), and roughly when you found it. That handful of details is enough for the browser and hosting teams to act. You do not need screenshots for a website report, though they never hurt.
What makes a report useful
The best reports are boring and specific. A vague “this looks fishy” is far weaker than “this page at that exact address is impersonating my bank’s login.” Give the who, the what, and the where, and skip your own theories about who is behind it. The people receiving the report only need the raw facts to trace it.
Where the big reports go
For fraud involving real money loss or identity theft, go to your national authority. In the United States, that is the FTC’s fraud reporting site, which takes a full report in a few minutes and shares data with law enforcement. Many other countries run an equivalent, so a quick search for “report fraud” plus your country name will find the official one.
If you did lose money or hand over details, reporting is just one part of a wider response. Walk through the full sequence in our guide to scam recovery steps after you got tricked, which covers freezing cards and securing accounts alongside reporting.
And to catch these before they ever reach the reporting stage, sharpen your instincts with our walkthrough on spotting a phishing email before you click and the wider beginner’s guide to spotting scams and phishing.
Your afternoon checklist
- Find the “report phishing” button in your email app and try it on one obvious junk message.
- Save 7726 as a contact named “Report Spam” so forwarding a scam text is instant.
- Learn your phone’s one-tap “report junk” or “block and report spam” option.
- Bookmark your country’s official fraud reporting page.
- Forward the next phishing email you get to a central reporting address instead of deleting it.
- Report any fake website you stumble onto through your browser’s built-in tool.
- Tell one family member about the 7726 code and the report button.
You will never see the person your report protects, and that is fine. Every flag you send makes the filters a little smarter and the scammers’ job a little harder. Deleting quietly is easy; reporting is the version that actually fights back.
