How to File a Complaint Against a Fake Website

Reporting a fake website accomplishes more than most people realise. Google Safe Browsing and Microsoft SmartScreen warnings appear in browsers for hundreds of millions of users, reports from consumers feed those warning systems. Domain registrars can suspend fraudulent domains. And FTC complaint data drives enforcement investigations.

Step 1: Report to the FTC

The FTC is the primary federal authority for consumer fraud.

Include the website URL, what it was impersonating or selling, what happened, and any financial loss. The FTC adds your report to the Consumer Sentinel database used by thousands of law enforcement agencies.

Step 2: Report to Google Safe Browsing

Google Safe Browsing powers the "Deceptive site ahead" warning in Chrome, Firefox, and Safari.

• Report: safebrowsing.google.com/safebrowsing/report_badware

Select the type of harmful content (phishing, malware, unwanted software) and submit the URL. Google reviews reports and adds confirmed phishing/malware sites to their blocklist.

Step 3: Report to Microsoft SmartScreen

Microsoft SmartScreen powers warnings in Edge and Internet Explorer.

• Report: microsoft.com/reportascam

Step 4: Report to the Anti-Phishing Working Group

APWG operates a database of phishing URLs used by browsers, security tools, and law enforcement.

• Email: [email protected], forward the phishing email or paste the URL

Step 5: Report to the Domain Registrar

Every website domain is registered through a registrar (GoDaddy, Namecheap, Google Domains, etc.). Registrars can suspend fraudulent domains.

To find the registrar:

1. Go to whois.domaintools.com and enter the domain
2. The WHOIS record lists the registrar
3. Go to that registrar's website and find their abuse reporting page (typically listed as "report abuse" in the footer)

Domain suspensions typically happen within 24 to 48 hours for clear cases of phishing impersonating well-known brands.

Step 6: Report to the Company Being Impersonated

If the fake website impersonates a real company (a bank, Amazon, the IRS), notify that company directly. Most major companies have dedicated phishing or fraud reporting contacts, search "[company name] report phishing" to find the correct address. Companies have legal teams and can pursue domain takedowns more aggressively than individual consumers.

If You Lost Money

Also file with the FBI Internet Crime Complaint Center:

• FBI IC3: IC3.gov

IC3 handles internet fraud cases and coordinates with international law enforcement for cross-border operations.