How do I report a scam website?

Google Safe Browsing is one of the fastest tools for protecting others from scam websites. Go to safebrowsing.google.com/safebrowsing/report_phish and submit the URL. Google adds confirmed phishing and malware sites to a blocklist used by Chrome, Firefox, and Safari, meaning billions of users will see a red warning page before accessing the site.

In the UK, report to the NCSC at report.ncsc.gov.uk. The NCSC's takedown service has removed millions of malicious URLs by working directly with hosting providers and registrars. In the US, report to the FTC at ReportFraud.ftc.gov and to the Anti-Phishing Working Group at apwg.org.

For the fastest takedown, identify the domain registrar using a WHOIS lookup at lookup.icann.org. Most registrars have an abuse reporting form linked from their homepage. Submit a concise abuse report explaining that the domain is being used for fraud, and include the specific URLs. Registrars can suspend a domain within hours of receiving a credible report.

Also check whether the website is copying a legitimate brand. If so, notify the brand's abuse team, who have dedicated legal resources to pursue takedowns. Many banks, retailers, and financial institutions have specialist teams that can act faster than general registrar processes.