Free Guide to Reporting Scams Online

Understanding Online Scams and How They Work

Online scams have grown into a serious problem affecting millions of people each year. According to the Federal Trade Commission (FTC), consumers reported losing over $8.8 billion to fraud in 2022, with online scams accounting for a significant portion of these losses. These scams range from phishing emails that steal passwords to elaborate schemes that trick people into sending money to criminals.

Scammers use various tactics to deceive people online. They might pretend to be from your bank, a popular company you know, or a government agency. They create fake websites that look nearly identical to real ones, send convincing emails, or contact you through social media and text messages. The goal is always the same: to steal your money, personal information, or both.

Common types of online scams include romance scams (where criminals create fake dating profiles to build trust before asking for money), tech support scams (where pop-up ads claim your device has a virus and direct you to call a number), imposter scams (where someone pretends to be from the IRS, Social Security, or another agency), and prize scams (where you're told you've won something but need to pay fees to claim it).

Understanding how these scams operate is your first line of defense. Scammers are skilled at making their schemes seem legitimate. They use official-looking logos, mimic real government agency language, and create time pressure by claiming something urgent needs your attention. Recognizing these red flags can help you spot scams before you lose money or have your identity stolen.

Practical Takeaway: Learn the common characteristics of scams in your area. Visit the FTC's website (reportfraud.ftc.gov) to read actual scam reports and see what tactics are currently being used against people.

Recognizing Warning Signs of Online Scams

Certain warning signs appear in most online scams. Learning to spot these signs can help you avoid becoming a victim. One of the most common red flags is unexpected contact asking for personal information or money. Legitimate companies and government agencies rarely contact you first asking for sensitive details like Social Security numbers, bank account information, or passwords.

Pressure to act quickly is another major warning sign. Scammers often claim there's a limited-time window to respond, threatening account closure, legal action, or loss of a prize if you don't act immediately. They might say your package is being held at customs, your tax refund is ready to claim, or someone has committed fraud in your name—and you need to verify information right now.

Poor grammar and spelling in emails or websites is frequently a sign of a scam. While not all scams contain these errors, many do because they're sent from overseas. If an email from your bank or a major company contains obvious typos or awkward phrasing, be suspicious. Legitimate organizations typically have professional communications.

Payment requests that seem unusual are also warning signs. Scammers often ask you to pay through gift cards, wire transfers, cryptocurrency, or money apps like Venmo or PayPal. They avoid payment methods that offer buyer protection. Be cautious if someone asks you to wire money, buy iTunes cards, or send cryptocurrency—these payment methods are nearly impossible to reverse if you've been scammed.

Requests to keep the interaction secret should immediately raise concerns. If someone tells you not to tell your bank, family members, or friends about the transaction, it's almost certainly a scam. Legitimate organizations never ask you to hide your communication with them.

Practical Takeaway: Create a mental checklist: Am I being pressured to act quickly? Am I being asked for passwords or account numbers? Am I being told to keep this secret? Am I being asked to pay through unusual methods? If you answered yes to any of these, pause and verify before proceeding.

Where and How to Report Online Scams

Multiple government agencies and organizations accept scam reports. The Federal Trade Commission (FTC) operates the main reporting center for consumer fraud. You can report scams at reportfraud.ftc.gov, which is the official federal consumer reporting website. The FTC accepts reports about any type of fraud or scam, including online schemes, phishing attempts, and identity theft. When you report, the FTC collects information that helps law enforcement agencies identify patterns and pursue criminals.

The Internet Crime Complaint Center (IC3), a partnership between the FBI and the National White Collar Crime Center, accepts reports at ic3.gov. This site is particularly useful for reporting cybercrimes like hacking, phishing, and online fraud. IC3 forwards reports to law enforcement agencies and can help coordinate investigations across different states.

If you've been targeted by a scam impersonating a specific company, report it directly to that company. Contact them through their official website (not through any link in a suspicious email or text). Most major banks, technology companies, and retailers have fraud reporting sections on their websites. Reporting to the company helps them improve their security and warn other customers.

For scams involving government impersonation, report to the specific agency being impersonated. If someone claiming to be from the IRS contacted you, report it to the Treasury Inspector General for Tax Administration at tigta.gov. If someone impersonated Social Security, report it to the Office of Inspector General at oig.ssa.gov. For Medicare scams, contact the Department of Health and Human Services at healthcarefrud.gov.

You can also report to state authorities. Most states have an attorney general's office with a consumer protection division that accepts complaints. Search for your state's attorney general website to find their scam reporting process. Local police departments can also take reports, though they may not have resources to investigate every case.

When reporting, gather as much information as possible: dates of contact, copies of emails or texts, website URLs, phone numbers used by the scammer, and details about what happened. Keep records of all communication with the scammer. The more information you provide, the more useful your report becomes to investigators.

Practical Takeaway: Bookmark reportfraud.ftc.gov in your browser right now. If you ever suspect a scam, you'll know exactly where to go and won't waste time searching. Screenshot suspicious messages before reporting them, as they may be deleted.

Documenting Evidence Before You Report

Proper documentation makes your scam report more valuable to investigators. Start by saving everything related to the scam. If you received an email, don't delete it—take screenshots showing the sender's address, subject line, content, and any links. For text messages or social media messages, screenshot the entire conversation including the date and sender information.

For phishing websites, note the exact URL you visited (not the company's real website, but the fake one scammers created). Screenshot the page as it appeared. Note the date and time you visited it, and what information the site requested from you. If you visited a fake banking website, for example, document what it looked like and what login information it was trying to capture.

Write down details about any phone calls you received. Record the phone number that called you (check your phone's call log), the date and time of the call, what the person said they were calling about, and what information or money they requested. If you recorded a call (where legal in your state), save the recording.

If money was involved, document the financial trail. Keep records of exactly how much money was sent, what date it was sent, what method was used (wire transfer, gift card, cryptocurrency, etc.), and where the money was directed. If you sent gift card codes, money app transfers, or cryptocurrency, save evidence of these transactions.

Preserve information about any account access or identity concerns. If the scammer gained access to your email or bank account, note what changes they made, what information they accessed, and what steps you took to regain control. If you believe your identity was compromised, document any suspicious accounts opened in your name.

Create a simple timeline showing the sequence of events. This helps you remember details and makes your report clearer to investigators. For example: "June 15, 2024—received email claiming to be from my bank; June 15—clicked link and entered login information; June 16—noticed suspicious charges on my account."

Practical Takeaway: Keep a dedicated folder on your computer or phone for scam-related screenshots and documents. Even if you're not sure whether something is a scam, saving the evidence means