How to Report a phishing email
Here is the practical, step-by-step guide to report a phishing email. It is built from the methods that have actually worked for ScamGuard users — not generic advice. Skip the recommended steps in order and you can usually finish in under 15 minutes.
Frequently asked questions
How long does it take to report a phishing email?
Most users finish in 10–30 minutes. Some steps — like a credit freeze or carrier-side block — take effect immediately; others (FTC and BBB reports) start an investigation that can take weeks but matter for reimbursement.
Does it cost money to report a phishing email?
No. Every step on this page uses official free services. Anyone asking for upfront payment to report a phishing email is itself a scam — these are exactly the operators we warn about across ScamGuard.
Should I report a phishing email myself or hire a service?
Do it yourself. Recovery services that promise to report a phishing email on your behalf are mostly fraudulent — the FTC has warned about them repeatedly. The official agencies only accept reports from the victim.
What if I'm not in the United States?
Most steps still work — the bank, carrier, and platform actions are global. For government reporting, swap the FTC/FBI/BBB links for your country's equivalent: Action Fraud (UK), CAFC (Canada), Scamwatch (Australia), Polizei (Germany), etc.
Is phishing emails a permanent solution?
It addresses the immediate threat. To stay safe long-term, also enable 2FA on every account, use a password manager, monitor your credit, and review the related guides linked below.
Related guides
Report what you saw
Every report helps the next person spot the scam in seconds. It's anonymous and takes under a minute.
Report a scam