Report a Scam Email

Got a suspicious email? Don't click anything in it. Check the link below, then report the email so the sender gets shut down.

How to report a scam email

The fastest, highest-impact step is your email provider's own report button. It trains the filter and pulls the sender down. Then escalate.

  1. Use the built-in report button. In Gmail, open the message, tap the three dots, choose "Report phishing" or "Report spam." Outlook has "Report" on the ribbon. This beats deleting.
  2. Forward it to the anti-phishing network. Send the full email to [email protected]. If it impersonates a company, forward it to that company's abuse address too (most publish one).
  3. Report to your national body. US: file at reportfraud.ftc.gov. India: cybercrime.gov.in, and call 1930 if money was lost.
  4. Check any link first. Paste it above. If it's malicious, ScamX flags it and adds it to a public database so the next person is warned.

Is this email a scam? Quick checks

  • The address doesn't match the name. "Netflix" from [email protected] is fake. Read the domain carefully.
  • It wants urgent action. "Verify in 24 hours or lose access." Real companies don't work on threats.
  • A link that hides its real destination. Hover to preview it. If it doesn't go where it claims, don't click.
  • Attachments you didn't ask for. Invoices, "documents," or files that want macros enabled.
  • Generic greeting, odd grammar. "Dear Customer" plus small mistakes is a classic tell.

Frequently asked questions

Is it dangerous to open the email?

Opening it is usually fine on a modern client. The danger is clicking links, opening attachments, or replying. Report it without interacting.

I replied or clicked a link. What now?

If you entered a password, change it everywhere you reused it and turn on two-factor authentication. If you shared card or bank details, call your bank. If it was a work account, tell IT.

Will reporting stop the sender?

One report rarely does. Thousands do. Report buttons and the anti-phishing network use volume to blacklist senders and take down the sites they link to, often within hours.