How to report a phishing site to Amazon AWS

How to reach them

• Include the URL and a description of the content
• AWS Support can't help with abuse reports; use the form or the Trust & Safety address
• Write in English if you can

Reporting to Amazon AWS, step by step

1. Open the AWS abuse form at support.aws.amazon.com/#/contacts/report-abuse, titled 'Report Abusive Activity from Amazon Web Services Resources'. AWS says the form gets faster case processing.
2. Step 1 of the form asks for the abusive activity details. Step 2 asks for your contact information.
3. If you cannot use the form, or have many events to report, email [email protected] instead.
4. Write in English if you can. AWS Trust & Safety prefers English and also accepts French from EU authorities.
5. Send one report per issue. AWS asks you not to file more reports about the same problem while the first is open; add new details in the email thread that carries your AWS case number.

What Amazon AWS asks you to include

• For phishing and other content: the specific URLs, and the reasons you think the content breaks the AWS Acceptable Use Policy. If you believe it is illegal, say why and name the laws.
• The form stresses identifying the resource: AWS says customers can occupy the same host at different times of day, so give the IP address, date, exact time (to within 1 minute) and time zone.
• If you email from an address that cannot receive replies, put a contact email in the body.
• Attachments go by email to [email protected], and only if critical. For many IP addresses, AWS wants a CSV with IP, ISO 8601 date and time, and log lines.
• AWS warns it may not process reports that are spam or contain offensive or vulgar language.

What Amazon AWS can do

• AWS Trust & Safety investigates, notifies the customer and works with them to restore compliance with the AWS terms.
• Under its Acceptable Use Policy, AWS may remove or disable access to any content or resource that breaks the policy.
• If a customer cannot or will not remove prohibited content, AWS may suspend, aiming for the least invasive step by disabling only the specific resources involved.
• AWS's customer guidance says a customer who ignores an abuse notice for 24 hours may have resources blocked or the account suspended.

What Amazon AWS cannot do

• AWS Support cannot help with abuse reports or Trust & Safety notices.
• AWS does not disclose customer information to people who report abuse.
• AWS has no API for abuse reports.
• Trust & Safety acts on AWS resources. A scam domain registered elsewhere stays registered unless its registrar acts.

What happens after you report

• You get an automated confirmation, then Trust & Safety reviews the report and may email you for more information.
• AWS mediates between you and the customer where needed, and many cases end with the customer removing the content.
• A customer who disagrees can explain why, and Trust & Safety reviews that response.
• AWS sends status updates as they become available and emails you when the report is resolved.

Write the report

Paste the link, phone number or email address and we'll write the message for Amazon AWS. You send it yourself.

Is the domain also registered with Amazon Registrar (Route 53 domains)?

This page is about content on Amazon AWS's servers. If the domain name itself is registered with Amazon Registrar (Route 53 domains) (the Registrar line in a WHOIS lookup shows it), the registrar route is the one that can suspend the name. Report to both when the same company does both jobs.

Not sure who hosts the site?

Scan it: we'll identify the host and registrar and give you the routes that apply.