How to report a phishing site to Fastly

To report a phishing or scam site to Fastly, email [email protected] or use Fastly's report abuse form.

CDN: fronts the site. Fastly forwards abuse reports to its customer.

Fastly is a content delivery network and edge cloud company. Fastly says it 'primarily operates as an intermediary to cache and deliver content hosted by others' for its subscribers, so a phishing site that shows a Fastly IP address is usually stored on another company's server with Fastly in front of it.

Fastly's Acceptable Use Policy forbids using its services for fraudulent purposes and to impersonate another person or company. Section III of that policy explains how anyone can report a breach.

To check that Fastly is involved, run an IP lookup on the scam site. If the address belongs to Fastly, report here, but also try to find and report to the real hosting provider.

How to reach them

Abuse email Report abuse form

List the exact URLs hosting the content
Write in English and say how you tried to contact the site owner
Fastly forwards reports to its customer
Give an email address the customer can use to contact you

Reporting to Fastly, step by step

Fastly's policy asks reporters to document their efforts to contact the subscriber directly. Note any attempt you made to reach the site owner; if there was no way to do so, say that.
Email [email protected], the address in Section III of Fastly's Acceptable Use Policy. Fastly also accepts post at: Attention: Abuse, Fastly, Inc., P.O. Box 78266, San Francisco, CA 94107.
Write the report in English, list each exact URL showing the scam, and include an email address the Fastly customer can use to contact you. Fastly's policy asks for all three.
Fastly's DMCA and DSA page also links a webform at https://support.fastly.com/s/report-abuse-case. That page is mostly about copyright and EU Digital Services Act notices.
Send the same URLs to the site's real host as well. On its DMCA and DSA page Fastly recommends sending notices directly to the originating site.

What Fastly asks you to include

The exact URL or URLs hosting the content, as Fastly's policy requires.
A record of your efforts to contact the Fastly subscriber directly.
A report written in English.
An email address that lets Fastly's subscriber contact you.
For a formal EU DSA notice, Fastly asks for a substantiated explanation of why the content is illegal, the exact URLs, and contact details including your name.

What Fastly can do

Fastly says it will promptly forward an Acceptable Use Policy report to the subscriber concerned.
Where Fastly is acting as the hosting service rather than a cache, its DSA page says it will deal with the content in line with Article 16 of the Digital Services Act.

What Fastly cannot do

Fastly states that it is unable to remove content hosted by its customers.
Fastly says that, as a caching provider, storage and removal of cached content happens automatically based on its subscribers' actions. It does not describe deleting a subscriber's page itself.

What happens after you report

Fastly forwards your report to its subscriber. Because Fastly asks for your email so the subscriber can contact you, assume the site's operator may see that address and use one you are happy to share.
Fastly does not publish a response time or say whether it will tell you what the subscriber did.

Write the report

Paste the link, phone number or email address and we'll write the message for Fastly. You send it yourself.

Not sure who hosts the site?

Scan it: we'll identify the host and registrar and give you the routes that apply.

Scan a website

Checked against Fastly's own pages on 2026-10-20: