How to report a phishing site to Vercel

How to reach them

Vercel owns the parent domain of these addresses, so it can remove a page on any of them directly:

• *.vercel.app

• Choose Phishing or malware as the abuse type

Reporting to Vercel, step by step

1. Open the 'Report abuse on Vercel' form at https://vercel.com/abuse. Vercel describes it as the place to report illegal or malicious activity on a site deployed on Vercel.
2. Fill in your full name and email address.
3. Under 'Abuse type' choose 'Phishing or malware'. The other choices are copyright infringement (DMCA), trademark violations and Other.
4. Complete the further details the form asks for, giving the full address of the scam page, whether that is a vercel.app link or a custom domain.
5. Before pressing 'Submit report', Vercel asks you to confirm you have read its Privacy Notice and have a bona fide belief that the information in your report is accurate and complete.

What Vercel asks you to include

• Vercel's form asks for your full name, your email address and an abuse type.
• Vercel asks you to confirm a bona fide belief that the information and allegations in your report are accurate and complete.

What Vercel can do

• Vercel's Terms of Service say it may remove or disable any of a customer's content at any time, including after claims or allegations from third parties or authorities.
• Vercel's Acceptable Use Policy says that if Vercel reasonably believes a customer or their users are breaking the policy, it may restrict, suspend or terminate their access to its services immediately upon notice.
• Vercel's terms say it may use tools that detect patterns of abuse, investigate, and then prohibit any use it believes breaks its rules.

What Vercel cannot do

• Vercel's terms say it has no obligation to monitor how customers use its services, so a scam deployment may stay live until someone reports it.
• Vercel can take down a deployment on its platform. If the scam uses a custom domain, the domain registration stays with whichever registrar sold it.

What happens after you report

• Under its Acceptable Use Policy, Vercel's enforcement against a customer takes effect upon notice to that customer, so the account holder is told when action is taken.
• Vercel's abuse page does not say whether it replies to the person reporting, or how quickly it acts.

Write the report

Paste the link, phone number or email address and we'll write the message for Vercel. You send it yourself.

Not sure who hosts the site?

Scan it: we'll identify the host and registrar and give you the routes that apply.