How to Report an Online Scam: A Platform-by-Platform Guide

You spotted the scam before it could do real damage, or maybe you were not so lucky and lost money before realizing what happened. Either way, the next step matters more than most people realize: reporting it. Every unreported scam is a scam that continues to run, finding new victims daily. Yet studies consistently show that fewer than 15 percent of scam victims ever file a report, often because they do not know where to report, assume nothing will happen, or feel embarrassed about being targeted.

This guide breaks down exactly where and how to report scams across every major platform, communication channel, and government agency. The process is easier than you think, and your report has more impact than you might expect.

Why Reporting Matters More Than You Think

Individual reports may feel like drops in an ocean, but they aggregate into the data that drives enforcement action. When the FTC receives thousands of reports about the same phone number, email domain, or social media account, it triggers investigations that can shut down entire scam networks. Platform reports lead to account bans, content removal, and improvements to automated detection systems that protect millions of other users.

Reporting also creates a paper trail that can help you recover losses. Financial institutions, insurance companies, and law enforcement agencies all require documented reports as part of their fraud resolution processes. The sooner you report, the better your chances of recovering funds and limiting further damage to your accounts and identity.

Before You Report: Collecting Evidence

Before filing any report, take a few minutes to document everything. Screenshot all messages, posts, and profile pages associated with the scam before the scammer can delete them. Save email headers by viewing the full message source in your email client. Record phone numbers, dates, and times of any calls. If you made financial transactions, gather transaction IDs, confirmation emails, and bank statements.

If the scam involved a suspicious video or social media post, you can also scan it with Truvizy's free analysis tool to generate a detection report that documents what was found. This report can serve as supporting evidence when filing complaints with platforms and agencies, providing a technical assessment that goes beyond what a screenshot alone can convey.

Scan suspicious content with Truvizy to generate a detection report you can use as evidence when filing complaints.

Reporting on Social Media Platforms

Each major platform has its own reporting flow, but the general approach is similar. On the scam post or profile, look for the three-dot menu and select the report option. Choose the most specific category available, typically "fraud" or "scam" rather than generic options like "I don't like this." Specific categorization routes your report to the right review team and increases the likelihood of action.

On Facebook and Instagram, use the "Report" option on the post, profile, or message, then select "Scam or fraud." Meta's automated systems cross-reference reports across both platforms, so reporting on one often triggers review on the other. On TikTok, use the long-press report function on the video and select "Scam" under the "Fraud and scams" category. On YouTube, click the three-dot menu beneath the video and select "Report," then choose "Spam or misleading" followed by "Scams or fraud."

For X (formerly Twitter), tap the three-dot menu on the tweet and select "Report Tweet," then follow the prompts for "It's abusive or harmful" and "Deceptive identities." On LinkedIn, click the three-dot menu on the post or profile and select "Report" followed by "Scam, fraud, or fake." On WhatsApp, open the chat, tap the contact name, scroll down, and select "Report contact."

Reporting Email and Phone Scams

For phishing emails, most email providers allow you to report the message as phishing directly. In Gmail, click the three-dot menu and select "Report phishing." In Outlook, select "Report" then "Report phishing." This trains the provider's spam filters to block similar messages for all users. Additionally, forward the phishing email to the Anti-Phishing Working Group at reportphishing@apwg.org.

Phone scams, including robocalls and text message scams (smishing), should be reported to the FTC at reportfraud.ftc.gov and to your phone carrier. Most carriers allow you to forward spam text messages to 7726 (SPAM), which triggers an investigation by the carrier's fraud team. For calls that impersonate government agencies like the IRS or Social Security Administration, also report to the Treasury Inspector General at tigta.gov.

Reporting to Government Agencies

Beyond platform-level reports, filing with government agencies creates the enforcement record that drives systemic action. In the United States, the primary reporting destinations are the FTC at reportfraud.ftc.gov for general fraud, the FBI's Internet Crime Complaint Center (IC3) at ic3.gov for internet-based crimes, and your state attorney general's consumer protection division for state-specific violations.

For identity theft specifically, use identitytheft.gov, which provides a personalized recovery plan along with pre-filled letters you can send to credit bureaus and financial institutions. If the scam involved cryptocurrency, also report to the Commodity Futures Trading Commission (CFTC) and your state's financial regulator. International victims should report to their country's equivalent agencies, such as Action Fraud in the UK or the ACCC's Scamwatch in Australia.

Reporting Financial Fraud to Your Bank

If you sent money to a scammer, contact your financial institution immediately. For credit card transactions, you have strong chargeback rights under consumer protection laws. Call the number on the back of your card, explain the fraudulent transaction, and request a chargeback. For wire transfers and bank transfers, contact your bank's fraud department within 24 hours, as recovery chances decrease dramatically after the first day.

For peer-to-peer payment apps like Zelle, Venmo, and Cash App, report the transaction as fraudulent through the app's built-in reporting feature and contact the linked bank. Recovery through P2P apps is more difficult than credit card chargebacks, but reporting still creates the documentation needed for potential recovery and law enforcement action. If the scam involved cryptocurrency transfers, report to the exchange where the transaction originated.

After Reporting: Securing Your Accounts

Reporting the scam is essential, but it is only half the battle. You also need to secure every account that may have been compromised. Change passwords for any accounts where you shared credentials, starting with your email and banking accounts. Enable two-factor authentication on every critical account if you have not already. Review your recent account activity for unauthorized access and revoke any unfamiliar connected applications or sessions.

Place a fraud alert or credit freeze with all three credit bureaus (Equifax, Experian, and TransUnion) if any personal identity information was exposed. A credit freeze is the stronger option, preventing new accounts from being opened in your name. Review your password security practices and update any accounts where you reuse the compromised password.

Helping Others Report Scams

If you identified the scam before falling victim, consider sharing your experience to protect others. Warn your social network about the specific tactic used, especially if it appeared on a platform where your friends and family are active. The more people who can recognize a particular scam pattern, the less effective it becomes.

For family members who may struggle with the reporting process, especially older parents or grandparents , offer to sit with them and walk through it together. Many people do not report scams simply because the process feels overwhelming. Your help in filing one report can establish the confidence and familiarity they need to do it independently next time.

Building a culture of reporting is just as important as building a culture of detection. Tools like Truvizy's scanning platform make it easy to verify suspicious content, but the next step, ensuring the scam is reported and cannot victimize others, depends on each of us taking the time to follow through. Every report makes the internet slightly safer for everyone.

Detect scams before they cause damage, get AI-powered protection for you and your family.

Related reading: Phishing Email Detection Guide — Identify and report phishing emails effectively

Related reading: How to Spot Deepfake Videos — Detect AI-generated video manipulation

Related reading: Identity Theft Prevention — 15 steps to protect your personal information