How to Report an Online Scam in 2026
To report an online scam in 2026, file first with the FTC at ReportFraud.ftc.gov (takes 10–15 minutes, anonymous filing is allowed), then with the FBI at IC3.gov if money was lost or the scam involved cryptocurrency or wire fraud. If you sent money, contact your bank immediately before filing any government report — the window to recover funds closes within hours. The same three steps cover phishing emails, romance scams, fake online stores, investment fraud, and tech support scams.
Context: Online fraud losses hit a record $16.6 billion in 2024 — a 33% jump from the year before — across 859,532 complaints filed with the FBI’s IC3. The average reported loss per complaint was $19,372. Most victims never report at all, which is exactly why scammers keep operating. This guide gives you the exact steps to report, in the right order, in 2026. For a broader picture of the crisis, see our Internet Scams 2026: The AI and Deepfake Crisis and Online Fraud Statistics.
Table of Contents
Prerequisites — Gather These Before You Start
Before opening any form, collect the following. Having everything ready prevents you from abandoning the process mid-filing when you can’t locate a detail.
What to collect:
- The scammer’s contact information — phone number, email address, username, website URL, social media handle
- Dates and times of all contact (check your call log, inbox, and messages)
- Exact dollar amount lost, and how you paid (credit card, debit card, wire transfer, Zelle, Venmo, cryptocurrency, gift cards, cash)
- Transaction records — bank statements, confirmation emails, receipts, screenshots of payment screens
- Any communications — screenshots of texts, emails, DMs, or chat logs
- The scammer’s account information if known (bank name, crypto wallet address, PayPal email)
- Your complaint reference numbers from any previous reports
A note on evidence preservation: Do not delete emails, texts, or social media messages — even if the content is upsetting. Do not click any links in suspicious messages. If the scam happened through a dating app or social media platform, take screenshots before reporting the profile, since platforms often delete flagged accounts quickly, erasing your evidence.
Estimated Time to Complete
| Step | Platform | Time Required |
|---|---|---|
| Step 1 | Contact your bank (if money was lost) | 5–20 minutes |
| Step 2 | FTC report at ReportFraud.ftc.gov | 10–15 minutes |
| Step 3 | FBI report at IC3.gov | 15–25 minutes |
| Step 4 | Report to platform (email provider, app store, social media) | 5–10 minutes |
| Step 5 | State attorney general (optional) | 5–10 minutes |
| Total | 35–80 minutes |
You do not need to complete all steps in one session. Steps 1 and 2 are the most important — do those first.
Step 1: Contact Your Bank Immediately (if money changed hands)
Do this before any government form if you sent money. Wire transfers can only be recalled within a narrow window — in most cases, recovery success drops to low single digits after the first 24 hours. Every minute you spend filing a government form before calling your bank is a minute the scammer uses to move your money.
Screenshot description for team: Bank’s fraud department phone number shown on the back of a debit/credit card. Callout arrow pointing to the fraud line number.
What to do:
Call the number on the back of your debit or credit card — this is your bank’s fraud department, not the general customer service line. Say clearly: “I believe I’ve been the victim of a scam. I need to report a fraudulent transaction and request an immediate hold.”
Tell them:
- The exact date and time of the transaction
- The amount
- How you sent it (wire, ACH, Zelle, card)
- Any information you have about who received it
What your bank can actually do — by payment type:
| Payment Method | Recovery Window | What to Request |
|---|---|---|
| Credit card | Up to 60 days (Reg Z) | Chargeback / dispute |
| Debit card | Up to 60 days (Reg E) | Dispute + account freeze |
| Wire transfer | Hours only | SWIFT recall request |
| Zelle / Venmo / ACH | 24–48 hours window | Dispute + transaction freeze |
| Gift cards | Very limited | Contact issuer, not your bank |
| Cryptocurrency | Virtually none | Report only — no reversal possible |
Important: Get a case or reference number from your bank before hanging up. Write down the agent’s name and the exact time you called. This documentation matters if you later pursue a dispute.
Wire transfers are considered final once funds are accepted by the receiving bank. Your bank can only recall — not reverse — a wire, and the recipient bank is not obligated to cooperate. If the scammer has already withdrawn funds, your bank cannot get them back. This is not a reason to skip Step 1; it’s a reason to call faster.
Step 2: File a Report with the FTC at ReportFraud.ftc.gov
The FTC is the primary federal consumer protection agency. Your report enters the Consumer Sentinel Network, shared with over 2,800 law enforcement partners nationwide. FTC lawsuits returned $337.3 million to consumers in 2024. Individual reports don’t trigger individual investigations, but patterns do — and patterns are built from reports like yours.
Screenshot description for team: ReportFraud.ftc.gov landing page showing the large blue “Report Now” button centered on the page. The URL bar should be visible confirming the .gov domain.
Step 2a — Navigate to the correct URL
Go to https://reportfraud.ftc.gov/ directly. Do not search for it — scam sites impersonate government fraud portals with near-identical URLs. Verify the padlock icon and .gov domain before typing anything.
Step 2b — Click “Report Now”
The page opens with a single prominent “Report Now” button. Click it. You’ll see a category selection screen.
Screenshot description for team: The category selection screen showing tiles including “Online Shopping or Negative Reviews,” “Impersonation of a Business or Government Agency,” “Investment or Business Opportunity,” “Telephone or Mobile Service,” “Prizes, Sweepstakes, and Lotteries,” and “Something Else.”
Step 2c — Select the category that best matches your scam
Common matches:
- Romance scam / confidence fraud → “Impersonation of a Business or Government Agency” or “Something Else”
- Fake online store / non-delivery → “Online Shopping or Negative Reviews”
- Investment / crypto fraud → “Investment or Business Opportunity”
- Tech support scam → “Impersonation of a Business or Government Agency”
- Phishing / account takeover → “Something Else”
If nothing fits precisely, choose “Something Else.” The FTC categorizes it for you.
2026 UI note: The FTC redesigned the category selection page in early 2025. Older guides show a different layout with a dropdown menu — that is outdated. The current interface uses large clickable tiles.
Step 2d — Complete the incident description
The form asks for:
- The name of the company or person you’re reporting (use “unknown” if you don’t have one)
- How you were contacted (phone, email, website, social media, in person)
- A description of what happened in your own words
- Amount paid and payment method
- Your contact information (optional — you can file completely anonymously)
Writing your description: Be specific. Include dates, exact amounts, names used, and any platforms involved. “I was contacted on Instagram in March 2026 by a user claiming to be a cryptocurrency investment advisor” gives investigators actionable data. “I got scammed online” does not.
Step 2e — Submit and save your report number
After submitting, you will see a confirmation screen with your FTC report number. Save it — either print the page or screenshot it. If you provided an email address, you’ll also receive a confirmation with your report number, but not the full report itself.
Critical 2026 note: The confirmation page is the only place you can access your full report. If you close the window without saving, you cannot retrieve the report — only the report number via email. The FTC does not email the report body.
Phone alternative: If you cannot use the website, call 1-877-382-4357 (FTC Consumer Response Center, 9am–5pm ET). For Spanish: ReporteFraude.ftc.gov. For other languages, call the same number and press 3.
Identity theft specifically: If someone used your personal information to open accounts or file taxes, use IdentityTheft.gov instead of ReportFraud.ftc.gov — it generates a personalized recovery plan and pre-fills dispute letters.
Step 3: File a Complaint with the FBI at IC3.gov
IC3 (Internet Crime Complaint Center) is the FBI’s dedicated internet crime intake portal. File here if: money was lost, the scam involved cryptocurrency, you received fraudulent wire transfer instructions, the scammer claimed to be overseas, or the loss exceeds $1,000.
Screenshot description for team: IC3.gov homepage with the red “File a Complaint” button in the top navigation and also the prominent red CTA button in the center of the page. URL bar visible confirming ic3.gov domain.
Step 3a — Navigate to IC3.gov and accept terms
Go to https://www.ic3.gov/ and click the red “File a Complaint” button. You’ll be redirected to complaint.ic3.gov — this is the official complaint portal. Read the FAQ and Terms and Conditions that appear, scroll to the bottom, and click the blue “I Accept” button.
2026 UI note: Some guides show an older IC3 form that opened directly without a terms page. The current form (as of 2025–2026) requires explicit acceptance of terms before proceeding. Do not skip reading the terms — they include an important note that false statements are punishable under federal law (Title 18 U.S.C.).
Step 3b — Step 1 of the form: Your information (Complainant)
Enter your information as the person affected by the crime. Fields marked with a red asterisk are required.
Required:
- First and last name
- Mailing address
- Telephone number
- Email address
Note: If you are filing on behalf of someone else, you will enter your own contact details separately in the “Third-Party Filer” section.
Do not enter Social Security numbers or dates of birth anywhere in the form — IC3 explicitly warns against this. The form does not ask for them.
Step 3c — Step 2: Subject information (the scammer)
Enter everything you know about the person or entity that committed the crime. All fields are optional but every piece of information you provide increases investigative value.
Include if known:
- Name or screen name used
- Email address(es)
- Phone number(s)
- Website URL(s)
- IP address (visible in email headers — see Common Errors section)
- Physical address (if any was provided)
Step 3d — Step 3: Financial information
This is the most important section for wire fraud and crypto cases.
- Did you lose funds? Select Yes or No.
- Total amount of loss
- Account information (bank name, account number if applicable)
- Transaction date(s) and amount(s)
- Who received the money
For cryptocurrency transactions: IC3 has a dedicated Cryptocurrency section. Include wallet addresses, transaction hashes (TxIDs), and the exchange platform used. This data is actionable for law enforcement in ways that general descriptions are not.
2026 note: Everything below the “Total Loss Amount” field in Step 3 is optional. If you don’t have full financial details, enter what you have and describe the rest in Step 5.
Step 3e — Steps 4–6: Incident description, subject financial info, additional info
Step 5 is the incident description — your narrative of what happened. Write clearly and chronologically. Include every date, platform, and payment method. IC3 does not accept file attachments, so all evidence (screenshots, transaction records) should be held securely — investigators will request it if a case is opened.
Step 3f — Submit and print your complaint ID
After submitting, IC3 displays a confirmation with your complaint ID. This is the only time you can access your full complaint — IC3 will not email or send you a copy. Print or screenshot the confirmation page before closing.
Critical note: Once submitted, an IC3 complaint cannot be canceled. If you have new information to add, file a new complaint referencing your original complaint ID.
Step 4: Report to the Platform Where the Scam Occurred
Government reports address law enforcement. Platform reports address the scam channel itself — and can get fake accounts removed, URLs blacklisted, and other users warned. Do both.
By platform type:
Email phishing → Forward the phishing email to phishing@irs.gov (if tax-related), spam@uce.gov (FTC), and your email provider’s abuse/spam button. In Gmail, open the email → click the three-dot menu → “Report phishing.” In Outlook, click “Report” → “Report Phishing.”
Social media scam (Facebook, Instagram, TikTok, X) → Use the three-dot menu on the profile or post → “Report” → “Scam or Fraud.” Screenshot the profile and all messages before reporting — platforms may remove the account within hours.
Online marketplace (Amazon, eBay, Etsy, Facebook Marketplace) → Use the platform’s “Report Seller” or “Report Listing” function. File a chargeback with your credit card issuer in parallel.
Dating app (Tinder, Hinge, Bumble, Match) → Use the in-app “Report” or “Block and Report” option on the profile. For romance scam context, see our Romance Scams: How to Stay Safe and Romance Scam Statistics 2026.
Fake website → Report the URL to Google Safe Browsing at safebrowsing.google.com/safebrowsing/report_phish/ and to the website’s hosting registrar (use WHOIS lookup at lookup.icann.org to identify the registrar). For international scam sites, also file at econsumer.gov — a portal operated by 65+ consumer protection agencies worldwide.
Cryptocurrency exchange → Contact the exchange directly (Coinbase, Binance, Kraken support) with the scammer’s wallet address and transaction details. Exchanges can freeze accounts and cooperate with law enforcement.
Step 5: Report to Your State Attorney General (Optional but Recommended)
Most state AGs have consumer protection divisions that accept fraud reports and sometimes pursue cases the FTC and FBI don’t. This step adds a layer to your documentation and may be required for insurance claims.
Find your state AG’s office at naag.org/find-my-ag/. Most accept online reports. Some states — including California, New York, Florida, and Texas — have dedicated cybercrime units with active prosecution records.
Common Errors and Fixes
This is where most existing guides leave you. Here are the exact problems people encounter when filing, and how to solve them.
Error: “I lost my FTC report — I clicked away from the confirmation page.” Fix: Your report is still in the system. You cannot retrieve the full text, but you can file a new report at ReportFraud.ftc.gov and reference that you believe you filed previously. If you provided an email address, check your inbox — you’ll have a confirmation with the report number, even though the email doesn’t contain the full report.
Error: “The IC3 form is asking for a date of birth and SSN.” Fix: Stop. You are on a scam site impersonating IC3.gov. The real IC3 complaint form at complaint.ic3.gov never asks for SSN or date of birth. Close the page immediately. Navigate to ic3.gov by typing the URL directly into your browser.
Error: “I can’t find the scammer’s IP address to enter in the IC3 form.” Fix: Check the email headers. In Gmail: open the email → click the three-dot menu → “Show original.” Look for the “Received: from” line — the IP address follows. In Outlook: open the email → File → Properties → “Internet headers.” The first “Received: from” line contains the originating IP. Copy it and paste it into the IC3 form’s subject IP field. If you can’t find it, leave the field blank — it’s optional.
Error: “The FTC site keeps timing out mid-form.” Fix: The FTC form has a session timeout. Complete each section without pausing too long — 10–15 minutes per section is safe. If the session expires, your data is lost and you’ll need to restart. Draft your incident description in a text document first, then paste it into the form quickly to avoid timeouts.
Error: “I’m not sure which FTC category to choose — nothing seems to fit.” Fix: Always choose “Something Else.” The FTC will categorize your report based on the description you write. Choosing a category that doesn’t quite fit doesn’t void your report, but “Something Else” with an accurate description is better than a mismatched category.
Error: “My bank said the wire transfer is ‘being processed’ and they can’t do anything yet.” Fix: Escalate immediately. Ask to speak with the fraud department specifically, not general customer service. Say: “This is a time-sensitive wire fraud case. I need a hold placed on this transaction before it settles.” If the agent is unresponsive, go to a physical branch, ask to speak with the branch manager, and use the words “fraudulent wire transfer recall.” Many bank agents are not trained in fraud recall procedures; managers usually are.
Error: “The IC3 form says ‘mobile devices not supported.'” Fix: IC3 explicitly states the complaint form must be completed on a laptop or desktop browser, not a mobile device. This is documented in the OJP/DOJ victim guidance published March 2026. Switch to a desktop to complete the form.
Error: “I already sent gift cards — is it too late?” Fix: Contact the gift card issuer’s fraud department immediately using the number on the card’s packaging or the issuer’s website. Some issuers (Google Play, Apple, Amazon) can freeze unredeemed cards. Act within hours. File the FTC and IC3 reports regardless — gift card scams are specifically tracked and used in law enforcement targeting of scam call centers.
When This Won’t Work
Intellectual honesty matters. Here are the situations where these reporting steps will not produce the outcome you’re hoping for:
You won’t get your money back directly from these reports. The FTC, IC3, and state AGs do not cut individual checks. In cases where the FTC wins a lawsuit and secures a judgment, refunds are distributed — but this takes years and is not guaranteed. Filing is still essential for documentation, insurance, and building the pattern that triggers investigations.
Wire transfers sent internationally are almost impossible to recover. Once funds cross international borders and are moved through multiple accounts or converted to crypto, even active law enforcement investigations rarely result in recovery. The 24-hour window is not aspirational — it is the real boundary.
Cryptocurrency payments are effectively irreversible. Blockchain transactions are permanent. No government agency can reverse a crypto payment. Filing reports is still valuable for intelligence and for flagging wallet addresses, but financial recovery from crypto scams is rare.
Local police may decline to take a report on internet scams. Many local departments lack jurisdiction or capacity for online fraud. Insist on a report being filed regardless, because the case number matters for insurance claims and credit disputes. If the department refuses, contact your state AG’s office.
Recovery scam warning: If anyone contacts you claiming they can get your money back for an upfront fee — whether posing as a private investigator, a “crypto recovery specialist,” or even a government official — this is almost certainly a second scam targeting you again. The FTC specifically warns that recovery scams often target previous fraud victims. Report the recovery offer to the FTC immediately.
What to Do Next
Protect your accounts immediately
If you shared a password, account credentials, or personal information (Social Security number, date of birth, bank account numbers):
- Change affected passwords immediately and enable two-factor authentication
- Place a free credit freeze at all three bureaus: Equifax, Experian, and TransUnion — freeze requests are free and take effect immediately
- If your SSN was compromised, go to IdentityTheft.gov for a personalized recovery plan
- Monitor your credit reports at AnnualCreditReport.com
Related Axis Intelligence guides
- Internet Scams 2026: The AI and Deepfake Crisis — how the current scam landscape has changed and what the newest tactics look like
- Romance Scams: How to Stay Safe — if the scam involved a relationship built online
- Romance Scam Statistics 2026 — data on losses, demographics, and platforms
- Online Fraud Statistics 2026 — the full picture of online fraud by type, platform, and financial impact
Frequently Asked Questions
Does reporting a scam to the FTC actually do anything?
Yes, but not in the way most people expect. The FTC does not investigate individual complaints — your report will not trigger a personal phone call or return your money. What it does do is feed into the Consumer Sentinel Network, shared with over 2,800 law enforcement agencies. When enough complaints point to the same scammer, phone number, website, or scheme, that pattern becomes the basis for FTC lawsuits, injunctions, and asset freezes. FTC enforcement actions returned $337.3 million to consumers in 2024. Your report is one data point; it needs others to become an action.
What’s the difference between ReportFraud.ftc.gov and IC3.gov?
ReportFraud.ftc.gov is operated by the FTC and handles all types of consumer fraud — fake online stores, telemarketing scams, deceptive business practices, impersonation, and more. IC3.gov is operated by the FBI and focuses on internet-enabled crimes with a criminal law enforcement angle. File with the FTC for any scam. File with IC3 in addition when money was lost, when the crime involved cryptocurrency or wire fraud, or when the scam involved foreign actors. The two databases are separate — a report to one does not automatically appear in the other.
Should I also report to the police?
Yes, for two reasons. First, a police report creates official documentation that may be required by your bank or insurance company when disputing fraudulent charges. Second, state and local cybercrime units do investigate online fraud — especially when the loss is significant or the scammer’s activity is local. Call your police department’s non-emergency line, not 911. Bring your evidence printouts, FTC report number, and IC3 complaint ID. Even if the officer says there’s nothing they can do, insist the report be filed. Ask for a copy and the case number before leaving.
Can I report a scam anonymously?
Yes. Both ReportFraud.ftc.gov and IC3.gov allow anonymous filing. The FTC states that providing contact information is optional, though it helps if they need additional details. IC3 will note that without contact information, investigators cannot follow up with you. If your primary goal is to contribute to law enforcement data without identifying yourself, anonymous filing is fully valid.
I sent money via gift card — is there any hope of recovery?
There is a narrow window. Contact the gift card issuer’s fraud line immediately — the number is on the back of the card or the issuer’s website. Some issuers (Google Play, Apple, Amazon, Walmart) can freeze the balance if the card hasn’t been fully redeemed. Act within hours; once redeemed, the balance is gone. Report to the FTC regardless — gift card scams generate some of the highest-volume FTC reporting and directly inform enforcement targeting of specific call centers.
Someone is impersonating a government agency (IRS, SSA, Medicare) — who do I report this to?
Report to the FTC at ReportFraud.ftc.gov — select “Impersonation of a Business or Government Agency.” Also report to the agency being impersonated directly: IRS impersonation → Treasury Inspector General phishing@irs.gov; Social Security impersonation → SSA Office of Inspector General; Medicare impersonation → HHS Office of Inspector General. The FTC also maintains a current list of impersonator scams at consumer.ftc.gov/features/imposter-scams.
What should I do if I shared my Social Security number with a scammer?
Go to IdentityTheft.gov immediately. This FTC-operated site generates a personalized recovery plan based on what information was shared. Place credit freezes at all three bureaus right away (Equifax, Experian, TransUnion — all free). File an IRS Form 14039 Identity Theft Affidavit with the IRS to protect your tax filing. Consider placing a fraud alert at the credit bureaus, which lasts one year and requires creditors to verify your identity before opening new accounts.
How long does it take for anything to happen after I report?
The honest answer: it varies widely, and most individual victims never hear back. The IC3 reviews all complaints but cannot respond to every submission due to volume — it receives over 2,000 complaints per day. If your case is part of a larger pattern or the loss is significant, an investigator may contact you, but there is no timeline guarantee. The FTC similarly does not contact individual reporters. For time-sensitive financial recovery, your bank and platform reports are the actions most likely to produce a result — not the government forms.
For updates on new scam tactics targeting consumers in 2026, see Internet Scams 2026: The AI and Deepfake Crisis.
This article provides general guidance and does not constitute legal advice. If you have lost a significant amount of money, consider consulting with a consumer protection attorney in your state.