Where to report phishing and scams, country by country
Where you report a scam depends on your country and on what happened. A phishing email or text goes to a spam reporting service; a fraud in which you lost money goes to your bank first, then to the national fraud reporting service or the police. This page lists the official channels in the US, the UK, Canada, and Australia, checked on November 10, 2026.
Where to report phishing and scams
Report a suspicious email or text to your country’s spam reporting service, and report a fraud to your bank and then to the national fraud reporting service. If someone is in danger or a crime is under way, call the emergency number: 911 in the US and Canada, 999 in the UK, 000 in Australia. This is the last step of spotting a fake message, and it is not wasted effort: the UK’s NCSC says it acts on every message forwarded to its reporting service, even though it does not reply individually.
If you lost money, call your bank first
Speed matters more than the report. Call your bank on the number on your card or statement, explain that you were scammed, and ask what it can stop or recover. Then report to the authorities below; Canada’s RCMP notes that its online system does not replace telling your financial institution and your local police.
The official channels, country by country
| Country | Phishing email | Scam text | Fraud or cybercrime |
|---|---|---|---|
| US | Forward to the Anti-Phishing Working Group at reportphishing@apwg.org, as the FTC advises | Forward to 7726 | ReportFraud.ftc.gov; the FBI’s IC3 at ic3.gov for internet crime |
| UK (England, Wales, Northern Ireland) | Forward to report@phishing.gov.uk | Forward to 7726 | Report Fraud at reportfraud.police.uk or 0300 123 2040 |
| UK (Scotland) | Forward to report@phishing.gov.uk | Forward to 7726 | Police Scotland on 101 |
| Canada | Report through the national system or the Canadian Anti-Fraud Centre | Forward to 7726 | Report Cybercrime and Fraud at reportcyberandfraud.canada.ca, or the Canadian Anti-Fraud Centre at 1-888-495-8501; and your local police |
| Australia | Scamwatch | Ask your carrier; Telstra uses 7226 | Scamwatch for scams; ReportCyber for an official police report; IDCARE on 1800 595 160 for identity theft support |
A few details from the sources:
- UK: Report Fraud, run by the City of London Police, replaced Action Fraud on December 4, 2025; the phone number did not change. The NCSC’s email service is not for reporting a crime: use Report Fraud or Police Scotland for that.
- Canada: the RCMP launched the national Report Cybercrime and Fraud system on November 6, 2025, run with the Canadian Anti-Fraud Centre. It estimates that only 5% to 10% of fraud and cybercrime in Canada is reported. The Anti-Fraud Centre’s phone line is open Monday to Friday, 10 a.m. to 4:45 p.m. Eastern Time.
- Australia: Scamwatch passes reports on, with your consent, to get scam websites and ads taken down. For a crime such as stolen money or extortion, Scamwatch points to ReportCyber, the official online police report.
- US: the IC3 says it will never contact you directly for information or money; report any site that imitates it.
Reporting inside your email and phone
Most apps have a report button, which trains their filters and, for texts, can alert your carrier:
| App | How to report |
|---|---|
| Gmail on a computer | Open the message, click More next to Reply, then Report phishing |
| Outlook.com and Outlook on the web | Select the message, then Report, Report phishing; the sender is reported but not blocked |
| Outlook for iOS and Android | Tap the menu, Report Junk, then Phishing |
| Microsoft 365 at work | The Report button, if your administrator has turned it on |
| iPhone Messages (iOS 26) | Report Spam, then Delete and Report Spam |
| Google Messages on Android | Press and hold the conversation, Block, Report spam |
Apple’s own address, reportphishing@apple.com, is only for messages that pretend to come from Apple, according to Apple’s support page. For other brands, use the button in your app and the national service.
What happens after you report
You will rarely hear back, and that is normal. The reports feed blocking and takedowns: as of September 2026, the NCSC’s published figures showed 263,700 scams removed across 466,300 web addresses. Keep a copy of the message, the sender, and any payment details in case the police or your bank need them later.
Learning to recognize the next one
Reporting is easier when you are sure. Our guide to the signs of a phishing email that still work covers what to check before you click.
Texts in particular
Delivery, toll, and “boss” texts each have their own tells and their own reporting addresses. See how to handle scam texts.