How to Report a Scam Website: A Step-by-Step Guide for Caregivers

Your father clicked a link and ended up on a website that looked like his bank, or his toll account, or Medicare. He entered his information. Now you've confirmed it was fake, the damage control is underway, and you're staring at this fraudulent website wondering: how do I get this thing shut down so it doesn't hurt someone else?

Reporting a scam to the FTC or filing a police report is one side of the response. Reporting the scam website itself — getting it flagged, blocked, and ideally taken offline — is the other side. Most guides focus on the first part and skip the second. This guide covers the website reporting process specifically, step by step.

The goal is twofold: protect other potential victims by getting the site blocked in browsers and search results, and create a documented trail that supports law enforcement investigations.

Why reporting the website matters

When you report a fraudulent website to the right places, several things can happen:

Browser-level blocking. Google Safe Browsing, which protects Chrome, Firefox, and Safari users, can flag the site with a full-screen warning that prevents visitors from entering the site without actively overriding the warning. This single action can protect millions of people.

Search engine removal. Google can remove or demote fraudulent sites from search results, cutting off one of the primary ways victims discover scam pages.

Domain takedown. The domain registrar (the company that sold the scam operator the domain name) can suspend or seize the domain, taking the site completely offline.

Hosting provider action. The company hosting the website's servers can terminate the account, which also takes the site offline.

Not every report results in immediate action, but the cumulative effect of multiple reports accelerates all of these outcomes. Each report you file makes it more likely the site gets taken down quickly.

Before you report: document the scam website

Before you start filing reports, spend five minutes preserving evidence. Scam websites frequently disappear and reappear on new domains, and having documentation helps if the same operation resurfaces.

Take screenshots. Capture the full page, including the URL bar. On a computer, use the full-page screenshot feature in your browser (in Chrome, open Developer Tools with F12, press Ctrl+Shift+P, type "screenshot," and select "Capture full size screenshot"). On a phone, take regular screenshots of each section of the page.

Save the URL. Copy the complete URL from the address bar, including any paths after the domain name. For example, "fake-fastrak-payment.com/pay/invoice/12345" — every part of that URL is useful for investigators.

Note the date and time. Record when your parent visited the site and when you documented it.

Save any emails or texts that linked to the site. The referral source (the text message, email, or ad that led your parent to the website) is valuable evidence because it connects the website to the broader scam operation.

Step 1: Report to Google Safe Browsing

This is the highest-impact single action you can take, because Google Safe Browsing protects users of Chrome, Firefox, Safari, and Android — covering the vast majority of internet users worldwide.

How to file: Go to safebrowsing.google.com/safebrowsing/report_phish/ and enter the URL of the scam website. Add a brief description of the scam (for example: "This site impersonates FasTrak toll payment and collects credit card information"). Submit the form.

What happens next: Google reviews the report. If confirmed, the site gets added to the Safe Browsing blacklist, which triggers warning screens in all major browsers. This process can happen within hours for sites that receive multiple reports.

Time to complete: Less than two minutes.

Step 2: Report to the FBI's Internet Crime Complaint Center (IC3)

The IC3 is the FBI's central hub for internet fraud complaints. While IC3 focuses on investigating the criminals behind the scams rather than taking down individual websites, the reports feed into a database used by federal, state, and international law enforcement.

How to file: Go to ic3.gov and click "File a Complaint." You'll need to provide details about the scam, the website URL, any financial losses, and your contact information.

What you'll need: The scam website URL, a description of what happened, the approximate amount of money lost (if any), and how your parent found the site (text message, email, search result, social media ad).

Time to complete: 15 to 20 minutes.

Step 3: Report to the domain registrar

Every domain name is registered through a registrar (GoDaddy, Namecheap, Cloudflare, Google Domains, and dozens of others). Registrars have abuse policies and can suspend domains that are used for fraud.

How to find the registrar: Use a WHOIS lookup service. Go to whois.domaintools.com or lookup.icann.org and enter the scam domain name. The results will show the registrar name and usually an abuse contact email.

How to file: Most registrars have an abuse report form or email address. Common formats include [email protected]. In your report, include the fraudulent domain name, a description of the scam, screenshots, and any other evidence.

What happens next: The registrar reviews the report and may suspend the domain, which takes the entire site offline. Response times vary from hours to days depending on the registrar and the volume of reports they receive.

Time to complete: 10 minutes.

Step 4: Report to the hosting provider

The hosting provider is the company whose servers actually run the website. Even if the domain isn't suspended by the registrar, the hosting provider can terminate the account that's serving the fraudulent content.

How to find the hosting provider: Use a tool like who.is, SecurityTrails, or simply enter the domain into whatismyipaddress.com/hostname-ip to find the IP address, then look up the IP owner. Many hosting providers are identifiable from the WHOIS results as well.

How to file: Most hosting companies have an abuse@ email address or a dedicated abuse reporting form. Provide the same information: the domain, the scam description, evidence, and your contact information.

Time to complete: 10 minutes.

Step 5: Report to the FTC

If you haven't already filed a general fraud complaint with the FTC (for example, if you already reported the broader scam), add the website URL to your existing report. If this is your first report, file at ReportFraud.ftc.gov.

The FTC doesn't take down individual websites, but its Consumer Sentinel Network database is shared with over 2,800 law enforcement agencies. Your report contributes to the evidence base used to pursue the criminal operations behind the scam sites.

Time to complete: 15 minutes (or 2 minutes to update an existing report).

Step 6: Report to your parent's browser

In addition to the Google Safe Browsing report (which covers Chrome, Firefox, and Safari), you can report directly within the browser your parent uses.

In Chrome: Click the three-dot menu, go to Help, then "Report an issue." Include the URL and a note that the site is a phishing or scam page.

In Firefox: Click the three-line menu, go to Help, then "Report Deceptive Site." This sends the report directly to Google Safe Browsing.

In Safari: Go to Safari in the menu bar, then "Report Fraudulent Website."

In Microsoft Edge: Click the three-dot menu, go to Help and feedback, then "Report unsafe site." This reports to Microsoft's SmartScreen filter, which provides an additional layer of protection for Edge users.

Time to complete: Less than one minute per browser.

What to expect after reporting

Realistic expectations matter. Here is what typically happens:

Within hours: If multiple people report the same site to Google Safe Browsing, browser warnings may appear quickly. High-volume phishing sites (especially those impersonating banks or government agencies) are often flagged within the same day.

Within days: Domain registrars and hosting providers typically respond to abuse reports within one to five business days. Some act faster, especially for clear-cut fraud cases with strong evidence.

Within weeks: The FBI and FTC process reports as part of larger investigations. You likely won't receive updates on individual cases, but your report contributes to enforcement actions that may take months to materialize.

The site may reappear. Scam operators frequently register new domains and set up identical sites once the old one is taken down. If you see the same scam resurface on a different URL, report the new domain using the same process.

Protecting your parent from future scam websites

Reporting the site after the fact is important, but prevention is better. Here are practical steps that reduce the chance your parent lands on a fraudulent website in the first place.

Enable Safe Browsing in their browser. In Chrome, go to Settings, then Privacy and Security, then Security. Select "Enhanced protection" for the strongest level of warnings against dangerous sites.

Install a reputable ad blocker. Many scam websites are discovered through malicious ads that appear on legitimate sites. An ad blocker like uBlock Origin removes these ads and the associated risk.

Teach the "type, don't tap" rule. If your parent receives a message about a toll bill, a bank issue, or a government notice, they should never tap the link in the message. Instead, they should type the official website address directly into the browser. This single habit eliminates the most common pathway to scam websites.

Bookmark important sites. Help your parent create browser bookmarks for their bank, their toll account, Medicare, Social Security, and any other services they use regularly. When they need to check something, they use the bookmark — never a link from a text or email.

Getting comprehensive protection in place

Reporting scam websites is one piece of a larger puzzle. If you want a structured approach to protecting your elderly parent from online fraud — covering phishing sites, scam texts, phone fraud, and financial exploitation — the Elder Scam Shield provides printable guides, identification checklists, and step-by-step response plans organized specifically for caregivers. It's the kind of resource you set up once and your parent can reference whenever something feels wrong.