Help us stop active phishing threats
For fraud, stolen credentials, money loss, or widespread attacks, you may also want to report to these groups.
- FBI IC3 for cybercrime and internet fraud.
- FTC Report Fraud for scams and impersonation.
- CISA Report for cyber incidents.
- APWG at reportphishing@apwg.org.
Need phishing reporting for your team?
KillPhish helps employees report suspicious email from Microsoft and Google inboxes.
Explore KillPhishReport to PhishingBox
Use this anonymous form for suspicious messages, malicious sites, vishing calls, fake invoices, or account compromise concerns.
What helps most
- Original .eml or .msg file, if available.
- Sender, subject, recipient, and reply-to address.
- Suspicious links, QR codes, phone numbers, or domains.
- Whether you clicked, entered credentials, or sent payment.
After you submit
We review valid reports for threat indicators, training examples, and research. Uploaded files are stored on the server and purged over time.