You found a phishing or lookalike site. Reporting it is the right first step — but reporting flags a site; getting it removed is a separate job. Use the channels below to report it the right way, then decide whether to chase the takedown yourself or hand it to a senior analyst.
Where to report a phishing site
Google Safe Browsing
Reports the page so Chrome, Safari and Firefox warn users. Report a phishing page →
Microsoft SmartScreen
Protects Microsoft Edge users. Report an unsafe site →
APWG
The Anti-Phishing Working Group’s global clearinghouse. Forward the phishing email or URL to reportphishing@apwg.org.
The impersonated brand
Most brands run an abuse inbox (e.g. phishing@<brand>.com). Reporting helps them warn customers and pursue their own takedown.
Registrar & host abuse
Find them via a WHOIS lookup. The host removes the content; the registrar can suspend the domain. This is what actually takes a site down.
Australian authorities
Report cybercrime to ReportCyber (ACSC) and scams to Scamwatch (ACCC).
Want it gone — not just flagged?
A named senior analyst handles the whole takedown for you: evidence, host and registrar abuse, escalation, and follow-up until the page returns a 404. Flat $500 USD — neutralized within 72 hours of analyst approval, excluding weekends and public holidays, or your money back ($900 with the optional 30-day Watch).
Go deeper
- Scan the site with urlscan.io — screenshot, host and verdict, then get it removed.
- How to take down a phishing site (the DIY way)
- Where and how to report a phishing website
Frequently asked questions
Does reporting a phishing site remove it?
No. Reporting to Google, Microsoft or APWG gets the site flagged so browsers warn users; the page stays live until the host removes the content or the registrar suspends the domain.
Who can actually take a phishing site down?
The hosting provider (removes the content) and the domain registrar (suspends the domain). You find both via a WHOIS lookup; a clear, evidence-backed abuse report is what gets them to act.
I’m in Australia — who do I tell?
Report cybercrime to ReportCyber (cyber.gov.au/report) and scams to Scamwatch (scamwatch.gov.au). They don’t remove the page, but reporting supports enforcement.