Incident Response Guide

How to Report Cyber Crime Clearly and Fast

Use this guide to preserve evidence, escalate scams or account abuse, and report ransomware, fraud, fake social profiles, and suspicious activity to the right agency.

Why It Matters

Reporting Helps Investigators Connect the Dots

Most cyber incidents are underreported, which makes criminal activity look smaller and slower than it really is. A clear report with good evidence can support fraud recovery, help law enforcement build a case, and strengthen trend data for future warnings. If you also want context on the threats behind what happened, review the threat intelligence library and the broader resource center.

Document Save screenshots, URLs, account IDs, and transaction records first.
Report File with the platform, your local authorities, and the relevant national agency.
Secure Reset passwords, enable MFA, and monitor impacted financial or identity systems.
Step By Step

What to Do Before You File

  1. Preserve evidence. Capture screenshots of emails, chats, fake profiles, payment instructions, and system alerts. Save files, URLs, hashes, and timestamps if available.
  2. Record the timeline. Note when the incident started, how you discovered it, what accounts or devices were affected, and whether money or data was involved.
  3. Report on-platform. Use built-in reporting flows on Facebook, Instagram, LinkedIn, X, email providers, banks, and marketplaces when the incident happened there.
  4. File with authorities. For U.S. victims, that usually means IC3 plus local law enforcement. For other countries, use the official national reporting portal or police cybercrime unit.
  5. Secure the environment. Change passwords, rotate keys, revoke sessions, enable multi-factor authentication, and contact your bank or insurer if financial loss is possible.
  6. Keep your reference numbers. Save case IDs, ticket numbers, and confirmation emails so you can follow up and share them with other agencies if needed.
Reporting Paths

Where to Report Cyber Crime

The right destination depends on the incident type and the country involved. These are good starting points for the most common reporting scenarios.

The Process

How Reporting Cyber Crime Works

Filing a cyber crime report can feel uncertain, especially if you have never done it before. Understanding the process helps you prepare and set realistic expectations about what happens after you submit a complaint.

  1. Collect your evidence first. Before you contact any agency, gather everything you have: screenshots, email headers, transaction records, wallet addresses, URLs, usernames, and a written timeline. Investigators rely on the details you provide to connect your case to broader patterns.
  2. Report on the platform where it happened. If the incident involved a social media platform, email provider, or financial service, report it there first. Platform teams can freeze accounts, remove content, and preserve data that may be needed later.
  3. File with your local police. A local police report creates an official record. Request a case number or reference number — you may need it for insurance claims, bank disputes, or when following up with national agencies.
  4. Submit to the relevant national agency. Use the reporting portals listed above for your country. National agencies aggregate complaints to identify organized campaigns, track repeat offenders, and coordinate cross-border investigations.
  5. Follow up and stay available. Investigations can take weeks or months. Keep your evidence safe and respond promptly if investigators contact you for additional information. Even if your individual case does not lead to an arrest, the data you provide contributes to larger enforcement actions.

Most agencies acknowledge receipt within a few business days. Response times vary depending on the severity of the incident, the volume of reports, and whether your case connects to an ongoing investigation.

Crime Categories

Types of Cyber Crime You Can Report

Cyber crime covers a wide range of offenses. Knowing which category your incident falls into helps you choose the right reporting channel and provide the most useful evidence.

Online Fraud and Scams

Includes shopping fraud, auction scams, advance-fee fraud, romance scams, and fake investment schemes. Preserve receipts, payment confirmations, and all communications with the scammer.

Identity Theft

When someone uses your personal information — name, Social Security number, bank details — to open accounts, make purchases, or commit fraud in your name. Report to police and your country's identity theft resource.

Phishing and Email Compromise

Deceptive emails, texts, or websites designed to steal credentials or trick you into transferring money. Save full email headers, sender addresses, and any links before reporting.

Ransomware and Malware

Malicious software that encrypts your files or steals data and demands payment. Do not pay the ransom before consulting law enforcement and legal counsel. Preserve logs and ransom notes.

Hacking and Unauthorized Access

Unauthorized entry into your accounts, devices, or networks. Change compromised passwords immediately, enable multi-factor authentication, and document what was accessed or changed.

Online Harassment and Cyberstalking

Persistent threats, intimidation, or abuse delivered through digital channels. Screenshot all messages, note timestamps and platforms, and report to both the platform and local police.

Cryptocurrency and Investment Fraud

Fraudulent trading platforms, fake token offerings, Ponzi schemes, and wallet-draining scams. Record wallet addresses, transaction hashes, platform URLs, and any promotional materials.

Data Breaches

When an organization's systems are compromised and personal data is exposed. If you are a victim, monitor your accounts, consider a credit freeze, and report to the relevant data protection authority.

After You Report

Protecting Yourself After Reporting Cyber Crime

Filing a report is an important step, but it is not the last one. Taking action to secure your accounts and monitor for further damage reduces your risk going forward.

  1. Change compromised passwords immediately. Update passwords for any accounts that were affected or that share the same credentials. Use a password manager to generate strong, unique passwords for each account.
  2. Enable multi-factor authentication. Add a second layer of protection to email, banking, social media, and any other critical accounts. Use an authenticator app rather than SMS when possible.
  3. Monitor your financial accounts. Check bank and credit card statements for unauthorized transactions. Set up transaction alerts so you are notified of activity in real time.
  4. Consider a credit freeze or fraud alert. In the United States, you can place a free credit freeze with Equifax, Experian, and TransUnion to prevent new accounts from being opened in your name. Similar services exist in other countries.
  5. Scan your devices for malware. Run a full antivirus scan on all devices that may have been compromised. Update your operating system and software to patch known vulnerabilities.
  6. Keep records of everything. Save copies of your police report, agency confirmation numbers, correspondence with platforms, and any follow-up communications. These records may be needed for insurance claims, bank disputes, or legal proceedings.
Common Scenarios

What People Most Often Need Help Reporting

Fake Facebook or Instagram Accounts

Report the profile on-platform first, then escalate with screenshots if the fake account is tied to fraud, impersonation, extortion, or harassment.

Phishing Emails and Business Email Compromise

Save the email headers, sender address, links, invoice details, and any transaction references before forwarding the evidence to your IT team and authorities.

Crypto and Investment Scams

Preserve wallet addresses, transaction hashes, screenshots, platform names, and communications. Report to law enforcement and the relevant exchange immediately.

Ransomware or Data Extortion

Contain the incident, preserve forensic evidence, and report to counsel, cyber insurance, law enforcement, and any regulatory bodies that apply to your industry.

FAQ

Frequently Asked Questions About Reporting Cyber Crime

How do I report a cyber crime?

Start by preserving evidence — screenshots, URLs, emails, and transaction records. Then report through the platform where the incident occurred, file with your local police department, and submit a complaint to the relevant national agency. In the U.S., that means IC3. In India, use cybercrime.gov.in. In the UK, file with Action Fraud.

How do I report cyber crime to the police?

Contact your local police department directly and bring all available evidence: screenshots, email headers, transaction records, usernames, and a written timeline. Many departments now have dedicated cybercrime units or digital forensics teams. Request a police report number for your records — you may need it for insurance claims, bank disputes, or follow-up with federal agencies like the FBI's IC3.

Where can I report cyber crime?

The right destination depends on your country and the type of incident. Key reporting channels include: United StatesIC3 and the FTC. IndiaNational Cyber Crime Reporting Portal. United KingdomAction Fraud. CanadaCanadian Anti-Fraud Centre. AustraliaReportCyber. NetherlandsPolitie. GermanyBSI and your state's Onlinewache. Always file with your local police as well.

How do I report cyber crime in the USA?

Submit a complaint to the FBI's Internet Crime Complaint Center at ic3.gov. Report identity theft or consumer fraud to the FTC at reportfraud.ftc.gov. For financial fraud, contact your bank and the Secret Service. Report child exploitation to NCMEC at missingkids.org. Always file a local police report as well.

How do I report cyber crime in India?

File a complaint through the National Cyber Crime Reporting Portal at cybercrime.gov.in. The portal handles financial fraud, social media crime, hacking, and other cyber offenses. For urgent cases, visit your nearest police station and file an FIR under the Information Technology Act, 2000.

How do I report a fake Facebook account to cyber crime authorities?

Report the profile to Facebook using the Report Profile option on the account's page. If the fake account is being used for fraud, impersonation, or harassment, also file a report with your local police and the relevant national cyber crime agency such as IC3. Preserve screenshots of the fake profile, any messages, and the profile URL before reporting.

How do I report a fake Instagram account to cyber crime authorities?

Use Instagram's in-app Report feature by tapping the three dots on the profile. For impersonation, use Instagram's dedicated impersonation form. If the account is involved in fraud or harassment, file a report with local law enforcement and the FBI's IC3 with screenshots as evidence. Take screenshots before reporting, as the content may be removed.

What evidence should I collect before reporting cyber crime?

Gather screenshots of messages, profiles, and transactions; email headers showing sender details; URLs of suspicious websites or profiles; transaction records and bank statements; phone numbers or usernames used by the attacker; and any communication logs. Write a timeline of events. Do not delete any messages or emails — save everything in a secure location before filing your report.

What types of cyber crime can I report?

You can report virtually any online criminal activity, including phishing and email scams, identity theft, ransomware and malware attacks, online harassment and cyberstalking, romance scams, business email compromise, credit card fraud, cryptocurrency scams, fake social media accounts used for fraud, child exploitation material, data breaches, and hacking or unauthorized access to accounts.

How do I report cyber crime in the Netherlands?

File a report through the Dutch National Police online portal at politie.nl. You can report online fraud, identity theft, hacking, and other cyber offenses. For urgent incidents, call 112. You can also report phishing emails to the Fraudehelpdesk at fraudehelpdesk.nl.

How do I report cyber crime in Germany?

In Germany, cyber crime is reported through your state's Onlinewache (online police station). Each of the 16 federal states operates its own portal. For IT security incidents affecting organizations, report to the BSI (Federal Office for Information Security) at bsi.bund.de. For emergencies, call 110.

What happens after I report a cyber crime?

Law enforcement reviews your complaint and determines whether to open an investigation. For IC3 reports, your complaint is analyzed and may be referred to federal, state, or local agencies. You may be contacted for additional information. While not every report results in an arrest, your complaint helps law enforcement identify patterns, build cases against repeat offenders, and issue public warnings about active threats.

Next Step

Use Threat Context to Strengthen Your Response

If you're investigating an incident and need a broader view of active cyber patterns, review the curated 2025 threat intelligence page and the practical resource center.

Explore Threat Intelligence