Incident Response Guide

How to Report Cyber Crime Clearly and Fast

Use this guide to preserve evidence, escalate scams or account abuse, and report ransomware, fraud, fake social profiles, and suspicious activity to the right agency.

Why It Matters

Reporting Helps Investigators Connect the Dots

Most cyber incidents are underreported, which makes criminal activity look smaller and slower than it really is. A clear report with good evidence can support fraud recovery, help law enforcement build a case, and strengthen trend data for future warnings. If you also want context on the threats behind what happened, review the threat intelligence library and the broader resource center.

Document Save screenshots, URLs, account IDs, and transaction records first.
Report File with the platform, your local authorities, and the relevant national agency.
Secure Reset passwords, enable MFA, and monitor impacted financial or identity systems.
Step By Step

What to Do Before You File

  1. Preserve evidence. Capture screenshots of emails, chats, fake profiles, payment instructions, and system alerts. Save files, URLs, hashes, and timestamps if available.
  2. Record the timeline. Note when the incident started, how you discovered it, what accounts or devices were affected, and whether money or data was involved.
  3. Report on-platform. Use built-in reporting flows on Facebook, Instagram, LinkedIn, X, email providers, banks, and marketplaces when the incident happened there.
  4. File with authorities. For U.S. victims, that usually means IC3 plus local law enforcement. For other countries, use the official national reporting portal or police cybercrime unit.
  5. Secure the environment. Change passwords, rotate keys, revoke sessions, enable multi-factor authentication, and contact your bank or insurer if financial loss is possible.
  6. Keep your reference numbers. Save case IDs, ticket numbers, and confirmation emails so you can follow up and share them with other agencies if needed.
Reporting Paths

Where to Report Cyber Crime

The right destination depends on the incident type and the country involved. These are good starting points for the most common reporting scenarios.

Common Scenarios

What People Most Often Need Help Reporting

Fake Facebook or Instagram Accounts

Report the profile on-platform first, then escalate with screenshots if the fake account is tied to fraud, impersonation, extortion, or harassment.

Phishing Emails and Business Email Compromise

Save the email headers, sender address, links, invoice details, and any transaction references before forwarding the evidence to your IT team and authorities.

Crypto and Investment Scams

Preserve wallet addresses, transaction hashes, screenshots, platform names, and communications. Report to law enforcement and the relevant exchange immediately.

Ransomware or Data Extortion

Contain the incident, preserve forensic evidence, and report to counsel, cyber insurance, law enforcement, and any regulatory bodies that apply to your industry.

FAQ

Frequently Asked Questions About Reporting Cyber Crime

How do I report a cyber crime?

Start by preserving evidence — screenshots, URLs, emails, and transaction records. Then report through the platform where the incident occurred, file with your local police department, and submit a complaint to the relevant national agency. In the U.S., that means IC3. In India, use cybercrime.gov.in. In the UK, file with Action Fraud.

How do I report cyber crime to the police?

Contact your local police department directly and bring all available evidence: screenshots, email headers, transaction records, usernames, and a written timeline. Many departments now have dedicated cybercrime units or digital forensics teams. Request a police report number for your records — you may need it for insurance claims, bank disputes, or follow-up with federal agencies like the FBI's IC3.

Where can I report cyber crime?

The right destination depends on your country and the type of incident. Key reporting channels include: United StatesIC3 and the FTC. IndiaNational Cyber Crime Reporting Portal. United KingdomAction Fraud. CanadaCanadian Anti-Fraud Centre. AustraliaReportCyber. Always file with your local police as well.

How do I report cyber crime in the USA?

Submit a complaint to the FBI's Internet Crime Complaint Center at ic3.gov. Report identity theft or consumer fraud to the FTC at reportfraud.ftc.gov. For financial fraud, contact your bank and the Secret Service. Report child exploitation to NCMEC at missingkids.org. Always file a local police report as well.

How do I report cyber crime in India?

File a complaint through the National Cyber Crime Reporting Portal at cybercrime.gov.in. The portal handles financial fraud, social media crime, hacking, and other cyber offenses. For urgent cases, visit your nearest police station and file an FIR under the Information Technology Act, 2000.

How do I report a fake Facebook account to cyber crime authorities?

Report the profile to Facebook using the Report Profile option on the account's page. If the fake account is being used for fraud, impersonation, or harassment, also file a report with your local police and the relevant national cyber crime agency such as IC3. Preserve screenshots of the fake profile, any messages, and the profile URL before reporting.

How do I report a fake Instagram account to cyber crime authorities?

Use Instagram's in-app Report feature by tapping the three dots on the profile. For impersonation, use Instagram's dedicated impersonation form. If the account is involved in fraud or harassment, file a report with local law enforcement and the FBI's IC3 with screenshots as evidence. Take screenshots before reporting, as the content may be removed.

What evidence should I collect before reporting cyber crime?

Gather screenshots of messages, profiles, and transactions; email headers showing sender details; URLs of suspicious websites or profiles; transaction records and bank statements; phone numbers or usernames used by the attacker; and any communication logs. Write a timeline of events. Do not delete any messages or emails — save everything in a secure location before filing your report.

What types of cyber crime can I report?

You can report virtually any online criminal activity, including phishing and email scams, identity theft, ransomware and malware attacks, online harassment and cyberstalking, romance scams, business email compromise, credit card fraud, cryptocurrency scams, fake social media accounts used for fraud, child exploitation material, data breaches, and hacking or unauthorized access to accounts.

What happens after I report a cyber crime?

Law enforcement reviews your complaint and determines whether to open an investigation. For IC3 reports, your complaint is analyzed and may be referred to federal, state, or local agencies. You may be contacted for additional information. While not every report results in an arrest, your complaint helps law enforcement identify patterns, build cases against repeat offenders, and issue public warnings about active threats.

Next Step

Use Threat Context to Strengthen Your Response

If you're investigating an incident and need a broader view of active cyber patterns, review the curated 2025 threat intelligence page and the practical resource center.

Explore Threat Intelligence