Should I reply to find out who it is?

No. Replying confirms your address is active and increases future targeting.

How do I check a link safely?

Do not click it. Type the organisation's address yourself, or check the domain against public reports.

My email account was accessed. What is the priority?

Email is the recovery route for everything else — secure it first, then review connected accounts.

Can ScamGuide take the phishing site down?

Reports can support takedown requests to hosts and registrars, but outcomes are not guaranteed.

Help & reporting

Report phishing and secure your accounts

Phishing aims at your credentials rather than your wallet directly. If you entered details on a cloned page, the priority order is: secure accounts first, then preserve evidence, then report.

Report a Scam Search Scam Reports See how ScamGuide works

What this kind of scam is

An email, text, message or advertisement leads to a page that imitates a service you use.
Credentials, card details or verification codes entered on that page go straight to the operator.
Access is then used for payments, account takeover, or as a route into other accounts using the same password.

Common warning signs

The message creates urgency: an account will be closed, a parcel returned, a payment declined.
The sending address or link domain does not exactly match the real organisation's domain.
You are asked for a verification code, PIN or full password.
Attachments arrive unexpectedly, or a link shortener hides the destination.
The greeting is generic, or details in the message do not match your account.
A login page appears after clicking a link rather than after you navigated there yourself.

Steps to consider now

1
Change the password immediately
Do it from a device you trust, and change it anywhere you reused it.
2
Enable two-factor authentication
Prefer an authenticator app or security key over SMS where possible.
3
Check account activity and recovery settings
Look for new devices, forwarding rules, changed recovery email or phone numbers.
4
Tell your bank if card or banking details were entered
Ask them to monitor or replace the card.
5
Report the phishing attempt to ScamGuide
Include the sender address, the link domain and a screenshot — this improves the public record for others.

Evidence worth preserving

Screenshots of every conversation, including profile names, handles and the dates shown.
Payment records: bank transfer confirmations, card statements, invoices or receipts.
Cryptocurrency transaction hashes and the destination wallet addresses.
The website address, app name and any download links you were sent.
Emails with full headers where possible, plus any documents or contracts you received.
A short written timeline of what happened and when, made while it is still fresh.

How ScamGuide works

1. You submit a structured report through a guided wizard — no legal or technical knowledge needed.
2. A private case is created with a reference number, timeline and secure evidence vault.
3. A case specialist reviews the details and communicates with you in an encrypted, private thread.
4. You explore the recovery and reporting options that realistically apply to your circumstances.
5. A sanitised, moderated summary may be published so other people can search it. You are never named.

ScamGuard Pro provides scam reporting, information and recovery-support services. Recovery outcomes depend on the circumstances of each case and cannot be guaranteed.

Frequently asked questions

Risk is much lower. Still run a device scan, change the password if unsure, and keep the message as evidence.

Ready to document what happened?

Reporting is free and takes a few minutes. You can search existing reports first — try a sender address or link domain.

Report a Scam Search Scam Reports