How to Report an Online Scam to Authorities

Why Reporting Matters Even When Recovery Seems Unlikely

Many scam victims hesitate to report because they feel embarrassed, or because they assume nothing will come of it. Both of these concerns are understandable — but both are reasons to report, not reasons to stay silent. Shame is exactly what scammers count on to keep their victims quiet, and your report may be the fifth or fiftieth complaint about the same criminal operation that finally triggers a federal investigation.

Law enforcement agencies use complaint data to identify patterns. A single report may not generate an immediate response. But the same phone number reported by 200 people in six states becomes a priority case for the FTC, FBI, or state attorney general. Every report strengthens that pattern.

Where to Report Based on Scam Type

The FTC — For Most Scams

The Federal Trade Commission is the primary federal agency for consumer fraud. For the majority of online scams — fake websites, phishing, online shopping fraud, subscription traps, romance scams — the FTC is your first call. File a report at reportfraud.ftc.gov. The process takes about 10 minutes. Your information goes into the FTC's Consumer Sentinel Network, which is accessible to over 2,800 law enforcement agencies worldwide.

The FBI's Internet Crime Complaint Center (IC3)

The FBI's IC3 (ic3.gov) is specifically designed for cybercrime and cases involving significant financial loss. If the fraud involved hacking, ransomware, email compromise, large wire transfers, or identity theft with financial consequences, file with the IC3. They prioritize cases with losses above $10,000, but all reports are valuable. The IC3 specifically handles elder fraud cases and has a dedicated unit for them.

Your State Attorney General

State attorneys general can take action against fraudulent businesses operating within their state — or that target residents of their state. They also have the authority to issue refunds to victims in class action settlements. Find your state's AG consumer complaint portal by searching "[your state] attorney general report scam." This is especially effective for local fraud schemes and businesses that claimed to be local.

AARP Fraud Watch Network

The AARP Fraud Watch Network is not a law enforcement agency, but it provides something equally valuable: support for victims and a community of advocates who track scam trends. Call their fraud helpline at 1-877-908-3360 (free, available to everyone regardless of AARP membership). Staff can help you understand your options, provide emotional support, and connect you with relevant resources for your specific situation.

Your Bank or Credit Card Company

If money was transferred or charged, contact your financial institution immediately — before any other reporting step. Call the number on the back of your card. Explain that you believe you were defrauded and ask to file a fraud dispute. Credit card companies can reverse charges. Banks can sometimes recover wire transfers if reported within 24 to 72 hours. Acting quickly is critical for financial recovery.

Social Security Administration

If your Social Security Number was given to a scammer, report it to the SSA at oig.ssa.gov or call 1-800-269-0271. You should also place a fraud alert or credit freeze with the three major credit bureaus (Equifax, Experian, TransUnion) to prevent new accounts from being opened in your name. This is free and takes about 15 minutes per bureau.

Medicare Fraud

If the scam involved Medicare — billing fraud, fake Medicare cards, someone requesting your Medicare number — report it to the Department of Health and Human Services at oig.hhs.gov or call 1-800-HHS-TIPS (1-800-447-8477). Medicare fraud costs taxpayers billions annually and is taken very seriously by federal prosecutors.

What Information to Gather Before Reporting

Your report will be more useful to investigators if you document as much as possible before filing. Gather:

• Dates and times of all contact with the scammer
• Phone numbers, email addresses, or usernames used by the scammer
• Website URLs (copy and paste them exactly)
• Screenshots of conversations, emails, or websites
• Names used (even if fake, they're useful)
• Amounts paid, payment methods used, and transaction references
• Any tracking numbers or delivery information for purchases

Take screenshots before reporting — websites are often taken down quickly once complaints accumulate.

Realistic Expectations After Reporting

It's important to be honest about what reporting typically achieves for individual victims. In most cases, you will not receive a direct callback or individual case update. Your report enters a database that informs broader investigations. The FTC and FBI do occasionally pursue individual cases and can sometimes recover funds — but this usually happens at scale, years after the initial fraud, through civil or criminal proceedings against large operations.

The primary reason to report is not to recover your money, though recovery is possible. It is to protect the next person — the senior who will be targeted by the same operation next week. Your report is an act of community protection.

Reporting a scam is not admitting you were foolish. It is the responsible action of someone who wants to make sure criminals face consequences and future victims are protected.

The Emotional Side of Reporting

Scam victimization is traumatic. Shame and self-blame are common reactions, especially for seniors who may fear that family members will judge their judgment or try to restrict their independence. Know that highly intelligent, experienced people are defrauded every day by professional criminals who have refined their methods over years. Reporting is a step toward reclaiming agency — and the AARP helpline exists specifically to provide support through that process.

For next steps after a scam incident, see our guide on how to recover after an online scam. And if your parent may have been in contact with scammers by phone, read our article on what to do if your parent called a scam number.