Official Public Cyber Intelligence Reporting Portal
Secure • Confidential • Public Reporting
INVESTIGATION AREA

Online Scam Awareness & Reporting

Online scams continue to affect millions of individuals and businesses every year. Criminals use fake websites, fraudulent online marketplaces, phishing emails, impersonation, social media deception, and other sophisticated techniques to steal money, personal information, or sensitive data.

The National Cyber Intelligence Center provides educational guidance to help the public recognize online scams, understand common fraud tactics, collect evidence, and submit cybercrime reports for intelligence assessment.

What Would You Like to Do?

Whether you are gathering information, reporting an incident, or looking for prevention guidance, these resources can help you take the appropriate next step.

Report an Online Scam

Submit details about suspicious online activity, fraudulent transactions, phishing attempts, fake websites, or other internet scams.

Start Report

Prevention Tips

Learn practical ways to recognize scams, protect your personal information, and reduce the risk of becoming a victim.

Prevention Guides

Current Scam Alerts

Stay informed about emerging scam tactics, phishing campaigns, fake investment schemes, and other cyber threats.

View Alerts

Educational Articles

Explore detailed articles explaining how online scams operate, common warning signs, and digital safety best practices.

Read Articles

What Is an Online Scam?

Understanding how online scams work is the first step toward protecting yourself, your family, and your organization from cyber-enabled fraud.

An online scam is a deceptive scheme carried out through the internet with the intent of obtaining money, personal information, financial credentials, or other valuable data. Cybercriminals use a variety of digital platforms—including email, text messages, social media, online marketplaces, messaging applications, gaming platforms, and fraudulent websites—to contact potential victims.

Modern scams are often carefully designed to appear legitimate. Criminals may impersonate banks, government agencies, technology companies, delivery services, employers, investment firms, charities, or even family members. By creating a false sense of trust or urgency, they attempt to convince victims to send money, reveal sensitive information, install malicious software, or provide one-time verification codes.

Some scams are highly targeted and rely on information gathered from publicly available sources or previous data breaches. Others are distributed on a large scale through automated phishing campaigns that reach thousands of potential victims simultaneously. Regardless of the method used, the objective is typically financial gain or unauthorized access to accounts and personal information.

Online scams continue to evolve as technology changes. Artificial intelligence, social engineering, fake customer support services, cryptocurrency investment schemes, romance fraud, and counterfeit online stores have made cyber-enabled fraud increasingly sophisticated. Remaining cautious, independently verifying unexpected requests, and protecting sensitive information are essential practices for reducing the risk of victimization.

If you believe you have encountered an online scam, preserve all available evidence—including emails, messages, screenshots, payment confirmations, website addresses, and transaction records—and report the incident as soon as possible. Timely reporting helps support intelligence analysis, identify emerging fraud trends, and assist appropriate investigative partners.

Think You've Encountered an Online Scam?

If you've received suspicious messages, lost money, shared sensitive information, or interacted with a fraudulent website, report the incident through the National Cyber Intelligence Center. Early reporting can assist with intelligence gathering, fraud analysis, and identifying broader criminal activity.

Common Indicators of an Online Scam

Although scams vary in appearance, many share common warning signs. Recognizing these indicators early can help you avoid financial loss and protect your personal information.

1

Unexpected Contact

Be cautious of unsolicited emails, phone calls, text messages, or social media messages from unknown individuals or organizations claiming immediate action is required.

2

Urgent Requests

Scammers often create pressure by claiming your account will be suspended, a payment is overdue, or an opportunity will expire within minutes.

3

Requests for Personal Information

Legitimate organizations rarely ask for passwords, verification codes, banking credentials, or other sensitive information through email or text messages.

4

Suspicious Links or Websites

Fake websites may closely resemble legitimate businesses while using unusual web addresses, spelling mistakes, or missing security features.

5

Payment Through Unusual Methods

Requests for cryptocurrency, gift cards, wire transfers, or direct payment applications are commonly associated with fraudulent schemes.

6

Offers That Seem Too Good to Be True

Extremely low prices, guaranteed investment returns, unexpected prizes, or unrealistic job offers should always be independently verified before responding.

Understanding the Typical Scam Process

While individual scams differ, many cybercriminals follow a similar sequence of events designed to gain trust before exploiting victims.

Step 1 — Initial Contact

Criminals initiate contact through email, SMS, advertisements, fake online stores, dating platforms, messaging applications, social media, or phone calls.

Step 2 — Building Trust

The scammer attempts to appear credible by impersonating a trusted organization or establishing a relationship over time. Professional branding, fake identification, cloned websites, and convincing language are commonly used.

Step 3 — Creating Urgency

Victims are encouraged to make quick decisions without verifying information. Fear, excitement, financial gain, or emotional manipulation are frequently used to influence behavior.

Step 4 — Obtaining Money or Information

The victim is instructed to transfer money, purchase gift cards, reveal passwords, install remote-access software, share one-time verification codes, or submit sensitive personal information.

Step 5 — Disappearing or Repeating the Fraud

After receiving money or valuable information, scammers often disappear, demand additional payments, or sell the victim's personal information to other criminal groups for future fraud attempts.

Who Can Become a Victim?

Online scams affect people of every age, profession, and level of technical experience. Cybercriminals adapt their tactics to target different groups using information that is publicly available or obtained through previous data breaches.

Individuals

Fake online stores, phishing emails, delivery scams, account verification fraud, and investment schemes commonly target everyday internet users.

Families

Criminals may impersonate relatives, schools, government agencies, or healthcare providers to obtain personal information or money.

Businesses

Small businesses frequently experience invoice fraud, business email compromise, fake supplier requests, payroll scams, and credential theft.

Older Adults

Tech support scams, lottery fraud, romance scams, investment fraud, and impersonation schemes often specifically target senior citizens.

How to Protect Yourself

  • Verify unexpected requests through official contact information before responding.
  • Never share passwords, PINs, one-time verification codes, or authentication tokens.
  • Enable multi-factor authentication whenever available.
  • Keep operating systems, browsers, and applications updated with the latest security patches.
  • Carefully inspect website addresses before entering personal or financial information.
  • Avoid clicking links or downloading attachments from unknown or unexpected messages.
  • Monitor bank accounts and online accounts regularly for unauthorized activity.
  • Research unfamiliar companies before making purchases or investments.

What To Do Immediately

1

Stop Communication

End all contact with the suspected scammer and do not send additional payments or information.

2

Preserve Evidence

Save emails, screenshots, receipts, messages, account information, and transaction records.

3

Contact Financial Institutions

Notify your bank, payment provider, or credit card issuer immediately if money was transferred.

4

Secure Your Accounts

Change passwords, enable multi-factor authentication, and review recent account activity.

5

Submit an NCIC Report

Provide accurate information and upload available evidence to assist intelligence assessment.

Information That Can Help Your Report

  • Email messages and full email headers
  • Text messages and chat conversations
  • Screenshots of websites or social media profiles
  • Bank statements and payment confirmations
  • Cryptocurrency wallet addresses
  • Phone numbers and email addresses used by suspects
  • Website URLs and domain names
  • Shipping receipts or invoices
  • Dates, times, and locations of relevant events
  • Any additional supporting documents or images

What Happens After You Submit a Report?

Every report submitted to the National Cyber Intelligence Center follows a structured review process designed to support intelligence gathering and cybercrime assessment.

1

Report Received

Your report is securely submitted and assigned a unique NCIC reference number.

2

Evidence Review

Submitted information and supporting evidence are reviewed for completeness and intelligence value.

3

Intelligence Assessment

Analysts identify fraud patterns, related incidents, and indicators that may support broader cybercrime investigations.

4

Appropriate Action

Reports may contribute to intelligence products, trend analysis, or referral to appropriate investigative partners where applicable.

Common Questions

Can I report an attempted scam?

Yes. Even if no financial loss occurred, reporting attempted scams helps identify emerging fraud patterns.

What evidence should I provide?

Include screenshots, emails, messages, payment records, website links, usernames, account numbers, and any information related to the incident.

Can I update my report later?

Yes. Keep your NCIC reference number available if you need to provide additional information.

Will NCIC recover my money?

Submission of a report does not guarantee financial recovery or investigation. Reports support criminal intelligence assessment and referral processes.

REPORT CYBER FRAUD

Ready to Submit an Online Scam Report?

If you believe you've been targeted by an online scam, submit a secure report through the National Cyber Intelligence Center. Providing complete and accurate information helps support intelligence analysis and cybercrime investigations.