‹ Back to the guide

Does reporting actually do anything?

Usually you get told either "always report it!" with no explanation, or "nothing ever happens anyway." Here's what each report really does, best first.

They are not all the same, and the difference is large. One of them can get fake websites taken down within hours. One of them is the only report that can get your own money back. And one of them — the one most people reach for first — does almost nothing at all.

1. Tell the company being impersonated

The most effective thing an ordinary person can do. If a message pretends to be PayPal, your bank, Amazon, or the Postal Service, send it to that company's abuse or phishing address — most have one, and it's usually listed on their security page.

What actually happens: big brands run takedown teams whose whole job is killing fake pages that wear their name. A forwarded phishing email gives them the live web address, and those pages often come down within hours — not just for you, but for everyone else that campaign was queued to reach.

Do this one if you only do one. Forward the whole email rather than a screenshot where you can, since the hidden header information helps them trace it.

2. Forward scam texts to 7726

In the U.S., 7726 spells SPAM, and it goes to your mobile carrier — not to Apple, not to Google. It's free and doesn't count against your plan.

What actually happens: carriers use these to identify and block sending numbers and shortcodes across their whole network. Slower and less visible than a brand takedown, but it genuinely shortens the working life of the number.

⚠️ The ordering detail nobody mentions On many phones, "Report spam and block" is a single button that also deletes the conversation — so once you press it, there's nothing left to forward. Forward to 7726 first (press and hold the message → Forward → type 7726 → send), then report and block. Standard advice tells you to do both and never mentions that the obvious order makes it impossible.

3. "Report spam" inside your messaging app

What actually happens: it trains the filter that decides whether the next one ever reaches your inbox. Worth doing, and the effect is real — but it's spread thin across millions of reports, and you'll never see it.

Note this is a different destination from 7726 above. The in-app button goes to your phone's messaging service. It does not reach your carrier.

4. Report to the FTC — reportfraud.ftc.gov

Be clear about what this is and isn't. The Federal Trade Commission will not investigate your individual case, will not contact you about it, and will not get your money back.

What actually happens: your report joins a database that law enforcement uses to spot patterns and build cases against operations running thousands of these. That's slow, invisible, and genuinely how large scam operations eventually get shut down. It's a contribution to the pile, and the pile matters.

Personal details were taken? Use IdentityTheft.gov instead — same agency, but it also builds you a personalized recovery plan and the letters you'll need.

5. ic3.gov — the one that can get your money back

This one is different in kind from everything above, and hardly anyone knows about it.

The FBI's Internet Crime Complaint Center runs a Recovery Asset Team that can work with banks to freeze fraudulent transfers before the money is gone. Published figures put their freeze rate somewhere around 58% to 74% depending on the year — genuinely good odds.

The part that matters

It depends on reporting within roughly 72 hours.

After that window the odds fall away sharply, because the money has been moved on and split up. If real money has left your account, file at ic3.gov the same day — before you tell anyone, before you've finished being upset about it. Call your bank first, then file.

6. Blocking the number

Feels like action. Accomplishes close to nothing. The number that texted or called you was almost certainly spoofed or disposable, and will never be used to contact you again anyway. You're blocking a number the sender has already thrown away.

No harm in it — just don't expect your volume to drop, and don't feel you've dealt with the problem because you pressed it.

Also worth knowing: the Do Not Call registry works on legitimate telemarketers, who follow rules. Criminals are not consulting it. It's not a scam defense.

⚠️ And the one thing never to do: don't reply STOP Ten years of legitimate marketing has trained all of us that STOP is how you unsubscribe — and with a real company, it is, and it's required to work.

With a scam text it does the opposite. It proves a real person read the message and responded. Your number moves off a bulk list and onto a validated list, which is worth considerably more and gets sold on. Don't reply at all — not STOP, not "wrong number," not to tell them what you think of them.

So is it worth the bother?

Straight answer: reporting will not stop your phone from buzzing. Nothing you send to anyone changes what reaches you tomorrow.

What it does is take the number, the website, or the operation out of circulation a little sooner — for the next person, who might not have read a page like this one. Most of the tiers above are that kind of contribution, and whether that's worth ten seconds of your day is a fair question to answer for yourself.

The exception is number 5. If money has actually moved, ic3.gov inside 72 hours is not a civic gesture — it's the best chance you have of getting it back. That one is for you.

‹ What to do if it already happened

‹ Back to the guide