How do I report a phishing or suspicious email? (2024)

If you believe you are the victim of a phishing attempt, you should take the following steps:

• Contact your bank immediately and alert it to the situation. Let them know if the phishing attempt resembled official bank correspondence.
• If you have disclosed sensitive information in a phishing attack, you should also contact one of the three major credit reporting agencies and discuss whether you need to place a fraud alert on your file, which will help prevent thieves from opening a new account in your name. Here is the contact information for each credit reporting agency's fraud division:

Equifax
(800) 525-6285
P.O. Box 740250
Atlanta, GA 30374

Experian
(888) 397-3742
P.O. Box 1017
Allen, TX 75013

TransUnion
(800) 680-7289
P.O. Box 6790
Fullerton, CA 92634

• Report all suspicious contacts to the Federal Trade Commission (FTC), or by calling (877) IDTHEFT.
• Contact your local law enforcement or Federal Bureau of Investigation (FBI) Office.
• Report internet phishing to the Anti-Phishing Working Group.
• Report spam, attempts to fraudulently obtain money or valuables, and other criminal activity using the internet, to the FBI Internet Crime Complaint Center (IC3).

Learn more on the Report a Fraud/Scam page.

Last Reviewed:April 2021

Please note: The terms "bank" and "banks" used in these answers generally refer to national banks, federal savings associations, and federal branches or agencies of foreign banking organizations that are regulated by the Office of the Comptroller of the Currency (OCC). Find out if the OCC regulates your bank. Information provided on HelpWithMyBank.gov should not be construed as legal advice or a legal opinion of the OCC.