Report a Fake Website or Phishing Link 2026

Reviewed on: 2026-06-19.

There are two distinct actions. Use both if you lost money; use only the first if you spotted a fake site without being defrauded.

• Route A, Report the URL (no money lost): Flag the fake website or phishing link so authorities can block it.
• Route B, File a victim complaint (money lost or account compromised): Lodge a formal complaint with a reference number for police action.

These are separate forms on the same portal. Do not skip Route A thinking Route B is enough, the Suspect Repository is what drives takedowns.

Where: cybercrime.gov.in/Webform/cyber_suspect.aspx

Step-by-step:

1. Go to cybercrime.gov.in and click Report Suspect in the top menu.
2. Select Website URL as the identifier type.
3. Enter the full fake URL (copy-paste from your browser address bar, including “https:”). - Select the state where the incident occurred from the dropdown. - Write a brief description (up to 500 characters): what the site claimed, how you found it, what it asked you to do. - Upload supporting evidence (screenshot, screen recording), maximum 5 MB. - Complete the CAPTCHA and click Submit. You do not need to register or log in for Route A. There is no fee. What can be reported this way: * Fake bank or government websites * Phishing links sent by SMS, WhatsApp, or email * Fraudulent e-commerce shops * Fake investment or lottery portals * Spoofed apps linked from SMS or social media * Fake helpline websites impersonating RBI, UIDAI, IRCTC, or similar bodies ===== Route B: File a Victim Complaint ===== Where: cybercrime.gov.in, click File a Complaint or Report and Track. Use this route if you clicked a phishing link and lost money, shared OTP, or had your account accessed. Step-by-step: - Choose File a Complaint on the home page. - Register with your mobile number (OTP verified) to get a trackable reference number. - Select the category: Financial Fraud (if money was debited) or Other Cyber Crime (for account compromise without financial loss). - Fill in the incident details: date, platform, amount lost (if any), and the fake URL. - Paste the phishing URL in the description and in the suspect identifier field. - Upload all evidence (bank statement, chat screenshots, SMS, transaction ID). - Submit. You will receive a reference number by SMS and email. - Track progress at cybercrime complaint status. Call 1930 first if money was debited. The Cyber Crime Helpline 1930 can flag the transaction for a hold, call within hours of the fraud. Filing the portal complaint can follow, but the call triggers the faster financial-freeze mechanism. ===== Also Report on Chakshu (DoT Portal) ===== If the fake website reached you via an SMS or WhatsApp message, additionally report the communication on the Department of Telecommunications' Chakshu portal. Where: sancharsaathi.gov.in, Chakshu - Select the medium: SMS, WhatsApp, or Call. - Choose the fraud type: Malicious link / website. - Paste the URL mentioned in the message. - Verify with OTP and submit. Chakshu reports help DoT block the originating telecom resource (SIM, number, sender ID) used to spread the phishing link. It is separate from the cybercrime complaint and takes about two minutes. ===== Also Report to CERT-In ===== The Indian Computer Emergency Response Team (CERT-In) handles reports about phishing infrastructure, fake domains, malicious hosting, and coordinated campaigns. Email: [email protected] (as listed by the dispatch; confirm the current address at cert-in.org.in before sending). Include in your email: * Subject line: “Phishing URL Report” or “Fake Website Report” * The full URL of the fake site * A brief description of what the site claims to be (e.g., “impersonates SBI login page”) * The date and time you encountered it * A screenshot attached as a PNG or PDF CERT-In works with hosting providers and domain registrars to take down phishing infrastructure. Response timelines are not publicly fixed, confirm current procedures on the CERT-In website. ===== Evidence to Collect Before Reporting ===== Collect this before the fake site goes offline: ^ Evidence ^ How to Capture ^ | Full URL | Copy from browser address bar | | Screenshot of the fake page | Full-page screenshot (browser print or extension) | | SSL certificate details | Click the padlock icon, note the issuer and domain | | SMS or email that linked you | Screenshot showing sender number or email address | | Transaction proof (if defrauded) | Bank SMS, UPI app transaction ID, statement | | Browser warning (if shown) | Screenshot of any “Deceptive site ahead” warning | Do not submit a report from the fake site itself, it may log your IP or attempt further phishing. ===== Legal Basis ===== Fake websites and phishing attacks are offences under the Information Technology Act 2000. Impersonation and identity-theft offences under the IT Act attract imprisonment and fines. The Indian Penal Code sections on cheating and forgery also apply. You do not need to cite any section in your complaint, police map the offence at their end. ===== If Your Report Gets No Action ===== - Appeal to GAC: The Grievance Against Police portal at gac.gov.in accepts complaints if state police fail to act on a cybercrime complaint. - Contact State Cyber Cell: Every state has a Cyber Crime Police Station. File a written complaint there with your cybercrime.gov.in reference number. - CERT-In escalation: If the fake site continues operating despite reporting, follow up with CERT-In at [email protected] (confirm address on their site). - For money-fraud victims: also see reporting cyber fraud on the 1930 helpline and filing a UPI fraud complaint. ===== FAQ ===== ==== Can I report a fake website anonymously? ==== Yes. Route A (Report Suspect) does not require login or registration. You only need to register if you want a trackable reference number for a victim complaint under Route B. ==== The fake site has already disappeared. Can I still report it? ==== Yes. Report the URL even if the site is offline, the domain and hosting details remain in registrar records and help authorities trace the operators. Submit whatever cached evidence you have (screenshot, browser history). ==== What if the SMS had a shortened link (bit.ly, etc.)? ==== Report the shortened link as-is. Also expand it using a link-preview tool (such as checkshorturl.com) and report the destination URL separately. Include both in your submission. ==== I received a phishing email from a fake government address. Where do I report? ==== Report on cybercrime.gov.in under Other Cyber Crime. Also forward the email (with full headers) to [email protected]. If the email impersonates a specific ministry or department, additionally write to that department's grievance email. ==== How long does it take for a fake site to be taken down? ==== No fixed timeline is published. Takedowns depend on the hosting country, the domain registrar, and the response speed of the ISP. Reporting on multiple channels (cybercrime.gov.in, Chakshu, CERT-In) increases the chance of faster action. ==== Will I get a case reference number? ==== Route A (Report Suspect) does not generate a complaint number, it feeds the Suspect Repository. Route B (File a Complaint with login) generates an SMS and email reference number for tracking. ==== I spotted a fake job advertisement website. Is this the right place? ==== Yes, report the URL under Route A. If you paid money or shared documents, also file Route B and read our guide on online job scams for additional steps. ==== What about fake social media profiles impersonating a brand? ==== Use the Report Abuse to Social Media option on cybercrime.gov.in in addition to Route A. Also use the platform's own reporting tool (Facebook, Instagram, WhatsApp). If the profile drove you to a fake website, report the URL through Route A as well. ===== RTI Escalation ===== If your complaint is not acted upon and you want official information, you may file an RTI application. File an RTI to: CERT-In (under MeitY) and the State Cyber Cell (under the State Home Department). * What action was taken on cybercrime complaint reference number [your number]? * How many fake-website URLs were reported and taken down in the last quarter? * What is the standard operating procedure for handling phishing URL reports? * Which officer is the CPIO for cybercrime complaints in this state? * Has any FIR been registered on this complaint, and if not, why? → Use our free AI RTI Drafter to generate a complete Section 6(1) application. If you lost money through a digital arrest scam or similar scheme involving a fake government website, include your financial loss amount and the fake URL in the RTI application. ===== Sources ===== * National Cyber Crime Reporting Portal: https://cybercrime.gov.in * Report Suspect form: https://cybercrime.gov.in/Webform/cyber_suspect.aspx * CERT-In (Indian Computer Emergency Response Team): https://www.cert-in.org.in * Chakshu, Sanchar Saathi fraud portal: https://sancharsaathi.gov.in/sfc/Home/sfc-complaint.jsp * Grievance Against Police (GAC): https://gac.gov.in By Dr. Shrawan Kumar Pathak