Learn About Reporting Email Fraud to Authorities

Understanding Email Fraud and Why Reporting Matters

Email fraud occurs when someone uses email to deceive you into sending money, sharing personal information, or downloading harmful software. According to the FBI's Internet Crime Complaint Center (IC3), email fraud—including phishing and business email compromise scams—resulted in reported losses exceeding $2.7 billion in 2023. These crimes affect millions of people each year, from individual consumers to large corporations.

Free Guide to Visiting the DMV in Emporia Kansas →

When you receive a fraudulent email, it often appears to come from a legitimate source. A scammer might impersonate your bank, a popular retailer, a government agency, or even someone you know. The email typically creates a sense of urgency, asking you to verify account information, confirm a payment, or click a link to resolve a supposed problem. Many people fall victim because the emails look professional and use official logos and language.

Reporting email fraud to the appropriate authorities serves several purposes. First, it creates an official record of the crime. Law enforcement agencies track fraud reports to identify patterns and locate criminals operating across multiple victims. Second, your report may help prevent others from becoming victims. When agencies receive multiple reports about the same scam, they can issue public warnings. Third, reporting supports investigations that may lead to shutting down fraudulent operations or recovering stolen funds.

Understanding the different types of email fraud helps you recognize what you're dealing with. Phishing emails try to trick you into revealing passwords or personal data. Business email compromise scams target employees by impersonating executives to authorize fraudulent wire transfers. Romance scams use fake profiles to build trust before requesting money. Tech support scams claim your device has a problem and direct you to call a fraudulent number. Each type requires reporting to specific agencies depending on who was targeted and what happened.

Practical takeaway: When you receive a suspicious email, do not respond to it, click links in it, or download attachments from it. Instead, mark it as spam or phishing in your email client and prepare to report it to the authorities described in the following sections.

Reporting to the FBI's Internet Crime Complaint Center (IC3)

The Internet Crime Complaint Center (IC3) is a partnership between the Federal Bureau of Investigation (FBI) and the National White Collar Crime Center. IC3 serves as the official federal government repository for reporting internet-facilitated crimes, including email fraud. The IC3 system allows you to file a complaint online without needing to visit an FBI office or speak to an agent directly. In 2023, the IC3 received over 880,000 complaints from victims, with total reported losses exceeding $14.3 billion.

Learn How Rent Payments Build Your Credit →

To report to IC3, you visit the website at ic3.gov. The process begins by creating an account or logging in if you already have one. You then select "File a Complaint" and choose the type of crime that occurred. The system guides you through entering details about the incident, including the date you received the email, the sender's email address, what the scammer asked you to do, and whether you sent money or personal information. You'll also describe how you discovered the email was fraudulent and note any financial losses.

IC3 accepts complaints about various types of email fraud, including phishing, spoofed emails, business email compromise, romance scams, lottery and prize fraud, and employment scams. The complaint form asks for specific information: the fraudulent email address used, any website URLs mentioned in the email, bitcoin or cryptocurrency wallet addresses if money was requested, bank account numbers if provided, and any attachments you received. Having this information ready before you start your report makes the process faster.

After you submit your complaint to IC3, you receive a complaint number. Save this number because it serves as your reference for tracking the complaint. IC3 does not acknowledge individual complaints or provide updates on investigations. However, your report becomes part of aggregate data that the FBI uses to identify emerging fraud trends and allocate investigative resources. IC3 also forwards complaints to other agencies when appropriate, such as the Secret Service for financial institution fraud or the Postal Inspection Service for mail fraud.

Practical takeaway: Visit ic3.gov and file your complaint as soon as possible after discovering the email fraud. Gather the fraudulent email address, sender details, and any URLs or attachments mentioned. Keep your complaint number for your records.

Contacting Your Bank and Financial Institutions

If the fraudulent email impersonated your bank, credit union, or online payment service, report it directly to that institution. Your bank has a fraud department that investigates reports and can help protect your accounts. If you sent money as a result of the email fraud, your bank may be able to recover it if reported quickly. Financial institutions also track reports to identify which organizations are being impersonated most frequently and can take steps to warn their actual customers.

Learn How SSDI and Food Stamps Work Together →

Most banks display a "Report Fraud" or "Report Phishing" link on their website, typically in the footer or under customer service sections. You can also call the customer service number on the back of your debit or credit card. When you contact your bank, have the fraudulent email ready. You may need to provide the sender's email address, the exact content of the message, any links that were included, and details about what personal information was requested. Be prepared to discuss whether you actually clicked links in the email or provided information.

If the email impersonated another bank or financial institution—not your own—you should still report it to that organization. Visit the real institution's official website (not by clicking links in the fraudulent email) and look for fraud reporting contact information. For example, if you receive a phishing email impersonating Chase Bank but you don't have a Chase account, you can still report it to Chase's fraud department. This helps the real Chase protect their actual customers from similar scams.

Document all communication with your bank regarding the fraud report. Keep records of dates, times, names of staff members you spoke with, and what was discussed. If money was transferred, ask your bank about their fraud protection policies and what steps they take to recover funds. Most banks have liability protections for customers who report fraud promptly. Review your account statements carefully for 60 to 90 days after a fraud incident to watch for additional unauthorized charges. If you notice suspicious activity on your bank accounts, report it again immediately and consider placing a fraud alert or credit freeze.

Practical takeaway: Contact your bank's fraud department by calling the number on the back of your card or visiting their official website. Provide all details about the fraudulent email and any money that was sent. Ask about fraud recovery options and set up monitoring of your accounts.

Reporting to the Federal Trade Commission (FTC)

The Federal Trade Commission (FTC) is another important agency for reporting email fraud, particularly when the fraud involves deception about products, services, or money. The FTC collects consumer fraud complaints and uses this data to identify fraud patterns, conduct investigations, and bring enforcement actions against fraudsters. The FTC operates a complaint system called ReportFraud.ftc.gov where you can file reports about various types of scams including email fraud.

Free Guide to Laundry Washing Times and Cycles →

To report to the FTC, visit reportfraud.ftc.gov and select "Report Fraud" or the specific fraud type that applies to your situation. The FTC website allows you to report identity theft, online shopping fraud, advance-fee fraud, romance scams, and many other scams involving deception. The reporting form asks for details about the fraudster's contact information, how you were contacted, what was promised or claimed, whether money was involved, and what personal information was shared. Like IC3, the FTC provides you with a reference number after submission.

The FTC also maintains specific resources for different fraud types. If you were targeted by a romance scam through email or social media, the FTC has detailed information about these schemes and how to report them. For business email compromise targeting your workplace, the FTC provides guidance on reporting to both law enforcement and your company. The FTC's Consumer Sentinel Network combines reports from the FTC, law enforcement agencies, and state attorneys general to create a comprehensive picture of fraud and identity theft across the country. This aggregated data helps identify the most prevalent fraud schemes affecting Americans.

One useful feature of the FTC system is the ability to add your email address to the National Do Not Call Registry and Do Not Mail lists. While these primarily address telemarketing and direct mail, they're part of the broader consumer protection framework. The FTC also publishes regular reports on top fraud complaints, which can help you understand whether the scam you experienced is widespread. If you received an email about a government benefit, refund, or program, the FTC wants to know