Learn · Reporting · Updated June 2026
The right order, the right agency, the right realistic expectation. Country guides below.
National cybercrime units receive millions of reports per year and a small fraction of investigative capacity. Individual small-loss cases are almost never investigated standalone — the math doesn't work. What national centres do is aggregate: a hundred reports against the same wallet, domain or phone number triggers a pattern, which triggers a takedown, which triggers prosecution. The report that feels useless is the one that, joined with 99 others, makes the difference.
The same logic applies to platform takedowns. Meta, Telegram, App Store and registrar abuse teams act on volume and clarity — one well-documented report with screenshots, the URL, and a timestamp beats five vague ones. And community databases like GACS multiply the value: every confirmed report becomes a search result for the next person Googling the same wallet, broker or domain — usually within minutes.
Three reports, in this order: (1) your bank or exchange — to attempt a recall or freeze, this is the only step that can actually recover money; (2) your country's national cybercrime unit (IC3 in the US, Action Fraud in the UK, CAFC in Canada, Scamwatch in Australia, cybercrime.gov.in in India); (3) the platform the scam ran on — Meta, Telegram, the App Store, the registrar — to take the asset down. Add it to community databases like GACS so the next person is warned.
It does two things. First, it triggers possible recovery: bank reports filed quickly (often within 24–72 hours) can sometimes recall payments, and exchange reports can freeze deposit addresses. Second, even when individual recovery fails, the report enters a national dataset that drives takedowns, prosecutions, and pattern detection — the reason a particular phishing kit gets blocklisted at all is because thousands of people reported it.
Yes — and this is one of the highest-leverage things you can do. Near-miss reports help detection systems flag emerging variants before victims appear. Add the message, link, phone number or wallet to community databases like GACS in under a minute; it costs you nothing and protects the next person.
Realistically: individual small-loss cases are rarely investigated standalone. National centres aggregate reports and prioritise patterns — a single $400 loss won't open a case, but a hundred reports against the same wallet or domain will. That's why reporting still matters even when it feels futile: you're contributing to the dataset that drives action.
Block them. Recovery scams are a multi-billion-dollar industry that targets recent victims, often using lists bought from the original scammers. No legitimate recovery service will contact you out of the blue, ask for upfront fees, or guarantee recovery. The only legitimate paths are your bank, your exchange, and your country's law enforcement.
