Cyber Crime Helpful Links and Additional Resources for Reporting

Font Size: + -

Feedback Print

Victims of cybercrime and online fraud are encouraged to report incidents promptly to the appropriate law enforcement agencies, government organizations, financial institutions, and service providers. Timely reporting can help preserve evidence, support investigations, reduce financial losses, and prevent others from becoming victims.

Helpful resources may include local law enforcement agencies, state and federal reporting portals, consumer protection agencies, financial institutions, identity theft recovery services, and cybersecurity awareness organizations. Common reporting categories include online fraud, phishing attempts, identity theft, ransomware attacks, business email compromise, cryptocurrency scams, internet crimes against children, and other cyber-related offenses.

By utilizing trusted reporting resources and following recommended cybersecurity practices, individuals and organizations can play an important role in combating cybercrime and improving online safety for their communities.

Local Reporting

Federal Cybercrime Reporting

Federal Bureau of Investigation (FBI) – Internet Crime Complaint Center (IC3)
Website: https://www.ic3.gov
Report: Business Email Compromise (BEC), ransomware, cryptocurrency scams, romance scams, online extortion, phishing, and investment fraud.

U.S. Secret Service – Cyber Fraud Task Forces
Website: https://www.secretservice.gov/contact/field-offices
Investigates financial cybercrimes including wire fraud, BEC, and cryptocurrency-related fraud.

Federal Trade Commission (FTC)
Website: https://reportfraud.ftc.gov
Report identity theft, impostor scams, and general fraud.

Cybersecurity and Infrastructure Security Agency (CISA)
Website: https://www.cisa.gov/report
Report cyber incidents affecting critical infrastructure and organizations.

U.S. Department of Justice’s Computer Crime and Intellectual Property Section (CCIPS)

Website: https://www.justice.gov/criminal/criminal-ccips

Guidance on reporting computer crimes, internet‑related offenses, cyber fraud, hacking, and intellectual property theft.

Investment & Cryptocurrency Fraud

U.S. Securities and Exchange Commission (SEC)
Website: https://www.sec.gov/tcr
Report cryptocurrency investment scams and securities fraud.

Commodity Futures Trading Commission (CFTC)
Website: https://www.cftc.gov/complaint
Report cryptocurrency and commodities-related fraud.

Chainabuse (Crypto Scam Reporting Platform)
Website: https://www.chainabuse.com
Report suspicious cryptocurrency wallet addresses.

*Additionally, report fraud directly to the cryptocurrency exchange used (e.g., Coinbase, Kraken, Binance) to request account review or potential fund freezing.

Banking & Financial Complaints

Financial Crimes Enforcement Network (FinCEN)
Website: https://www.fincen.gov/contact
Primarily for financial institutions reporting suspicious activity.

Federal Reserve System – Consumer Help
Website: https://www.federalreserveconsumerhelp.gov
File complaints involving banks supervised by the Federal Reserve.

Office of the Comptroller of the Currency (OCC)
Website: https://www.helpwithmybank.gov
File complaints involving national banks.

Mail-Related Fraud

Social Media & Online Platforms

Helpful Tips

Individuals and organizations should take proactive steps to protect their personal information, financial accounts, and digital devices. Adopting strong cybersecurity practices can greatly lower your chances of falling victim to cybercrime.

Recommended security measures include freezing and monitoring credit reports, using unique passwords for every account, storing passwords in reputable password managers, enabling multi-factor authentication (MFA) on all accounts, and utilizing authenticator applications instead of SMS-based verification whenever possible. Additional best practices include setting account and transaction alerts, locking unused credit and debit cards, keeping software and operating systems updated, and regularly backing up important data.

Users should also be mindful of their online footprint by reviewing privacy settings, limiting the public exposure of personal information, and considering open-source intelligence (OSINT) data removal services to reduce publicly available personal data. Remaining vigilant against suspicious emails, text messages, phone calls, and social media communications can help prevent many common cyber threats and scams before they occur.

Credit Freeze (Locking Credit)

Freezing your credit is one of the strongest steps you can take to prevent financial identity theft.

What Is a Credit Freeze?

A credit freeze (also called a security freeze) restricts access to your credit report. When your credit is frozen, most lenders cannot open new accounts in your name.

Free to place
Does NOT affect your credit score
Can be lifted at any time

When Should You Freeze Your Credit?

Your Social Security number has been exposed
You are a victim of identity theft
Your information was involved in a data breach
You notice fraudulent accounts or hard credit inquiries
You want proactive fraud protection

Where to Freeze Your Credit

You must contact all three major credit bureaus individually:

Equifax

Website: https://www.equifax.com/personal/credit-report-services/
Telephone: 1-800-685-1111

Experian

Website: https://www.experian.com/freeze/center.html
Telephone: 1-888-397-3742

TransUnion

Website: https://www.transunion.com/credit-freeze
Telephone: 1-888-909-8872

How a Credit Freeze Works

Blocks inquiries from prospective creditors (lenders) to the major credit bureaus (Equifax, Experian, and TransUnion) when they try to check your credit report for new credit applications. This prevents scammers (and yourself, until you lift it) from successfully opening new accounts in your name, such as credit cards, loans, or mortgages.
Does not affect existing accounts
Does not prevent credit monitoring
Does not stop pre-approved credit offers (opt out separately)

How Long Does It Take?

Online or phone requests are typically processed within minutes.

If you plan to apply for credit, you must temporarily lift (thaw) the freeze with the appropriate bureau(s).

How To Unfreeze (Thaw)

Log into your bureau account
Temporarily lift for a date range
Lift for a specific lender
Or remove permanently

What You’ll Need

Full legal name
Social Security number
Date of birth
Current and past addresses
Email and phone for verification

Keep confirmation emails and login details secure.

Additional Protective Steps

Monitor bank and credit card statements
Review your credit reports annually at:
AnnualCreditReport.com
Website: https://www.annualcreditreport.com

Enable multi-factor authentication on financial accounts

Important Reminder

A credit freeze protects against new account fraud, but it does not:

Prevent fraud on existing accounts
Stop tax refund fraud
Prevent employment or medical identity theft

For additional protection, consider placing a free fraud alert.

Remain vigilant and monitor accounts regularly.

Lock Unused Credit Cards & Set Transaction Alerts

Taking a few minutes to lock unused credit cards and enable transaction alerts can significantly reduce your risk of fraud and identity theft.

Lock Unused Credit Cards

Most major credit card issuers allow you to temporarily lock or freeze your card through their website or mobile app.

What Does Locking a Card Do?

Prevents new purchases and transactions
Stops unauthorized use if your card is lost or stolen
Can usually be turned on/off instantly
Does not cancel your account

Locking is ideal for:

Cards you rarely use
Lost or misplaced cards
Extra authorized user cards
Travel periods when you’re not using certain accounts

How to Lock Your Card

Log into your bank or credit card mobile app.
Locate “Card Management,” “Security,” or “Card Controls.”
Select “Lock Card” or “Freeze Card.”
Confirm the action.

You can unlock it anytime when you’re ready to use it.

Set Transaction Alerts

Transaction alerts notify you in real time when your card is used. The faster fraud is identified, the easier it is to resolve, therefore early detection is critical.

Types of Alerts to Enable

Every transaction (recommended)
Purchases over a set dollar amount
Online or international transactions
Card-not-present transactions
Declined transactions
Changes to contact information
Password or profile updates

Alerts can be delivered via:

Text message (SMS)
Email
Mobile app push notification

Why Alerts Matter

Detect unauthorized transactions immediately
Allow you to report fraud before additional charges occur
Provide documentation of suspicious activity
Help monitor authorized user spending

Even small test transactions ($1–$5) can signal fraud before larger charges occur.

Best Practices

Lock cards you do not use regularly.
Enable real-time alerts for all active cards.
Review statements monthly, even with alerts enabled.
Report suspicious charges immediately using the number on the back of your card.
Keep contact information updated to ensure you receive alerts.
Use a separate email account for financial accounts to reduce exposure.

If You Notice Fraud

Lock the card immediately.
Contact your card issuer using the number on the back of your card.
Dispute unauthorized transactions.
Request a replacement card.
Monitor other financial accounts for suspicious activity.

Stay Proactive

Card locks and alerts are free, easy to activate, and among the simplest ways to protect your financial accounts. Taking these preventive steps today can help prevent costly fraud tomorrow.

Monitor Your Credit – Benefits & Monitoring Through Banks

Monitoring your credit regularly is one of the simplest ways to protect your finances and spot suspicious activity before it becomes a bigger problem. Many banks now offer free credit monitoring for their customers.

What Is Credit Monitoring?

Credit monitoring is a service that tracks changes to your credit report and alerts you to unusual activity, such as:

New credit inquiries or accounts.
Changes in balances or limits.
Negative marks like collections or charge-offs.
Identity theft alerts.

These alerts allow you to respond quickly if someone attempts to open an account in your name or commit fraud.

Benefits of Credit Monitoring

Detects unauthorized accounts or transactions early.
Helps prevent identity theft before it escalates.
Provides alerts for suspicious activity.
Gives peace of mind with regular updates on your credit report.

Free Credit Monitoring Through Banks

Many banks and credit unions offer free credit monitoring to their customers. Features often include:

Monthly credit score updates.
Alerts for credit report changes.
Educational resources on credit and identity protection.

Tip: Log into your online banking portal or mobile app to see if credit monitoring is included. You may also be able to activate notifications directly from the app.

Additional Ways to Monitor Your Credit

AnnualCreditReport.com – Get a free credit report from each of the three major bureaus once per year.
Website: https://www.annualcreditreport.com

Credit card alerts – Many credit card apps allow you to set notifications for transactions and new accounts.

Best Practices

Check your credit at least once a month.
Set up alerts for any new accounts or inquiries.
Report suspicious activity immediately to your bank and credit bureau.
Combine credit monitoring with other tools, like card locks and fraud alerts.

Tip: Regular monitoring is proactive protection! The sooner you catch suspicious activity, the easier it is to resolve.

Use Authenticator Applications Instead of SMS

Adding multi-factor authentication (MFA) is one of the most effective ways to protect your accounts. While text message (SMS) codes are common, authenticator apps provide stronger protection against SIM-swapping, phishing, and interception attacks.

Common Authenticator Apps

• Google Authenticator – Simple, widely supported app that generates time-based security codes.
Website: https://support.google.com/accounts/answer/1066447

• Microsoft Authenticator – Supports push approvals, cloud backup, and passwordless sign-in.
Website: https://www.microsoft.com/security/mobile-authenticator-app

• Authy – Offers multi-device sync and encrypted backups.
Website: https://authy.com

Why Authenticator Apps Are Safer Than SMS

Codes are generated securely on your device
Not vulnerable to SIM-swap attacks
Work even without cellular service
Reduce risk of intercepted or redirected text messages

Best Practices

Enable multi-factor authentication (MFA) on all important accounts
Choose app-based authentication instead of SMS when available
Secure your phone with a strong passcode or biometric lock
Store backup recovery codes in a secure location (not in email)
Keep your authenticator app backed up (if supported)
Never share authentication codes with anyone

Tip: Authenticator apps provide stronger protection than SMS. A small change in how you receive codes can significantly reduce your risk of account takeover.

Turn On Multi-Factor Authentication (MFA) on All Accounts

*Especially Email and Financial Accounts

Multi-factor authentication (MFA) adds an extra layer of security beyond your password. Even if your password is stolen, MFA can help prevent unauthorized access to your accounts.

Email and financial accounts should always have MFA enabled because they are primary targets for fraud and identity theft. If an attacker gains access to your email, they can often reset passwords for other accounts.

Why This Is Critical

Email accounts are the “key” to resetting other account passwords
Financial accounts contain sensitive personal and payment information
MFA significantly reduces the risk of account takeover
Many breaches occur due to stolen or reused passwords

Where to Prioritize MFA

Email providers (Gmail, Outlook, Yahoo).
Online banking and investment accounts.
Payment services (PayPal, Venmo, Cash App).
Cloud storage accounts.
Social media accounts.

Best Practices

Enable MFA on every account that offers it.
Use an authenticator app instead of SMS when possible.
Use a unique, strong password for each account.
Store backup recovery codes securely.
Review account security settings annually.
Remove old or unused accounts.

Tip: Start with your email and financial accounts first. Securing these core accounts dramatically reduces your overall risk of identity theft and fraud.

Protect Your Phone (eSIM Protection & Account PIN)

Your mobile phone number is directly tied to your identity. Criminals often target mobile accounts to perform SIM-swap attacks, which can allow them to intercept verification codes, reset passwords, and access financial accounts. Adding protections at the carrier level helps prevent unauthorized changes to your number.

Why This Is Important

Your phone number is used for account recovery and authentication.
SIM-swap fraud can bypass SMS-based security.
Attackers may attempt to transfer your number to a new device.
Mobile accounts are often overlooked in security planning.

Key Protections to Enable

1. eSIM / SIM Transfer Protection

Many carriers allow you to block unauthorized SIM or eSIM transfers. This requires additional verification before your number can be moved to another device.

Contact your mobile provider and ask about:

SIM swap protection.
Number transfer lock.
Port-out protection.
eSIM transfer authorization requirements.

2. Account PIN or Passcode

Add a unique PIN to your mobile carrier account. This PIN is required before customer service can make changes.

Make sure your PIN:

Is not your birthday, the last 4 digits of your SSN, or those of a family member, as these are easily guessed.
Is different from your phone unlock code.
Is not reused from other accounts.

Best Practices

Set a carrier account PIN immediately.
Enable number transfer or port-out protection.
Use app-based authentication instead of SMS when possible.
Secure your phone with a strong passcode or biometric lock.
Monitor your phone for sudden loss of service (this can signal SIM fraud).
Contact your carrier immediately if your phone unexpectedly stops working.

Tip: If your phone suddenly shows “No Service” without explanation, contact your carrier right away. Acting quickly can stop a SIM-swap attack before major damage occurs.

DO NOT Reuse Passwords

Use A Password Vault with Unique, Complex Passwords

Reusing passwords is one of the most common and dangerous security mistakes. If just one website you use is breached, attackers will try that same password on your email, banking, and shopping accounts. This is known as credential stuffing, and it is highly effective against reused passwords.

Using a password manager (also called a password vault) allows you to create strong, unique passwords for every account without having to remember them all.

Why This Is Critical

One compromised password can unlock multiple accounts.
Data breaches happen regularly across all industries.
Automated attacks test stolen passwords across many sites.
Strong, unique passwords dramatically reduce risk.

Best Practices

Create a unique password for every account.
Use at least 12–16 characters (longer is better).
Include a mix of letters, numbers, and symbols.
Let your password manager generate passwords for you.
Protect your password vault with a strong master password.
Enable multi-factor authentication (MFA) on your vault.
Never store passwords in email, notes apps, or spreadsheets.

Tip: You only need to remember one strong master password. Your password manager securely handles the rest by making strong security both simple and practical.

Common Commercial Password Manager Solutions

• 1Password – Secure password vaults with strong encryption and seamless cross-device syncing.
Website: https://1password.com

• Bitwarden – Open-source password manager known for transparency, strong encryption, and affordability.
Website: https://bitwarden.com

• LastPass – Password manager with storage, autofill, and sharing features.
Website: https://www.lastpass.com

• Dashlane – Password manager with password health monitoring and dark web alert capabilities.
Website: https://www.dashlane.com

Free Password Managers for iOS / Android

Many modern smartphones include free, built-in password managers that are secure, easy to use, and already part of your OS. These tools generate strong passwords, store them safely, autofill logins in apps and browsers, and support passkeys in many cases. They're great starting options, especially if you stay mostly within one ecosystem.

For Android Users: Google Password Manager

Google's built-in tool is free and integrated into Android devices and the Chrome browser (accessible on any platform via passwords.google.com).

On Apple Devices (iPhone/iPad with iOS 18 or later, as of 2026): Password app

Apple provides a robust, free password manager directly in iOS (enhanced significantly in recent versions like iOS 18 and beyond, including a dedicated Passwords app powered by iCloud Keychain).

*Disclaimer: The products listed above are provided as examples of commonly available password management tools for informational purposes only. We do not endorse, recommend, or have any affiliation with any of the companies or products referenced. Individuals and organizations should independently evaluate solutions based on their own needs and security requirements.

OSINT Removal

Reduce Your Publicly Available Personal Information

OSINT (Open-Source Intelligence) refers to information about you that is publicly available online. This can include your home address, phone number, email, relatives, employment history, and more. Criminals use this information for phishing, identity theft, social engineering, and account recovery attacks.

Reducing your digital footprint makes you a much harder target.

What Information Is Commonly Exposed

Home address history
Phone numbers (current and past)
Email addresses
Date of birth
Names of relatives and associates
Property ownership records
Employment history
Social media details

Where Information Is Typically Found

Data broker websites (people-search sites)
Public records databases
Social media profiles
Marketing data aggregators
Breach databases
Court and property record sites

Steps to Remove Your Information

1. Search Yourself

Search for your full name, phone number, and address in major search engines. Document sites that list your information.

2. Submit Opt-Out Requests

Most data broker sites provide an opt-out or privacy request form. Follow the removal process on each site individually.

3. Remove Unnecessary Public Details

Set social media accounts to private.
Remove your phone number and address from public profiles.
Delete unused accounts.
Ask websites to remove outdated or sensitive content.

4. Consider Professional Removal Services

If you prefer not to manage removals yourself, privacy services can submit recurring opt-out requests on your behalf.

Examples include:

DeleteMe: Subscription service that removes personal data from data brokers and provides ongoing privacy reports.
OneRep: Automated platform that scans and removes personal information from hundreds of people-search and data broker sites.

*Disclaimer: The services listed above are examples of commonly available privacy and data removal tools and are provided for informational purposes only. We do not endorse or recommend any of the companies referenced. Users should independently evaluate services based on their individual privacy and security needs.

Best Practices

Review your digital footprint every 6–12 months
Set calendar reminders to re-check data broker sites
Use a dedicated email address for opt-out requests
Avoid posting your full birth date or home address publicly
Remove personal details from WHOIS records (if you own domains)
Be cautious when filling out online forms or surveys

Tip: The less information available about you online, the harder it is for criminals to impersonate you, reset your accounts, or craft convincing phishing attacks. Regular digital cleanup is proactive protection.