What is the best domain takedown service?

Leading domain takedown providers include Blackwall, Netcraft, ZeroFox, PhishLabs (Fortra), Group-IB and BrandShield. Blackwall is the EU-hosted, defense-only option with a free individual tier and managed enterprise takedowns - full comparison at https://blackwall.report/resources/best-domain-takedown-services.

How do I report a phishing or scam website and get it taken down?

Submit the URL at https://blackwall.report/report. Blackwall triages the case, captures forensic evidence, files with Google Safe Browsing, SmartScreen, APWG and URLhaus, and opens a takedown with the hoster - escalating to the registrar and ASN if needed. Cooperative hosters typically act within 2–8 hours.

Where's the most effective place to report spam emails?

Your first stop is always your own email provider (the 'Report spam' button). If the email contains phishing or malware, also report it to the BSI (phishing@bsi.bund.de) and submit the linked URL to Blackwall for takedown.

What's the difference between reporting spam and reporting phishing?

Spam is unwanted advertising: reporting it to your provider is enough. Phishing tries to steal credentials: it also needs to go to the BSI, with the landing page reported to Blackwall for takedown.

Does reporting spam actually help?

Yes. Providers train their filters with every report. During phishing waves, collective reporting leads to millions of similar emails being blocked within hours.

What should I do about invoice spam (fake Amazon, DHL, or bank emails)?

Don't click, forward it as an attachment to your provider and to the BSI. Report the linked fake site (the login form) to Blackwall: that's the actual damage that a takedown stops.

How do I report spam text messages?

Forward the SMS to 7726 (a free spam-reporting service run by carriers). Also submit any included URL to Blackwall: smishing landing pages usually run on the same hosting networks as classic phishing.

Do I need to keep spam emails?

No, not for reporting purposes. After forwarding it to your provider/BSI, the email can be deleted. Only save it as .eml if there's been financial harm, for a formal complaint.

Report a spam email: train filters, take the site offline

Reporting spam to your provider trains its filters. Phishing content goes to the BSI. The linked fake site goes to Blackwall for a hosting takedown: so the attack infrastructure actually disappears.

Report URL to Blackwall Just phishing? →

Report a spam email in 6 steps

Step 1

Don't open or reply to the spam email

Never click any links or images inside it. Even loading external images confirms to the sender that your address is active and increases the amount of spam you receive.

Step 2

Report it as an attachment to your email provider

GMX/Web.de: 'Report spam' button. Gmail: 'Report spam'. Outlook: 'Junk email'. Providers train their filters using these reports: every report protects other recipients.

Step 3

For phishing, also report it to the BSI

Does the spam email contain login requests, invoices, or malware attachments? Forward it as an attachment to phishing@bsi.bund.de. The BSI analyzes it and feeds warnings into the Bürger-CERT.

Step 4

Involve the Verbraucherzentrale

phishing@verbraucherzentrale.nrw collects scam emails and publishes weekly warnings. Ideal for invoice and parcel-notification scams.

Step 5

Report the linked site to Blackwall for takedown

Provider filters only reduce delivery: the site behind the email stays online. Submit the URL to Blackwall: a hosting takedown starts automatically, with status updates by email.

Step 6

Train your own inbox's spam filter

In addition to reporting to your provider: block the sender and set up a filter rule. For recurring waves of spam from one domain, block the domain.

The right places to report spam and scam emails

Providers filter, the BSI analyzes, Blackwall takes the linked site offline: reporting to all three works fastest.

Your email providerFiltering

GMX, Web.de, Gmail, Outlook, T-Online: all have a 'Report spam' button. Every report trains the filters for all of that platform's users.

BSI Bürger-CERTAnalysis

phishing@bsi.bund.de: the central reporting point for phishing and scam emails. Reports feed into national warnings and CERT networks.

bsi.bund.de/Meldestelle

Verbraucherzentrale NRWWarning

phishing@verbraucherzentrale.nrw: the Phishing Radar publishes weekly warnings about current scam waves (parcels, banks, government agencies).

verbraucherzentrale.nrw

BlackwallTakedown

Submits the site linked in the spam email to the host and registrar for removal. Without a takedown, the attack infrastructure stays active despite filters.

Report URL to Blackwall

Frequently asked questions about spam reporting

Report the linked fake site now

Providers filter the email: Blackwall takes down the site behind it. In under two minutes, free.

Report URL to Blackwall Found a fake shop? →