Finding a phishing site targeting your customers is unsettling, and the instinct to act fast is the right one — here's how to move fast effectively.
Document everything first, before the site potentially disappears or changes: the URL, screenshots of the page, and the date and time you found it. This documentation matters both for your own records and for any report you file.
Checking where the site is hosted and who the domain registrar is helps you route your report to the right place. Most hosting providers and registrars have dedicated abuse-reporting contacts, though finding the right one can take some digging.
Providers often require specific documentation and a track record of legitimate abuse reports before they'll act quickly on any given complaint. A single report from an unfamiliar sender can sit in a queue for days, competing with a high volume of other reports the provider receives daily.
That gap between reporting and actual takedown is exactly the space a dedicated brand protection service is built to close — through established relationships and a proven reporting track record that gets reports prioritized rather than queued.
If there's active risk to customers, a warning is warranted — but be thoughtful about how you communicate it. Describing the threat without directly linking to the phishing site avoids inadvertently driving more traffic to it or giving attackers useful feedback about what's been detected.
With established provider relationships and a track record of high-fidelity abuse reporting, takedowns can happen within hours rather than days — a meaningful difference from what a first-time, unfamiliar report typically achieves.
Both are worth contacting, since either one can act to disable the site. In practice, hosting providers often respond faster since they have more direct technical control over the content itself.
This is common, and it's exactly why ongoing monitoring matters more than a single reactive takedown — new domains can be caught and reported as they appear, rather than waiting for the next customer complaint.