Report incident

Incident Report Intake

Use this page to submit suspicious campaigns, fake login portals, malicious senders or emerging scam patterns that should enter editorial review.

The incident intake form helps HackWatch collect early reader signals so new phishing and fraud clusters can be reviewed faster and escalated into coverage.

Report suspicious campaigns, fake portals or compromised account patterns so the editorial workflow can spot emerging scam clusters faster.

How this tool helps

Why incident intake matters

Reader reports often surface campaigns before they reach mainstream coverage. A structured intake workflow gives the editorial pipeline early evidence and better clustering data.

What to include

The strongest reports include the sender, suspicious URL, affected brand, message text, screenshots, timing details and what the user noticed first.

Brand or provider being impersonated
Suspicious value such as sender, link or message body
Short narrative of what happened and when

Frequently asked questions

Can users submit partial information?

Yes. Even partial signals like a sender address, URL or brand pattern can help connect separate reports into one incident cluster.

Does submitting a report contact the impersonated brand automatically?

No. The form supports editorial and investigative triage. Users should still contact their bank, provider or employer directly if an active compromise is involved.

Related workflows

Scam checker

Scam Checker for Suspicious Messages

Check suspicious SMS, fake delivery updates, payment prompts and urgent verification messages to spot scam pressure before you click, pay or reply.

Open tool page

Email review

Email Reputation and Sender Review

Review suspicious senders, domain clues and phishing language to triage risky email campaigns before anyone opens links, attachments or login pages.

Open tool page

Email header analyzer

Email Header Analyzer for SPF, DKIM, DMARC and Reply-To Mismatch

Analyze suspicious email headers for SPF, DKIM, DMARC, Reply-To mismatch, Return-Path mismatch and relay-chain clues before trusting a message.

Open tool page

Email posture

Email Security Posture Checker (SPF, DKIM, DMARC, MX)

Check SPF, DKIM, DMARC and MX records to find email spoofing gaps, strengthen domain trust and improve business email security posture.

Open tool page

URL checker

Free Phishing Link Checker and Domain Intelligence Report

Check suspicious links before you click with hostname, redirects, DNS, TLS, ASN, hosting provider and phishing-pattern analysis in one report.

Open tool page

Brand impersonation

Brand Impersonation Checker for Lookalike Domains and Fake Support Pages

Check suspicious domains, senders and fake support portals for brand impersonation, lookalike patterns, punycode, typosquatting and recent-registration risk.

Open tool page

Recovery center

Phishing Recovery Center and Account Takeover Guides

Follow step-by-step recovery after phishing, hacked accounts, breach exposure, identity theft and scam incidents across Google, Microsoft, Meta and banking scenarios.

Open tool page

Breach checker

Breach Exposure Checker for Email and Password Reuse Risk

Check whether exposed email or reused passwords create real breach risk, then follow a practical 24-hour containment plan and next-step checklist.

Open tool page

Identity theft planner

Identity Theft Recovery Planner

Build a step-by-step identity theft response plan after exposed personal data, fraudulent accounts, mailbox compromise, SIM swap or document leaks.

Open tool page

Crypto scam checker

Crypto Scam Checker for Fake Investments and Recovery Fraud

Check suspicious crypto projects, fake exchange messages, guaranteed-return claims and recovery-fee demands before sending funds or identity documents.

Open tool page

Ransomware triage

Ransomware Triage and Decryptor Finder

Triage encrypted-file incidents with isolation steps, ransom-note analysis, extension review, backup checks and decryptor guidance before recovery decisions.

Open tool page