Where to report a computer crime depends on what happened and who was targeted

Computer crimes range from stolen passwords and identity theft to ransomware attacks on a business. The agency that takes your report depends on the type of crime, whether you are an individual or a business, and whether the crime crossed state or national borders. Start by reporting to your local police department if the crime is straightforward — a hacked email account, fraudulent charges on your credit card, or malware on your personal computer. If the crime involved the internet, crossed state lines, or targeted a business, the Federal Bureau of Investigation (FBI) has a dedicated Internet Crime Complaint Center (IC3) that accepts reports online.

The FBI's IC3 is the fastest route for most internet-based crimes because it centralizes reports and shares data with law enforcement agencies across the country. You do not need to go to an FBI office in person. You report through the IC3 website at ic3.gov, which accepts complaints about phishing, ransomware, business email compromise, identity theft, and dozens of other crimes committed over the internet.

Key Takeaways

  • Report crimes to your local police department first if you want a police report number for insurance or credit monitoring purposes.
  • The FBI's Internet Crime Complaint Center (IC3) at ic3.gov handles crimes that cross state lines or involve the internet, and you can report online without visiting an office.
  • If you are a business targeted by ransomware or a data breach, also contact the Cybersecurity and Infrastructure Security Agency (CISA) at central.cisa.dhs.gov.
  • Preserve evidence before you report: take screenshots of messages, note the date and time of the crime, and do not delete emails or files related to the incident.
  • Report identity theft to the Federal Trade Commission (FTC) at identitytheft.gov, which creates a recovery plan and alerts credit bureaus on your behalf.

Report to local police if you need a police report number

Your local police department will take a report for any computer crime, even if they do not investigate it themselves. You need a police report number if you plan to file an insurance claim, dispute fraudulent charges with your bank, or place a fraud alert with the credit bureaus. Call the non-emergency line and ask to file a report for a computer crime or cybercrime. Some departments allow you to file online through their website; others require you to visit in person or call.

When you call or visit, have the following information ready: the date the crime occurred, a description of what happened, any usernames or email addresses involved, the names of any websites or services affected, and the amount of money lost if applicable. If someone stole your identity or opened accounts in your name, also provide your Social Security number and date of birth so the officer can document what was fraudulently created.

The police report itself may not lead to an investigation — local departments often lack the technical informed to pursue cybercrime — but the report number is a document you can use with your bank, credit card company, and credit bureaus to dispute charges and freeze your accounts.

Use the FBI's Internet Crime Complaint Center for crimes that cross state lines

The FBI's IC3 (ic3.gov) is designed for crimes committed over the internet or those that involve multiple states. You can report ransomware attacks, phishing scams, business email compromise, cryptocurrency fraud, and online romance scams. The IC3 does not investigate every report, but it aggregates data from thousands of complaints and shares patterns with law enforcement agencies and the private sector.

To file a report on ic3.gov, you will need to create an account and provide details about the crime: what happened, when it happened, how much money was involved, and what contact information or websites were used. You can upload screenshots, emails, or other evidence. The IC3 will assign your report a complaint number and may contact you if an agency decides to investigate.

The IC3 report is separate from a local police report. Filing with the IC3 does not create a police report number, so if you need one for insurance or credit disputes, you still need to contact your local police department. However, the IC3 report is useful for documenting the crime at the federal level and may help law enforcement identify patterns across multiple victims.

Report identity theft to the Federal Trade Commission

If someone stole your personal information and opened accounts, made purchases, or filed taxes in your name, report the identity theft to the Federal Trade Commission (FTC) at identitytheft.gov. The FTC does not investigate individual cases, but it creates a recovery plan specific to your situation and alerts the three major credit bureaus (Equifax, Experian, and TransUnion) that you are a victim of identity theft.

When you report on identitytheft.gov, you will answer questions about what information was stolen, what accounts were opened, and what steps you have already taken. The FTC will generate a recovery plan that lists the specific actions you should take — such as placing a fraud alert, freezing your credit, or disputing fraudulent accounts. The plan also includes a sample letter you can send to creditors and credit bureaus.

After you report to the FTC, you can place a free fraud alert on your credit file by contacting one of the three credit bureaus. The alert tells lenders to verify your identity before opening new accounts in your name. You can also place a credit freeze, which prevents anyone from opening accounts without your permission.

Report ransomware and data breaches to CISA if you are a business

If your business was hit by ransomware or suffered a data breach, report it to the Cybersecurity and Infrastructure Security Agency (CISA) at central.cisa.dhs.gov. CISA is a federal agency that helps organizations respond to cyberattacks and shares threat information across the government and private sector. You can also report to the FBI's IC3, but CISA is specifically designed to help businesses understand what happened and how to prevent it in the future.

When you report to CISA, provide details about the attack: when it started, what systems were affected, whether data was stolen, and whether you received a ransom demand. CISA will not investigate on your behalf, but it will provide guidance on containment and recovery and may share information about the attackers with other agencies and businesses.

You should also report ransomware to the FBI's IC3 and to your local police department. If customer data was stolen, you may be required by state law to notify affected customers and the state attorney general's office. Check your state's data breach notification law to understand your obligations.

Preserve evidence before you report

Before you contact law enforcement, take steps to preserve evidence of the crime. Take screenshots of phishing emails, threatening messages, fraudulent accounts, or any other evidence. Note the date and time of the crime and the exact URL or email address used. Do not delete the original emails or files — save them in a folder on your computer or in cloud storage.

If your computer was infected with malware, do not attempt to remove it yourself unless you are confident you can do so without destroying evidence. If you take your computer to a repair shop, tell the technician that it is part of a crime investigation and ask them to preserve the malware and any logs. If you hire a cybersecurity firm to investigate, ask them to document their findings in a report you can share with law enforcement.

For financial crimes, gather bank statements, credit card statements, and any correspondence with the company where the fraud occurred. For identity theft, collect documents showing accounts opened in your name, such as credit reports, loan applications, or bills sent to addresses you do not recognize.

What happens after you report

After you file a report with local police, the FBI, or CISA, you may not hear back when ready. Local police departments prioritize cases based on the amount of money involved and the likelihood of solving the crime. The FBI's IC3 receives thousands of complaints each month and investigates only a small percentage. CISA responds to reports from businesses but does not investigate individual cases.

If law enforcement decides to investigate, an agent will contact you and may ask for additional information or evidence. If they do not investigate, you can still use the report number or complaint number to dispute fraudulent charges with your bank or credit card company, place a fraud alert, or file an insurance claim.

In the meantime, take steps to find your accounts: change passwords on all important accounts, enable two-factor authentication, monitor your credit reports for unauthorized activity, and consider placing a credit freeze if you are a victim of identity theft.

Frequently Asked Questions

Do I have to report a computer crime to the police?

You are not required to report, but a police report number is useful if you want to dispute fraudulent charges, file an insurance claim, or place a fraud alert with credit bureaus. If you do not need a report number, you can report directly to the FBI's IC3 or the FTC without contacting local police.

Will the FBI investigate my case?

The FBI receives thousands of complaints through the IC3 each month and investigates only cases involving significant losses, organized crime, or threats to national security. Most individual cases are not investigated, but your report is still valuable because it helps law enforcement identify patterns and trends in cybercrime.

What if the crime happened in another country?

Report to the FBI's IC3 anyway. If the crime originated outside the United States but targeted you or your business, the IC3 will document it and may share the information with international law enforcement partners. You can also report to your country's equivalent agency — for example, the Canadian Anti-Fraud Centre or the UK's National Fraud Intelligence Bureau.

How long does it take to get a police report number?

If you report in person or by phone, you may receive a report number the same day. If you report online through your police department's website, it may take a few days to a week. Ask the officer or dispatcher for the report number before you hang up or leave.

Can I report anonymously?

You can report to the FBI's IC3 and the FTC without providing your name, but you will not receive a report number you can use for disputes or insurance claims. If you need a report number, you must provide your identity to local police.