Key takeaways
reportphishing@apwg.org is a real, trusted address run by the Anti-Phishing Working Group, not a scam.
Its purpose is one-way: you forward phishing emails to it. It will not ask you for information, passwords, or money.
Forwarding a phishing email to it is safe. You are sending a copy, not clicking anything.
Never reply to, or enter credentials for, a message that only claims to come from this address. Any "from" address can be spoofed.
Many companies also have their own report addresses, for example reportphishing@robinhood.com for Robinhood impersonation.
Yes, reportphishing@apwg.org is legitimate. It is the official email address of the Anti-Phishing Working Group (APWG), an established international anti-phishing organization. You forward suspected phishing emails to it so APWG can track and help shut down scam campaigns. It is safe to send phishing emails to this address, and it is recommended by consumer-protection authorities.
If you landed here because you were told to forward a scam email there, or because you got a message that seemed to come from that address, the section below clears up both cases.
What is the Anti-Phishing Working Group?
The APWG is an international coalition, founded in 2003, of banks, tech companies, security firms, and law enforcement that work together to fight phishing and online fraud. When you forward a phishing email to reportphishing@apwg.org, you are feeding real-world scam data into a system that helps researchers spot campaigns, warn others, and get malicious sites taken down.
It is a genuine, well-known reporting channel. The New York State Attorney General, among other authorities, points people to this exact address for reporting phishing.
How to report a phishing email to APWG
If you receive a suspicious email, forward the whole message to reportphishing@apwg.org. Forwarding it (rather than copying and pasting the text) preserves the technical details that make the report useful. You will not usually get a personal reply, and that is normal, the value is in the data.
A few practical notes:
Forward, do not click. Send the email on without clicking any links or opening attachments inside it.
You can also report to the FTC at reportfraud.ftc.gov and, in your email app, mark the message as phishing or spam.
If the email impersonates a specific company, report it to that company too. For example, Robinhood asks customers to forward impersonation emails to reportphishing@robinhood.com.
The one thing to watch out for
Here is the important nuance. reportphishing@apwg.org is a destination you send to, not a sender you should trust. Because any email "from" address can be faked, a message that appears to come from reportphishing@apwg.org is not automatically real. APWG will not email you asking for your password, a payment, or personal details.
So the rule is simple: forwarding phishing to that address is safe, but never reply to, log in from, or act on an unexpected message that merely claims to be from it. Treat the address as a mailbox you drop reports into, not a contact that reaches out to you.
About Haven
Haven is a browser extension that helps you make safer trust decisions online, before a scam can cost you anything. It works at the moment you are about to click a link or enter your password, flagging fake and impersonated login pages, suspicious links, and lookalike sites. Rather than only checking a page against a list of known-bad sites, Haven analyzes the actual page in front of you, so it can catch brand-new and convincing fakes that other tools miss. If you are ever unsure about a link, you can also paste it into Haven's free link checker before you click.
Haven is free for individual use. For teams, Haven for Business extends this browser-level protection across every employee, and Haven for MSP lets managed service providers deliver it across their clients. Haven is operated by MirrorTab, Inc.
FAQs
Is reportphishing@apwg.org legit?
Yes. reportphishing@apwg.org is the official reporting address of the Anti-Phishing Working Group, a recognized international anti-phishing organization. It is a legitimate place to forward phishing emails, and it is recommended by consumer-protection authorities. It is used only to receive reports, so it will never ask you for passwords, money, or personal information.
What is reportphishing@apwg.org used for?
It is used to collect copies of phishing emails so the Anti-Phishing Working Group can track scam campaigns, warn others, and help get malicious websites taken down. You forward suspicious emails to it. The reporting is one-way, so you usually will not receive a personal reply.
Is it safe to forward a phishing email to reportphishing@apwg.org?
Yes. Forwarding a phishing email means sending a copy of it, which does not put you at risk as long as you do not click links or open attachments inside it first. It is one of the recommended ways to report phishing.
I got an email from reportphishing@apwg.org. Is it real?
Be cautious. Any "from" address can be spoofed, and APWG uses the address only to receive reports, not to contact people. If a message claiming to come from reportphishing@apwg.org asks you to reply, log in, or share information, treat it as suspicious and do not act on it.
What is reportphishing@robinhood.com?
It is Robinhood's own address for reporting emails that impersonate Robinhood. Many companies maintain a similar phishing-report address. If an email impersonates a specific brand, reporting it to that brand as well as to APWG helps them respond faster.
Is Haven free?
Yes. Haven is free for individual use. Haven is operated by MirrorTab, Inc.
