Community Reports

Automated scanning catches a lot. It misses the human stuff: what the scammer said, what wallet they asked you to fund, the screenshot of the broken withdrawal flow.

Community reports fill that gap. The reports hub is a public feed of first-hand experiences, each tied to a domain or wallet, with the victim's account in their own words.

What a report contains

Each entry has four parts:

• Source: the domain, exchange, or wallet address that was used
• Experience: what happened (almost scammed, lost money, research, other)
• Story: the reporter's own description of how the scam unfolded
• Evidence: optional screenshots, transaction IDs, additional contact points

Reports are signed in to submit, but reporters can appear anonymously to the public. Privacy is the default.

How to submit a report

1. Go to Submit a report. Sign in if you haven't yet.
2. Source: paste the domain or wallet address. If it's a domain we've already scanned, you'll see a match preview.
3. Scam details: pick the experience that fits and tell the story. Concrete details ("they asked me to install AnyDesk", "withdrawal blocked after $5k deposit") help others more than vague warnings.
4. Evidence: add screenshots and extra IOCs if you have them.
5. Review & submit: confirm visibility, submit. You can edit later.

Why reports matter

A single report is a data point. A cluster of reports against domains that also share infrastructure or identity signals is evidence, and it feeds into the graph the same way regulator warnings do.

Practical effects of a confirmed report:

• The reported domain's scan page gets the report attached to its forensics tab
• The reported wallet address becomes an indicator visible to anyone who scans a domain that touches it
• The story is searchable across the reports hub, grouped by chain and experience type

What gets published

Stories pass a light editorial check before going live:

• Profanity and personal attacks are removed
• Personally identifying information about third parties is redacted
• Stories under 20 characters are not surfaced

We don't fact-check claims. Every report is one person's experience, not a verdict. Read multiple reports against a domain to triangulate.

What it does not do

• No legal proceedings. This is not a complaint to a regulator. If you've lost money, file a report with your local financial authority first. The warnings hub lists the major ones.
• No automatic takedown. We don't have host-level authority over any reported domain.
• No personal data exposure. Reporters control whether their name is visible. The scammers' published identifiers (wallets, emails, phones) are surfaced. That is the entire point.

Related

• Browse the reports hub to see what people are flagging right now
• Look up regulator warnings on the same domain
• Run a full scan before or after submitting a report to see what the automated checks add to your story