How FightScammers works
Four steps, all lawful, all pointed at the three arteries of a scam operation: victim acquisition, conversion time, and payment collection.
1 · Forward the scam
Paste the full raw email — headers included — into Intake. Headers reveal the true sending server even when the name is spoofed.
2 · We extract the skeleton
Phishing URLs, sender domains, originating IPs, reply-to addresses, phone numbers, and crypto wallets — deduplicated and stored as structured evidence per case.
3 · We draft, you fire
One-click evidence packets: abuse-desk emails (abuse@gmail.com, abuse@outlook.com and equivalents), registrar takedown letters citing the ICANN RAA, Safe Browsing / URLhaus / PhishTank / Chainabuse submissions, and FTC-equivalent filings in 20+ countries.
4 · Infrastructure dies
Every phishing kit takes 4–20 hours to rebuild. Kill enough domains fast enough and you are personally burning their build cycles around the clock.
Also inside
Canary traps
Seed decoy emails, credentials, documents and tracking URLs. When one surfaces in the wild you know exactly which channel leaked — clean chain of custody.
Bait assistant (inbound only)
Decoy personas the scammer contacts first. AI drafts slow, believable replies; you press send. Their scarcest resource — time — burns while real victims stay safe.
Period reports
Daily to annual: what we did for you — indicators extracted, reports sent, submissions filed, canary hits. For yourself, your family, or law enforcement.
The legal spine
We only touch data they sent you, infrastructure you own, or public reporting channels. No hacking, no traffic floods, no doxxing. See Ethics & policy and Legal center.