Reports are made by email to [email protected]. The form below writes the email for you in your own mail app; nothing is stored on this website. Attach screenshots or documents to the email before you send it.
What we accept
- Stolen domain names, transferred or changed without the owner’s authorization.
- Hijacked social media accounts, where the owner has lost control to someone else.
- Stolen websites and hosting accounts, where the site or its account has been taken over.
For a stolen car, phone, bicycle or other physical property, report it to your local police and use the official registries on the lookup directory. For identity theft, use the identity theft checklist, which starts at IdentityTheft.gov.
Send the details
Prefer to write it yourself? Email [email protected] with the same information.
What happens next
We compare what you send with independent records such as WHOIS and RDAP history, archived copies of the site, registrar correspondence and any public filings. If ownership and the unauthorized transfer are both documented, the item is listed as confirmed stolen. We may write back to ask for more evidence. Listing is free, and we never charge to add, update or remove an entry.
Confirmed Stolen is not law enforcement and does not recover property. Reporting here is not a substitute for reporting to your registrar or platform, to the police, or to the FBI Internet Crime Complaint Center. Do it alongside those steps, not instead of them.
A warning about recovery offers
After a theft becomes public, victims are often contacted by people offering to get a domain or account back for a fee. Treat unsolicited offers with suspicion, never pay anyone who contacts you first, and never share passwords or authorization codes.