Phishing site takedown
Phishing sites using your name, taken offline.
OpenBait is a takedown service for phishing sites that pose as a business to take passwords or card numbers. We report each one with evidence to the companies that can take it offline and follow it until it stops loading. No documents needed.
- $299/mo
- Pro: up to 3 takedowns a month
- No documents
- Needed for a site that steals passwords or card numbers
- Every hour
- Reported sites checked until they go offline
Phishing sites we take down
Fake login pages
Copies of your sign-in page built to collect usernames and passwords.
Fake checkout pages
Pages that look like your checkout and pass your customers' card numbers to someone else.
Full copies of your site
A site that looks like yours on the surface and only shows what it is when someone tries to pay or sign in.
Pages behind scam messages
A page that fake texts or emails lead to, built to take passwords or card numbers in your name. We take down the page, not the messages.
How a phishing takedown works
Send the link
Paste the link to the site, or let our daily scans find it.
You confirm it's fake
This is the one decision you make. The companies that can take it offline hear nothing from us before you confirm.
We report it and stay on it
We report it with evidence and stay on it until it's down. Every report we send is recorded on your case page.
We confirm it's down
We check every hour, and from other locations before we count it as down. Then we keep watching for it to come back.
Phishing takedown FAQ
Do I need a registered trademark?
No. A site that takes card numbers or passwords is fraud, and it can be taken down without one.
How long does it take?
It depends on the companies involved, so we don't promise a date. We check the site every hour, and when it goes offline we email you and record the time on your case page.
Can you guarantee the site will be taken down?
No one can promise that, because the companies that can take a site offline make the final call. On a monthly plan, if none of the sites we took on has gone offline, been suspended, received a browser warning or had its pages removed from Google's search results within 30 days of our first report, we refund your first payment. It applies once and must be requested within 30 days.
What if the site hides from checks?
Some fakes play dead only for automated checks, so before we count a site as taken down, we also check it from other locations.
What if it moves to a new domain?
A site on a new domain counts as a new takedown. If it comes back on the same domain, we report it again at no extra charge once you confirm.
What does the free plan do?
Once you confirm a fake that's still online, we get browsers to warn its visitors, for up to 3 confirmed sites a month. The site itself stays up. To take it offline, add a takedown for $199 or use a monthly plan.
Found a phishing site using your name?
Paste the link. A copy often answers "Not confirmed", and that's expected: choose Sign up and get it taken down. Signing up is free, you confirm the site copies yours, pick a plan or a single takedown, and we take it from there.