Where to report a scam text

Purpose

Where to report a scam text message in your country, a report text you can copy, and how to warn other people about the number in NoCall.

Requirements

Anyone can read these guides, no account needed. Some tools require Pro, as indicated in each guide.

The reporting channel we have verified for your country, a text you can copy into your report and how to warn other people about the number.

How to use it

1. 1

   The reporting channel we have verified for your country, a text you can copy into your report and how to warn other people about the number.

2. 2

   If you lost money or gave card or bank details, call your bank right away and report it to the police.

3. 3

   If you entered passwords, change them and turn on two-step verification.

4. 4

   Tell your mobile operator about the message and the number it came from.

5. 5

   Report the number in NoCall so that other people are warned.

6. 6

   Keep a screenshot of the message, then delete it.

Synthetic example

https://delivery.example/notice

Interpret the result

A verified channel for each country where NoCall has checked one; general advice everywhere else. We only name a channel, a phone number or a website after verifying it.

Limitations

The report text is built in your browser: nothing you type is sent or saved.

Troubleshooting

We haven’t verified an official channel for reporting phone scams in your country, so we don’t name one. The steps below apply anywhere.

Use with the API

Steps to report a scam SMS, with the report fields tidied for copying. With country, channel is that country's verified reporting body; without country, or when there is no verified body, channel is null.

Send the JSON body to the tool's own route, or to POST /v2/tools with the tool field added. Both routes return the same result.

POST https://api.nocall.io/v2/sms-report
POST https://api.nocall.io/v2/tools  {"tool":"sms-report","sender":"Correos","tapped":false,"gaveData":false,"country":"ES"}

REQUEST_ID="$(uuidgen)" && [ -n "$REQUEST_ID" ] &&
curl --request POST 'https://api.nocall.io/v2/sms-report' \
  --header "Authorization: Bearer $NOCALL_API_KEY" \
  --header 'Content-Type: application/json' \
  --header "Idempotency-Key: $REQUEST_ID" \
  --data '{"sender":"Correos","tapped":false,"gaveData":false,"country":"ES"}'

import json
import os
import urllib.request
import uuid

api_key = os.environ.get('NOCALL_API_KEY')
if not api_key:
    raise SystemExit('Set NOCALL_API_KEY')

request = urllib.request.Request(
    'https://api.nocall.io/v2/sms-report',
    method='POST',
    data=json.dumps({'sender': 'Correos', 'tapped': False, 'gaveData': False, 'country': 'ES'}).encode(),
    headers={
        'Authorization': 'Bearer ' + api_key,
        'Content-Type': 'application/json',
        'Idempotency-Key': str(uuid.uuid4()),
    },
)
with urllib.request.urlopen(request, timeout=30) as response:
    result = json.load(response)
print(result['data']['result'], result['meta']['unitsCharged'])

import { randomUUID } from 'node:crypto';

const requestId = randomUUID();
const apiKey = process.env.NOCALL_API_KEY;
if (!apiKey) throw new Error('Set NOCALL_API_KEY');

const response = await fetch('https://api.nocall.io/v2/sms-report', {
  method: 'POST',
  headers: {
    Authorization: 'Bearer ' + apiKey,
    'Content-Type': 'application/json',
    'Idempotency-Key': requestId,
  },
  body: JSON.stringify({ sender: 'Correos', tapped: false, gaveData: false, country: 'ES' }),
});
const result = await response.json();
if (!response.ok) throw new Error(result.error?.code ?? 'request_failed');
console.log(result.data.result, result.meta.unitsCharged);

{
  "data": {
    "tool": "sms-report",
    "result": {
      "channel": {
        "name": "INCIBE",
        "fullName": "Instituto Nacional de Ciberseguridad de España",
        "url": "https://www.incibe.es/linea-de-ayuda-en-ciberseguridad",
        "phone": "017"
      },
      "verified": true,
      "stepCodes": [
        "contact_bank",
        "change_passwords",
        "tell_operator",
        "report_number",
        "keep_screenshot"
      ],
      "reportFields": {
        "sender": "Correos",
        "received": null,
        "link": null,
        "tapped": false,
        "gaveData": false
      }
    }
  },
  "meta": {
    "requestId": "req_example",
    "unitsCharged": 1,
    "usage": {
      "periodStart": "2026-10-01",
      "unitLimit": 20,
      "unitsUsed": 3,
      "unitsRemaining": 17
    }
  }
}

• API reference ↗

Frequently asked questions

Related guides

• Check if a text message is a scam
• Check a link