Report Abuse

Anyone who suspects someone is misusing IPRoyal’s proxy network can file an abuse report, with or without an account. Our team will evaluate all reports and take appropriate action when misuse is confirmed

Report Abuse

What to Report

Not sure if it counts? Report it anyway, and our team will review it

  • Attacks on Websites

    DDoS attacks, flooding, and other traffic that overloads or damages a service

  • Unauthorized Access

    Brute-force logins, credential stuffing, account takeovers, and similar break-ins

  • Fraud and Phishing

    Scams, payment fraud, credential harvesting, and impersonating people or brands

  • Spam and Malware

    Unsolicited messages, malware, and code that secretly collects data from devices

  • Fake Engagement

    Click fraud, fake accounts, reviews, votes, and inflated follower counts

  • Inciting Violence

    Provoking, calling for, or promoting criminal behavior or otherwise contributing to such activities

  • Privacy Violations

    Collecting personal data without a legal basis or tracking people who can be identified

  • Unauthorized Scraping

    Scraping content behind logins, paywalls, or DRM without authorization, bypassing access controls, or scraping against the law or site terms

What to Include

Precision lets us match your report to activity on our network more quickly. Include these metrics:

  • IP addresses: exactly as they appear in your logs
  • Time: date, time, and time zone (a few-minute window is fine)
  • Target: the affected domain, URL, or endpoint
  • Evidence: log excerpts, request headers, or screenshots
  • No IP? Send the domain, the time window, and any user agents instead

Never send passwords, API keys, or payment details

Submit a Report

Prefer email? Write to abuse@iproyal.com with the affected domain in the subject line

What Happens Next

  • Review

    We check the IPs, times, and target in your report against activity on our network

  • Customer Response

    In most cases, the customer has to explain the reported activity to our internal team

  • Decision

    The usage continues, continues with changes that lower risk, gets restricted or suspended, or the user loses access to our network

  • Action

    Confirmed DDoS, spam, brute force, or impersonation causes immediate suspension, and serious cases can mean a lifetime ban

Note

We don’t share customer details with reporters unless the law requires us to. We disclose customer data to authorities only where the law requires or permits it. When authorities contact us, we verify the request before responding

How We Prevent Misuse

Prevention starts before anyone connects to our network

  • Identity Verification

    Customers can verify their identity with a government-issued ID and a live photo through our verification partner, iDenfy. Verification is required for certain features and higher-risk targets

    KYC Policy
  • Restricted Targets

    Access to known high-risk websites is restricted by default: malware and criminal sites, piracy, government, banking, and crypto exchanges

    Risk and Legal Compliance
  • Automated Monitoring

    Our systems flag suspicious requests and can block an account’s unusual traffic to login pages

  • Vetted Supply

    Residential and mobile proxy suppliers go through our screening process, and our IPs are regularly screened against malicious-IP databases

    Proxy Sourcing

Other Requests

  • Security Vulnerabilities

    Email security@iproyal.com about vulnerabilities in our own systems, as set out in our Vulnerability Disclosure Policy

    Vulnerability Disclosure Policy
  • Privacy Requests

    Email privacy@iproyal.com about your personal data or how we handle it, as set out in our Privacy Policy

    Privacy Policy
  • Law Enforcement

    Use the form above or email abuse@iproyal.com. We cooperate with law enforcement and other authorities as required

    Submit a Report

Frequently Asked Questions

Do I need an IPRoyal account?

No. Anyone can report through the form or by email.

Will you tell me who the customer is?

No. We don’t share customer details with reporters unless the law requires us to. We disclose customer data to authorities only where the law requires or permits it. When authorities contact us, we verify the request before responding.

What if I don’t have the IP address?

Report it anyway. Send the domain, the time window, and any user agents or request patterns you have.

Can I report by email?

Yes. Write to abuse@iproyal.com with the affected domain in the subject line.

Does a report suspend the account?

Not on its own. A report starts a review, and we act when misuse is confirmed. Clear-cut attacks can lead to immediate suspension.

Where do I report a security vulnerability?

Email security@iproyal.com. Our Vulnerability Disclosure Policy explains the process.