CyberCrime Bounty Program

Before you begin:

NOT FOR EMERGENCIES. If you or someone else is in immediate danger, contact your local emergency services immediately. This form is not monitored in real time.

About this program

The CyberCrime Bounty Program rewards individuals who provide actionable intelligence leading to the identification, disruption, or prosecution of cybercriminal operations. All submissions are anonymous at the point of reporting. If your report leads to a bounty being considered, you will be invited through a secure portal to verify your identity; only then can a payment be made.

Bounties are time-limited. Each bounty is open for 12 months from the date Crime Stoppers International posts the bounty target. The closing date for each bounty is shown on the relevant bounty listing. Any bounty not awarded within that 12-month window will close on day 365, and no payment will be made regardless of when your report was submitted or where it sits in the review process. Reviews can take several months, so please check back regularly through the secure portal.

If you wish to be eligible for a bounty, you must collect your secure login details on the final screen of this form and save them somewhere safe. This is the only way Crime Stoppers International can contact you about your report. We cannot reissue lost credentials.

You do not need to claim a bounty to submit a report - all intelligence is valued.

Keep in Contact

Having submitted this form, you can opt-in to enable Crime Stoppers International to keep in contact with you via our 100% anonymous online messaging system, the Keep in Contact portal. This enables Crime Stoppers International to ask further questions about the information you have provided. You will not be contacted in any other way and you will remain completely anonymous at all times. Your information could be vital, and may make a real difference.

Please note: the Keep in Contact facility expires after 14 days.

Logging back in is easy, just use the Keep in Contact Login button at the top of this page.

Tell us what you know

Important: Do not include your own name or any personal identifying information in any field below. Focus on what happened, how it happened, and who was involved.

Which bounty are you reporting on? (required)

Please enter the bounty name as shown on the Crime Stoppers International bounty listing. If you are unsure, please describe the bounty as best you can.

This information is required

What do you know about this cybercrime activity? (required)

Describe what you know in your own words - how you became aware of it, what the activity involves, who may be responsible, and any other relevant detail. Please provide as much information as you can.

This information is required

Date discovered/reported to you:

Estimated date activity began:

Known attack vector/method:

E.g. spear phishing email, compromised RDP, zero-day exploit, social engineering via LinkedIn.

Do you know who is responsible?

Known names:

Real names, if known.

Online aliases/handles:

Forum handles, Telegram, dark web aliases, etc.

Known group/organisation affiliation:

E.g. LockBit, Lazarus Group, Scattered Spider, FIN7.

Suspected location, country, address, phone numbers, email addresses:

Additional description:

How you know them, role in the operation, methods, language spoken, time zone observed.

All fields optional - enter what you know. Even a single domain, IP address or wallet can be a critical lead.

Domains/URLs:

IP addresses:

Email addresses used by the threat actor(s):

Threat-actor cryptocurrency wallets:

E.g. bc1q…, 0x…

DO NOT enter your own banking or wallet details here. Payout details are collected separately, and only after identity verification.

File hashes (MD5/SHA256):

Social media/messaging accounts:

E.g. @handle, Telegram, Discord.

Phone numbers:

Include country code where possible.

Other indicators:

Known tactics, techniques & procedures (TTPs):

Methods, tools, malware families, or MITRE ATT&CK techniques used.

Back

CyberCrime Bounty Program

Keep in Contact

Your submission

Please confirm (required)

Submission type (required)

Tell us what you know

Important: Do not include your own name or any personal identifying information in any field below. Focus on what happened, how it happened, and who was involved.

Which bounty are you reporting on? (required)

What do you know about this cybercrime activity? (required)

Date discovered/reported to you:

Estimated date activity began:

Known attack vector/method:

Do you know who is responsible?

Known names:

Online aliases/handles:

Known group/organisation affiliation:

Suspected location, country, address, phone numbers, email addresses:

Additional description:

All fields optional - enter what you know. Even a single domain, IP address or wallet can be a critical lead.

Domains/URLs:

IP addresses:

Email addresses used by the threat actor(s):

Threat-actor cryptocurrency wallets:

File hashes (MD5/SHA256):

Social media/messaging accounts:

Phone numbers:

Other indicators:

Known tactics, techniques & procedures (TTPs):

Supporting information & Declaration

Types of information available:

Information description:

Complete this section only if you are submitting for a bounty. Bounty eligibility is assessed by our analyst team based on the quality, originality, and actionability of the intelligence provided. Not all reports qualify.

Is this information exclusive to this submission?

Additional notes:

Your safety comes first. Are you the only person who knows this information, and could sharing it put you or someone close to you at risk of being identified?

Protect your anonymity. Please do not include your name, contact details or any identifying information anywhere in this report.

Key obligations you are agreeing to:

By submitting this report, you acknowledge that you have read and accept our Terms and Conditions and Privacy Statement. Full Legal & Compliance, including T&Cs, can be found at https://www.crimestoppersinternational.org/bounty. Please confirm each of the following before submitting: