How to report abuse to Google Cloud
Report counterfeit, phishing, and brand-abuse sites hosted on Google Cloud.
Where to report
To report abuse on Google Cloud, use the Google Cloud Platform abuse form at support.google.com/code/contact/cloud_platform_report. For a Compute Engine virtual machine, use the Compute Engine form at support.google.com/code/contact/compute_engine_report, which asks for the source IP, date, time, and time zone. Both forms send copyright and other legal complaints to a separate channel, Google's Legal Help troubleshooter at support.google.com/legal/troubleshooter/1114905. There you pick Google Cloud Platform and then choose copyright, counterfeit, or trademark. Google's ARIN records list google-cloud-compliance@google.com as the abuse desk, but they say the forms get the fastest response. Google doesn't publish a turnaround time. The Compute Engine form says your name and email won't be shared with the reported customer, but the details of the report may be forwarded.
- Abuse report form
- support.google.com/code/contact/cloud_platform_report
- Abuse email
- google-cloud-compliance@google.com
Include in your report
- The abusive IP addresses or URLs, with a separate submission for each IP address in question
- For Compute Engine: source IP, abuse date, time in 24-hour format, and time zone
- Full HTTP request headers and log excerpts if available, with sensitive data removed
- For trademark, counterfeit, or copyright: a report through Google's Legal Help form, not the abuse form
- A working email address (required on every form)
Google Cloud hosts or serves the content, so it can remove the infringing page or store. If the domain itself is the abuse (a typosquat or lookalike), report it to the registrar as well.
A Google Cloud abuse report can remove the infringing page or store. If the domain itself is the abuse (a typosquat or lookalike), report it to the domain registrar as well. For a cloned storefront, see how to remove a fake website. Payment processors are often faster than hosts — payment takedown guides cover that layer. Free takedown templates cover the wording.
Why brand-abuse sites show up on Google Cloud
Compute Engine VMs are launched on demand, so the same IP can belong to different customers at different times. Google's form says that the source IP, timestamp, and time zone are critical to its investigation. Brand owners also have to pick the right channel: the abuse forms explicitly send copyright and legal issues to the separate Legal Help form, so a trademark complaint filed as generic abuse is in the wrong queue.
What a Google Cloud abuse report can cover
- Phishing pages on Compute Engine VMs and Cloud Storage buckets
- Counterfeit storefronts on Compute Engine or App Engine
- Malware distribution from Cloud Storage
- Brand-impersonation sites moved to Google Cloud after a takedown elsewhere
- Abusive scraping and scanning from Compute Engine IPs
How to file a Google Cloud abuse report
- 1
Confirm the resource is on Google Cloud
Resolve the domain and check the IP's WHOIS. Google Cloud ranges are registered to Google LLC with a remark that the addresses are used by Google Cloud customers, and the record points you to the abuse and legal forms.
- 2
Pick the right form
For spam, malware, phishing, or network abuse from a VM, use the Compute Engine abuse form. For App Engine, Cloud Storage, BigQuery, Cloud SQL, and other services, use the general Google Cloud Platform form. For trademark, counterfeit, or copyright, use the Legal Help troubleshooter instead.
- 3
Pin the incident down in time
Google says the source IP, timestamp, and time zone are critical for Compute Engine investigations. Submit a separate report for each IP address and attach logs or full HTTP headers if you have them.
- 4
File IP claims through Legal Help
At support.google.com/legal/troubleshooter/1114905, choose See more products, then Google Cloud Platform, the relevant product, Legal Reasons to Report Content, and Intellectual Property. From there, choose copyright, counterfeit, or trademark.
When a Google Cloud abuse report is not enough
Hosting complaints remove the page, not the domain. A suspended site can reappear on a new host under the same URL within hours. If the domain itself is the abuse, file with the registrar as well. Stolen photos and copy are usually faster as a DMCA notice than as a trademark complaint — see the DMCA takedown guide.
How IPzest speeds up Google Cloud enforcement
- Origin identification behind CDNs so the report names the actual Google Cloud IP
- Timestamped evidence with time zones for Compute Engine's IP-and-time based investigations
- Routing of trademark and counterfeit claims to Google's Legal Help channel rather than the abuse queue
- Coordinated filing to Google Cloud, the registrar, and any CDN in front of the site
Frequently asked questions
How do I report abuse to Google Cloud?
Use https://support.google.com/code/contact/cloud_platform_report for most Google Cloud services, or https://support.google.com/code/contact/compute_engine_report for abuse coming from a Compute Engine virtual machine. Google's ARIN records also list google-cloud-compliance@google.com as the abuse desk, but they say the forms get the fastest response.
Where do I send a trademark or copyright complaint about a Google Cloud site?
Not to the abuse form. Both Google Cloud abuse forms tell you to use the Legal Help form at https://support.google.com/legal/troubleshooter/1114905 for copyright and legal issues. Choose Google Cloud Platform as the product, then pick copyright, counterfeit, or trademark under Intellectual Property.
Will Google share my details with the customer?
The Compute Engine form says your name and email will not be shared with the reported customer, but the incident details you enter may be forwarded to them. Legal Help requests may be shared with Lumen, a research project on takedown requests; Google says it never shares contact fields such as your email address with Lumen.
How long does Google Cloud take to act?
Google publishes no turnaround time. Its ARIN records say the web forms get the fastest response and that email to the abuse desk may take longer.
Other hosting providers
Report abuse to Amazon Web Services
Report counterfeit, phishing, and brand-abuse resources hosted on AWS.
Report abuse to Microsoft Azure
Report counterfeit, phishing, and brand-abuse sites hosted on Microsoft Azure.
Report abuse to DigitalOcean
Report counterfeit, phishing, and brand-abuse sites hosted on DigitalOcean.
All hosting providers we cover
- Akamai Cloud (Linode) abuse report
- Amazon Web Services abuse report
- Bluehost abuse report
- Cloudflare (CDN) abuse report
- DigitalOcean abuse report
- Hetzner abuse report
- Hostinger abuse report
- Microsoft Azure abuse report
- Netlify abuse report
- OVHcloud abuse report
- Shopify abuse report
- Vercel abuse report
- Vultr abuse report
- Wix abuse report
- WordPress.com abuse report
Related guides