How to report abuse to Vercel
Report phishing, counterfeit, and brand-abuse sites deployed on Vercel.
Where to report
Report a Vercel-hosted site at vercel.com/abuse (Phishing or Malware, Copyright Infringement / DMCA, Trademark Violations, or Other). DMCA notices can also go to dmca@vercel.com. No published SLA; Vercel notifies the owner and can disable the deployment; counter-noticed content is restored in 10–14 business days.
- Abuse report form
- vercel.com/abuse
- Abuse email
- dmca@vercel.com
Include in your report
- Your full name and email address (required by the form)
- The abuse type and the exact deployment URLs, including any custom domain
- For copyright: identification of the work with URLs, precise identification of the infringing material, and your name, address, phone, and email
- Good-faith and accuracy statements plus a statement under penalty of perjury that you are authorized to act for the rights holder
- A physical or electronic signature
Vercel hosts or serves the content, so it can remove the infringing page or store. If the domain itself is the abuse (a typosquat or lookalike), report it to the registrar as well.
Vercel is a frontend cloud platform with a generous free tier and instant .vercel.app deployments, which makes it a frequent host for phishing pages and brand-impersonation sites as well as legitimate apps. Vercel runs a public abuse form with categories for phishing or malware, copyright/DMCA, trademark violations, and other issues, and publishes a DMCA policy with a designated agent.
A Vercel abuse report can remove the infringing page or store. If the domain itself is the abuse (a typosquat or lookalike), report it to the domain registrar as well. For a cloned storefront, see how to remove a fake website. Payment processors are often faster than hosts — payment takedown guides cover that layer. Free takedown templates cover the wording.
Why brand-abuse sites show up on Vercel
Because Vercel deploys from Git in seconds, abusive sites appear and reappear quickly under new random subdomains. Vercel can disable a deployment in its entirety or specific pages, and it notifies the site owner of the claim. Reports need precise deployment URLs and, for copyright, the full set of DMCA statements including authority to act under penalty of perjury.
What a Vercel abuse report can cover
- Phishing pages on random .vercel.app subdomains
- Brand-impersonation and fake support sites
- Counterfeit storefront frontends deployed from cloned templates
- Copyright-infringing clones of brand websites
- Trademark misuse in project names and custom domains
How to file a Vercel abuse report
- 1
Capture the deployment URL and any custom domain
Record both the .vercel.app URL and any custom domain pointing to it, with screenshots and timestamps. Deployments are often replaced rather than edited.
- 2
File through vercel.com/abuse
Select the abuse type. For copyright the form has a dedicated DMCA path; for brand names and logos use Trademark Violations. Vercel states it prefers the form over email for DMCA and asks for as much relevant information as possible.
- 3
Include the perjury and authority statements
Vercel's DMCA policy requires a statement under penalty of perjury that you are authorized to act on behalf of the copyright owner, alongside the good-faith and accuracy statements and a signature.
- 4
Expect deployment-level action
If the entire site infringes, Vercel disables the deployment in its entirety; for partial infringement it may disable specific pages. The owner is notified and may counter-notice.
When a Vercel abuse report is not enough
Hosting complaints remove the page, not the domain. A suspended site can reappear on a new host under the same URL within hours. If the domain itself is the abuse, file with the registrar as well. Stolen photos and copy are usually faster as a DMCA notice than as a trademark complaint — see the DMCA takedown guide.
How IPzest speeds up Vercel enforcement
- Continuous monitoring for brand-abuse sites appearing on .vercel.app and custom domains pointed at Vercel
- Hosting identification that catches Vercel behind custom domains and CDNs
- Evidence packaging with the full DMCA statement set Vercel's policy requires
- Coordinated filing across Vercel, the custom domain's registrar, and any upstream CDN
Frequently asked questions
How do I report abuse to Vercel?
Use the form at https://vercel.com/abuse and pick Phishing or Malware, Copyright Infringement / DMCA, Trademark Violations, or Other. DMCA notices can also be emailed to Vercel's designated agent at dmca@vercel.com (Vercel Inc., Attn: DMCA, 440 N Barranca Ave #4133, Covina, CA 91723).
What is Vercel's DMCA agent?
Vercel Inc., Attn: DMCA, 440 N Barranca Ave #4133, Covina, CA 91723, email dmca@vercel.com. The DMCA policy at vercel.com/legal/dmca-policy also links to the abuse form's DMCA path.
Does Vercel remove content or only forward the complaint?
Vercel takes the deployment offline. Its DMCA policy says it notifies the website owner of the claim and, where the entire site infringes, disables the deployment in its entirety; for partial infringement it may disable specific pages. Repeat infringers may have accounts terminated.
How long does Vercel take to act?
No response time is published; Vercel says it will promptly respond to notices that comply with its policy. After a valid counter-notice, removed material is restored within 10–14 business days unless the complainant files a lawsuit.
Other hosting providers
All hosting providers we cover
- Akamai Cloud (Linode) abuse report
- Amazon Web Services abuse report
- Bluehost abuse report
- Cloudflare (CDN) abuse report
- DigitalOcean abuse report
- Google Cloud abuse report
- Hetzner abuse report
- Hostinger abuse report
- Microsoft Azure abuse report
- Netlify abuse report
- OVHcloud abuse report
- Shopify abuse report
- Vultr abuse report
- Wix abuse report
- WordPress.com abuse report
Related guides