Report to Dropbox
Last updated September 18, 2026
The short answer
Send Dropbox phishing to abuse@dropbox.com, including the full link
The Dropbox scam is a shared file you were not expecting. The notification is often genuine, because the scammer really did share a document with you from a real account. Dropbox takes reports at abuse@dropbox.com.
What they handle
- Phishing emails using the Dropbox name
- Malicious files shared through real Dropbox accounts
- Fake Dropbox login pages
- Unauthorized changes to your account
How to file a report
- 1
Forward the complete message to abuse@dropbox.com
Send the whole email rather than a screenshot. If it was a link rather than an email, send a description of how you received it plus the full URL.
- 2
Do not open a file from someone you do not know
Even when the notification came from Dropbox, do not view or download a file unless you know the sender. The same goes for accepting a folder invitation.
- 3
Check the sending domain
Real Dropbox mail comes from dropbox.com, dropboxmail.com, docsend.com, em-s.dropbox.com, em.dropbox.com, txn.dropbox.com or dropbox.zendesk.com.
What you'll need
- The complete email, forwarded
- The full URL of any link, unclicked
- The name on the account that shared the file
What to expect
abuse@dropbox.com is intake and can get the sharing account shut down. If you signed in on a fake page, change that password immediately and check for unauthorized account changes.
Frequently asked questions
The notification really did come from Dropbox. Does that make the file safe?
No. Scammers use real Dropbox accounts to share malicious documents, so the notification is genuine and the file is not. Judge it by whether you know the sender.
Company guide
Dropbox scams
Knowing which scam you were hit by makes the report better. This is how scams impersonating Dropbox actually work, what the company will never ask you for, and the warning signs to recognise next time.
Read the guide →