For researchers
Find abuse. Prove it. Get rewarded.
Use your investigative skills to uncover phishing, fraud, impersonation, malicious infrastructure and other forms of online abuse. Submit verified intelligence to company programs, build your reputation and earn rewards for meaningful findings.
Free for researchers. No platform subscription required.
Investigate real-world abuse. Work directly with companies. Get rewarded for impact.
- Open Programs
- Transparent Rewards
- Verified Companies
- Researcher Reputation
- Private Invitations
- Secure Payouts
How it works
From discovery to reward.
- 01
Create your researcher profile
Build your AbuseOne identity, select your areas of expertise and complete any required verification.
- 02
Explore programs
Browse active company programs and filter by industry, abuse type, scope and available rewards.
- 03
Read the program scope
Understand exactly what the company wants researchers to investigate, what is allowed and what is excluded.
- 04
Investigate
Research abuse using lawful, ethical and non-destructive methods within the program rules.
- 05
Submit your evidence
Send a structured report containing evidence, affected assets, entities and supporting intelligence.
- 06
Get validated and rewarded
Accepted reports increase your AbuseOne reputation and may earn rewards based on the company’s published reward structure.
Discover
Find programs worth investigating.
Abuse categories
Investigate the abuse happening outside the traditional bug bounty.
Phishing
Find domains, pages, emails and infrastructure impersonating organisations.
Impersonation
Identify fake company, employee or executive identities.
Fake Shops
Discover fraudulent storefronts and counterfeit commerce operations.
Malicious Domains
Track typosquatting, lookalike domains and abuse infrastructure.
Fake Apps
Identify unauthorised or malicious applications using company brands.
Credential Leaks
Find exposed credentials connected to participating organisations.
Brand Abuse
Document unauthorised use of company names, logos and digital assets.
Social Media Abuse
Investigate scam accounts, fraudulent advertisements and coordinated abuse.
Payment Fraud
Identify payment infrastructure linked to fraudulent operations.
Scam Infrastructure
Connect hosting, domains, accounts and services used by scam networks.
Marketplace Abuse
Find fraudulent sellers, listings and manipulation.
Fraud Networks
Connect individual abuse indicators into larger coordinated operations.
Your report
Evidence matters.
A strong AbuseOne report does more than flag suspicious activity. It helps a company understand exactly what happened, where it happened and how the abuse is connected.
Reporting guidelinesTriage
Know what happens after you press submit.
Submitted
Your report is received by AbuseOne.
Initial review
The report is checked for completeness, duplication and program eligibility.
Company triage
The participating organisation reviews the evidence and potential impact.
Investigation
Related infrastructure, identities and entities may be investigated further.
Decision
The report is accepted, closed as duplicate, marked informative or rejected with a reason.
Reward
Where applicable, the company approves the published reward.
Rewards
Get rewarded for meaningful findings.
Participating companies define their own reward structures based on abuse category, severity, impact and quality of evidence.
The full reward is yours
If a company approves a £860 reward, the researcher receives £860.
AbuseOne’s company-side processing fees do not reduce the published researcher reward.
| Severity | Reward range |
|---|---|
| Low | £45 – £215 |
| Medium | £215 – £860 |
| High | £860 – £4,300 |
| Critical / exceptional impact | £4,300+ |
Reputation
Your track record opens doors.
Every high-quality contribution helps build your AbuseOne reputation.
Strong researchers may gain access to private programs, specialist investigations and higher-value opportunities.
Access
Start public. Earn private access.
Public programs
Open to eligible AbuseOne researchers.
Best for
- Discovering new companies
- Building reputation
- Learning program workflows
- Broad abuse research
- Visibility
- Listed publicly
- Access
- Eligible researchers
Private programs
Invitation-only research programs.
Best for
- Sensitive investigations
- Specialist expertise
- Trusted researcher groups
- Higher-value investigations
- Visibility
- Private
- Access
- Invitation only
Your workspace
Everything you investigate. In one place.
Responsible research
Investigate abuse without creating more of it.
AbuseOne research must be lawful, ethical, proportionate and limited to the scope of participating programs.
Program-specific rules always take precedence.
Read Researcher GuidelinesResearchers must
- Follow each program’s published scope
- Respect applicable laws
- Avoid unnecessary interaction with victims
- Never cause financial loss
- Never purchase illegal goods or services
- Never exploit unrelated systems
- Never impersonate real victims
- Avoid destructive testing
- Protect sensitive information
- Submit findings privately through AbuseOne
Payouts
From accepted report to payout.
- 1
Company approves reward
- 2
Reward confirmed
- 3
Researcher payout initiated
- 4
Payment completed
Community
Build a reputation that follows your work.
Recognition should reflect quality, not volume.
AbuseOne prioritises accurate, useful and evidence-backed intelligence over mass submissions.
- LeaderboardRanked by accepted, evidence-backed findings.
- Hall of FameRecognition from companies for exceptional impact.
- Researcher ProfilesA public record of your verified contributions.
- SpecialtiesShow where your expertise is strongest.
- BadgesEarned for milestones in quality, not quantity.
- Private InvitationsAccess to programs that need trusted expertise.
The internet leaves evidence.
Find it, connect it and turn it into intelligence that helps stop real-world abuse.
Free for researchers.