Report a site

1. Where to write

We accept complaints about websites at abuse@layero.ru or use the form above. For help with Layero, contact support: support@layero.ru.

There is no need to create a separate account, and it is also not necessary to write from a corporate address. We consider anonymous complaints, but without a return address we will not be able to report the result.

2. What is considered a violation

Violations for which we disable the site:

• Phishing - pages that lure passwords, codes from SMS, card data or access to accounts, posing as a bank, government service, marketplace or postal service.
• Deceptive content - fake system windows and “computer is infected” warnings, fake “official support”, “Download” and “Watch” buttons, behind which something else is hidden.
• Hidden forwarding and cloaking - a site that is a link to an external resource, redirection for no clear reason, different content for search engines and people.
• Malware - distribution of files that infect the device, miner scripts, substitution of the contents of other people's pages.
• Counterfeiting someone else's brand - a copy of an online store or service posing as the original, including fake payment pages.
• Fraud - collecting money under false pretenses: non-existent sweepstakes and compensation, “investments” with promised returns, selling goods without the intention of shipping them.
• Illegal content - materials prohibited in the Russian Federation.
• Blocking circumvention services — VPN servers, proxies and tunnels hosted and run on Layero infrastructure through which users in Russia access resources blocked under Russian law. The basis is clause 4.2 of the Terms and Part 1 of Article 15.8 of Law No. 149-FZ.
• Copyright infringement - posting other people's materials without the permission of the copyright holder.
• Spam - the site works as a landing page for newsletters.

A VPN alone is not grounds for disabling a service. When reviewing a report, we consider the purpose of the service and the exception in Part 17 of Article 15.8: a group of users defined in advance and the technological needs of their activities. An example is secure employee access to an organization’s internal network.

If the service owner has failed to meet the requirement in point 1 of Part 7 of Article 15.8 to restrict access to blocked resources, Layero refuses to supply computing resources or stops supplying them. This is the hosting provider’s duty under Part 5.1 of Article 10.2-1 of Law No. 149-FZ.

To report a blocking circumvention service, select “Other”, provide its address and describe which blocked resources are accessible through it. We decide after reviewing the report; other violations of the Terms are reviewed separately.

By what criteria is a site recognized as phishing or fraudulent, what is not considered a violation, and how are decisions made? Rules for identifying phishing and fraudulent sites.

We not we sort out disputes about the quality of goods and services, conflicts between the customer and the contractor, complaints about content that you simply do not like. For such questions, please contact the site owner directly.

3. What to include in the complaint

The more specific the request, the faster the solution. Please specify:

1. Full page address. Exactly the one where the violation is, and not the main one. The address looks like project-name.layero.app. If the site is open on its own domain, indicate that too.
2. What exactly is wrong. One or two phrases in your own words: “the form asks for a code from SMS on behalf of the bank,” “the store copies the original and accepts payment by card.”
3. Confirmation. A screenshot, a link to check in an anti-virus service, a case number in your system - that’s all there is.
4. Date and timewhen you saw it. Fraudulent pages often change content and may appear harmless with a direct link.
5. Return addressif you want to know the result.

There is no need to send malicious files - just a link.

4. What happens next and when?

1. Confirm receipt within one business day.
2. Let's check. We deal with phishing and malware out of turn, usually within 24 hours after the request. Other complaints – up to three working days.
3. Let's decide. If the violation is confirmed, we disable the site: it stops opening, and the owner receives a notification with the reason. If the violation is formal - the relationship to the brand is not indicated, the redirection is unclear - we first ask the owner to correct it within 48 hours. We disable several sites of the same owner with one bait all at once. In case of repeated violations, we block the entire account, and a site that violated the rules again within 30 days after restoration is no longer restored.
4. We answer. If you left a return address, we will write what you did. If no violations are found, we will also write and explain why.

If there is a clear threat to users - active phishing, distribution of a malicious file - we disable the site immediately and deal with it later.

5. Copyright holders, government agencies and security specialists

Copyright holders. Attach confirmation of rights to the material and the exact addresses of the pages where it is posted. If a representative applies, please attach a power of attorney.

Government agencies. Please send official inquiries to the same address; We respond within the time limit established by law. Company details - in public offer.

Antivirus companies, CERT and anti-fraud teams. We accept machine and list requests: several addresses in one letter are normal, a separate complaint for each is not needed. Contacts for reporting platform vulnerabilities are listed in security.txt. If you have classified the zone layero.app in its entirety, write about this separately: subdomains belong to different, unrelated owners, and blocking the entire zone affects more than a thousand uninvolved sites.

6. If your site is disabled

Reply to notification email or write to support@layero.ru and explain why you think the shutdown was an error. We will double-check and, if we made a mistake, return the site. Posting rules - in user agreement and Rules for identifying phishing and fraudulent sites.

Most often, harmless things come under suspicion: educational copies of foreign interfaces, simulators of operating system and browser windows, test login forms. To automated checks, such a page is indistinguishable from a real scam. If this is your case, write to us and we’ll sort it out.