You've seen something bad in the Fediverse. Now you want to let someone know about it. Start here.
A handy graphical flow-chart of this process is also available.
What do you want to report?
First off, take a look at this definition of spam. It will be helpful.
Before you report, please answer these questions:
If the account's very existence violates a rule, then that takes priority and we will take action.
If the account doesn't violate any of the rules (including Rule #7) then there's probably nothing to report. Making zero posts while breaking no rules isn't a violation of the spam policy, so we won't take action.
One post is not spam. It might break other rules, but it's not spam. Check out the Internet Society's definition of spam.
A single spam post might not be seen by many people. Look at the account's number of followers. Is it single digits? That means this post went to our public timeline and a handful of other accounts.
One post does not violate the spam rule, but it could violate other rules.
OK, maybe we're talking about spam.
How many of the following are true?
If it's not matching up with at least two attributes on this list, it's probably not spam.
Spam is bad. It steals attention, wastes resources, and enables fraud. Infosec.Exchange actively rejects spam.
We don't promise that we will always take action on a few posts that have a few of these things in common. The more posts there are, and the more of these attributes are true, the more likely we are to conclude it is spam and take action.