Disclosed is a method for recognizing an illegitimate proxy for charging fraud, comprising: a core network device acquiring a target website URL carried in a service packet and an IP address of a target server; the core network device searching for an IP address, corresponding to the target website, of a server from a pre-established white list, wherein the white list contains a correlation between a free website and an IP address of a legitimate server; and when the IP address, corresponding to the target website, of the server does not contain the IP address of the target server, the core network device recognizing the target server as a suspected illegitimate proxy server. By means of the method for recognizing an illegitimate proxy for charging fraud provided in the embodiments of the present invention, an illegitimate proxy for charging fraud can be accurately recognized, thereby effectively blocking charging fraud.