Step 1: Identify what you did
Choose the scenario below and take the matching actions.
If you paid money
- Contact your bank or card issuer immediately.
- Request a stop payment or dispute if applicable.
- Monitor transactions and set alerts.
If you shared personal information
- Secure your email account first (change password + enable MFA).
- Change passwords on any related accounts.
- Monitor financial accounts and consider credit monitoring/freeze if sensitive identity info was shared.
If you scanned a QR code or visited a website
- Close the page and don’t enter information.
- Run a security scan if anything was downloaded.
- Change passwords if you entered credentials.
If you deposited a check or were asked to “send money back”
- Contact your bank immediately and explain it may be a fake check scenario.
- Do not send money to the scammer.
- Document everything and monitor for overdraft/chargeback issues.
Step 2: Document and report
- Keep the envelope, letter, and any payment slips.
- Write down dates, phone numbers, websites, and amounts.
- Report through your local resources and relevant company channels (bank/utility/agency).
Prevent it next time
Practice Mail Scam Defense Use Scam Lookup
FAQ
Should I call the number on the letter?
Only after verifying it’s an official number using a trusted source. Scam letters often print scammer-controlled numbers.
What’s the most important account to secure?
Your email account—because it can be used to reset passwords for many other services.