Something happened. What should you do now?
If you clicked, replied, shared information, logged in through a suspicious link, or sent money, focus on the next protective step instead of trying to solve everything at once.
Four steps to take first.
These steps apply to most scam situations. If money moved or an account was exposed, handle that immediately.
Stop
Stop replying, clicking, paying, or continuing the conversation.
Protect money
If money or card information was involved, contact the bank, card issuer, or payment service right away.
Secure accounts
Start with email, then affected financial, shopping, social, or work accounts.
Document
Save messages, screenshots, receipts, transaction IDs, URLs, phone numbers, and case numbers.
What happened?
Choose the closest match. You can follow more than one section if several things happened.
If money was sent or a charge appeared.
Recovery options vary by payment type and timing, so contact the provider as quickly as possible.
Bank or card
- Call the official number on the card, statement, app, or bank website.
- Ask whether the card or account should be frozen or replaced.
- Report unauthorized activity and ask how to open a fraud claim or dispute.
- Write down the case number and the date you reported it.
Payment app or transfer service
- Report the transaction through the official app or support channel immediately.
- Ask whether the payment can be stopped, frozen, reversed, or investigated.
- Save usernames, transaction IDs, messages, and screenshots.
- Secure the email and password connected to the service.
Gift card
- Contact the gift card issuer or retailer immediately.
- Keep the card, receipt, card number, and scam messages.
- Ask whether any remaining balance can be frozen.
Keep proof
- Save amounts, dates, merchant names, transaction IDs, and payment instructions.
- Keep copies of any dispute confirmation or support response.
- Do not delete the original scam messages until you have saved what you need.
If you entered a password, shared a code, or lost account access.
Email is often the recovery path for other accounts, so secure it early if it may be exposed.
Change the password using the official site or app. Use a strong password you are not using anywhere else.
Turn on multi-factor authentication and remove unfamiliar recovery methods, devices, or authenticators.
Use “sign out everywhere,” “log out of all devices,” or session-management tools where available.
If the exposed password was used on other accounts, change those passwords too.
Check login history, password resets, forwarding rules, purchases, messages, and account changes you did not make.
If personal information was exposed or your identity may be in use.
Use official recovery resources and protect against new accounts or additional misuse.
Start an identity-theft recovery plan
Use the Federal Trade Commission's official identity-theft recovery process.
IdentityTheft.govConsider a credit freeze or fraud alert
These tools can help protect against new credit activity using your identity.
FTC: Credit Freezes & Fraud AlertsReview your credit reports
Look for accounts, addresses, or inquiries you do not recognize.
AnnualCreditReport.comIf a work account, invoice, payroll request, or vendor payment was involved.
Move quickly and involve the people who can stop payments, protect systems, and preserve evidence.
Keep a simple record of what happened.
A clear timeline can help when working with banks, platforms, employers, law enforcement, or recovery services.
Once the immediate problem is under control, learn the pattern.
Training can help you recognize similar pressure tactics earlier next time.