First: it is okay
Scams work because they are designed to. They target emotions, not intelligence. Doctors, engineers, financial professionals, teenagers, retirees — scammers do not care who you are. If you are reading this, you are already doing the right thing by figuring out next steps instead of freezing. Let's go through this together.
The first 30 minutes
Speed matters here. The faster you act, the more damage you can prevent.
- Stop all contact with the scammer. Do not respond, do not negotiate, do not try to get your money back by talking to them. Block the number or account.
- Change your passwords. Start with your email, then banking, then anything else you think they might have access to. Use different passwords for each one.
- Turn on two-factor authentication on every important account. This means even if they have your password, they cannot get in without your phone.
- Call your bank. Tell them what happened. They can freeze cards, flag your account for monitoring, and sometimes reverse transactions if you are fast enough.
The first 24 hours
Once the immediate fires are out, start documenting and reporting.
- Report identity theft at IdentityTheft.gov. This creates a recovery plan specific to your situation and generates an official report you can use with creditors.
- File with the FBI's IC3 at IC3.gov. This is especially important for internet-based scams, crypto fraud, and cases involving large amounts of money.
- Report to the FTC at reportfraud.ftc.gov. Every report helps build cases and warn others.
- Save everything. Screenshots of messages, emails, links, transaction receipts, phone numbers. You will need this for reports and potentially for your bank's fraud investigation.
- Warn your contacts if your account was compromised or impersonated. A quick "hey, if you got a weird message from me, do not click anything" can stop the scam from spreading.
If you shared your SSN or personal info
Place a fraud alert with one of the three credit bureaus (Equifax, Experian, or TransUnion). They are required to notify the other two. If you want stronger protection, consider a credit freeze — this prevents anyone from opening new accounts in your name until you lift the freeze yourself. Both are free.
What NOT to do
- Do not keep talking to the scammer. They are professionals at keeping you on the hook. Every additional conversation gives them another chance to manipulate you.
- Do not pay more money to "recover" your funds. This is an extremely common follow-up scam. Someone contacts you claiming they can get your money back for a fee. They cannot. This is the same scam wearing a different hat.
- Do not ignore small transactions. Scammers often test with small charges ($1-$5) before making larger ones. If you see anything you did not authorize, report it immediately.
- Do not blame yourself into inaction. Shame makes people hide what happened instead of fixing it. The scammer is the one who did something wrong, not you.
Recovery is possible
How much you can get back depends on how you paid and how fast you act. Credit card charges can often be disputed successfully. Bank transfers sometimes. Wire transfers are harder but not impossible if reported within hours. Gift cards and crypto are the toughest — scammers use these specifically because they are hard to reverse. But even in worst-case scenarios, you can stop the bleeding, protect your identity going forward, and make it harder for them to hit someone else.
Tools that can help right now
If you are still not sure whether something is a scam, or if you received more suspicious messages, check them here before reacting.