What to Do Immediately If You Think You’ve Been Scammed

If you think you may have been scammed, don’t spend too much time debating whether it was ‘real’ enough to count. Start protecting your money, accounts, devices, and identity right away. The fastest way to limit the damage is to contact the payment company, secure your accounts, clean up compromised devices, and report what happened.

The good news is that even if you already responded, sent money, clicked a link, or shared personal information, there are still steps you can take. The sooner you act, the better your chances of limiting the damage.

1. Stop communicating with the scammer

Stop replying to messages, stop answering calls, and don’t click anything else they send. If the scam started through a phishing email or text, report the message before deleting it. Forward phishing emails to reportphishing@apwg.org. Forward phishing texts to SPAM (7726). You can also report the scam at ReportFraud.ftc.gov.

This matters because scammers often come back a second time. They may pretend to be a bank, a fraud investigator, a government agency, or even a “recovery service” that claims it can get your money back. In reality, that follow-up can be part of the scam too.

2. Contact the payment company or bank right away

If you sent money, do this right away. Contact the company or bank involved and tell them the transaction was fraudulent. That includes payments made using credit cards, debit cards, bank transfers, wire transfers, gift cards, and money transfer apps. Depending on how you paid and how quickly you report it, you may be able to reverse the charge or stop the transfer.

If you paid with cryptocurrency, recovery will be harder. Crypto payments are typically not reversible, but you should still contact the company you used to send the money and ask whether anything can be stopped or reversed.

What you can do:

• Call the bank, card issuer, wire company, or payment app immediately.

• Tell them the payment was tied to fraud.

• Ask whether they can reverse, freeze, dispute, or stop the transaction.

• Write down who you spoke to, when, and what they told you.

3. Change your passwords and secure your important accounts

If you gave away a password, change it immediately. If you reused that password anywhere else, change it there too. Make the new password long and unique. A passphrase is often easier to remember and harder to guess than a short, complicated password.

Start with your most important accounts:

• Email

• Banking and credit cards

• Payment apps

• Shopping accounts

• Cell phone account

• Social media accounts

If you have multi-factor authentication available, turn it on. And if the scammer may have taken over your phone number or mobile account, contact your service provider right away to regain control and then change that password too.

4. If personal information was exposed, protect your identity

If you gave away sensitive personal information such as your Social Security number, go to IdentityTheft.gov for recovery steps and identity theft guidance. That site also explains that you can place a free, one-year fraud alert, and that credit freezes are free as well. A freeze helps stop someone from opening a new credit account in your name.

What you can do:

• Visit IdentityTheft.gov and follow the steps that match what was exposed.

• Place a fraud alert if you are concerned someone may try to use your identity.

• Consider a credit freeze if the risk is more serious.

• Watch your bank, card, and credit activity closely for anything unfamiliar.

5. If you clicked a link, downloaded something, or gave remote access, deal with the device

If the scam included a suspicious attachment, a bad link, or remote access to your computer, don’t ignore that part. Immediately update your security software, run a malware scan, and remove anything it identifies as a problem.

If someone had remote access to your device, assume they may have seen personal information, saved passwords, or financial details. It’s important to secure your accounts and review financial activity at the same time.

6. Save evidence before you delete everything

It’s smart to save screenshots, emails, text messages, usernames, payment confirmations, gift card receipts, shipping records, and any other details tied to the scam. Keep original documents in a secure place because you may need them later.

This can feel tedious when you’re already stressed, but it makes recovery and reporting easier and gives you a clearer record if you need to talk to your bank, credit card company, police, or a government agency later.

7. Report the scam to the right places

Reporting matters, even if you didn’t lose money. The FTC says reports help them build cases, spot trends, educate the public, and share data with law enforcement.

A good general approach is:

• Report the scam to the FTC.

• If it involved identity theft or exposed personal information, go to IdentityTheft.gov.

• If it was internet-enabled fraud or cyber-enabled crime, file a complaint with the FBI’s IC3.

• Report the account, ad, listing, text, email, or profile to the platform where it happened.

• If the matter is urgent or time-sensitive, contact local law enforcement directly.

8. Stay alert for follow-up fraud

After a scam, you may be targeted again. Scammers sometimes return pretending they’re helping you fix the problem. They may claim they can recover your money, unlock an account, investigate the fraud, or speed up a refund for a fee. Be careful. Real recovery steps usually start with organizations you contact directly through official channels, not strangers who suddenly appear with promises.

Final thought

Being scammed can leave people embarrassed, angry, or frozen. That reaction is normal. But what matters most now is not replaying the mistake. It’s taking the next right step.

Pause. Cut off contact. Protect your money. Secure your accounts. Report what happened. Even a few fast actions can make a real difference.