If you've just realized you've been scammed, the fear and shame hitting you right now are completely normal, and they're also not helpful for what needs to happen next. Here's the good news: there's a clear, proven sequence of steps that gives you the best possible chance of protecting your money, your identity, and your accounts, no matter what kind of scam just happened to you.
This guide is the universal playbook. It doesn't matter whether you sent a wire transfer, clicked a phishing link, fell for a fake romance, or wired money into a crypto "investment" that turned out to be fake, the first-hour, first-day, and first-week actions are largely the same. Work through them in order; you don't have to do everything at once, and you don't have to do it perfectly.
One more thing before you start: scammers count on victims freezing up out of embarrassment and staying quiet. Reporting a scam is not an admission of failure, it's the single most effective thing you can do to stop the damage from spreading and help stop the same scammer from hurting someone else. Let's get moving.
What Should I Do Right Now, in the First Hour?
Speed matters most in the first hour. The goal is simple: stop any more money from leaving your accounts, and lock the front doors scammers might still be able to walk through.
1. Contact your bank or card issuer immediately
Call the fraud or security number on the back of your card, or your bank's official customer service line (do not use a phone number a scammer gave you, and do not call back a number from a suspicious text or email). Tell them you were scammed and ask them to:
- Freeze or cancel any compromised debit or credit cards
- Reverse or dispute any charges that are still pending
- Flag the account for suspected fraud so future transactions get extra scrutiny
If you sent money through a bank wire, Zelle, Venmo, Cash App, or a similar payment app, ask specifically about a payment recall or reversal request. These transfers are usually designed to move money instantly and are often difficult or impossible to reverse, but it costs nothing to ask, and banks can't initiate a recall unless you request one. The sooner you call, the better your odds.
2. Stop any further payments
If the scam is still "in progress", for example, a scammer is still messaging you, asking for another payment, or you have a pending transaction, stop communicating and do not send anything else, no matter what story they give you (a package "stuck at customs," a "processing fee," a request to keep it secret). If you gave a stranger remote access to your computer or phone, disconnect from the internet and shut the device down.
3. Change the passwords that matter most, right now
If the scam involved a login, an email, or a link you clicked, change the password on that account immediately, and on your email account, since email is often the master key to everything else (password resets for your bank, shopping accounts, and social media all flow through it). Use a strong, unique password you haven't used anywhere else.
What Should I Do Today (Within 24 Hours)?
Once the bleeding has stopped, shift into documentation and lockdown mode. These steps protect you from a second wave of damage, someone using your exposed information to open new accounts or break into other logins.
4. Document everything before you delete anything
Before you block a number, delete an app, or clear a chat thread, capture it. Evidence is easy to lose and hard to recover, and you'll need it for your bank, the police, and fraud reports.
- Screenshot texts, emails, chat messages, fake websites, and profiles
- Save transaction records, confirmation numbers, and wire/payment receipts
- Write down a timeline while it's fresh: how first contact happened, what was said, when and how much money moved, and any names, phone numbers, usernames, or account numbers the scammer used
This timeline will save you enormous time later, since you'll likely repeat this story to your bank, the police, and one or more federal reporting sites.
5. Freeze your credit if personal information was exposed
If the scam exposed sensitive personal information, your Social Security number, driver's license number, date of birth, or bank account and routing numbers, place a credit freeze (also called a security freeze). It's a free tool that blocks lenders from pulling your credit report, which in turn blocks scammers from opening new credit cards or loans in your name. It doesn't affect your existing credit score or accounts, and you can lift it temporarily whenever you need to apply for credit yourself.
You must freeze your file with all three major credit bureaus separately, freezing one does not freeze the others. It's free by federal law, and freezes placed online or by phone typically take effect within one business day:
- Equifax: equifax.com/personal/credit-report-services/credit-freeze, or 1-888-298-0045
- Experian: experian.com/help/credit-freeze, or 1-888-397-3742
- TransUnion: transunion.com/credit-freeze, or 1-800-916-8800
If your Social Security number or other identifying information was exposed, also start a claim at IdentityTheft.gov, the FTC's dedicated identity-theft recovery site. Unlike a general fraud report, IdentityTheft.gov builds you a free, personalized step-by-step recovery plan, generates the letters and affidavits creditors and agencies require, and gives you an official Identity Theft Report you can use to prove you were a victim.
What Should I Do This Week?
With the immediate danger contained, the rest of the week is about creating an official record, alerting the right agencies, and watching for lingering damage. Reports don't just help you, they help investigators connect your case to a wider pattern and, in some cases, actually take scammers down.
7. File a report with the FTC
Report the scam at ReportFraud.ftc.gov, the Federal Trade Commission's official fraud-reporting site (click "Report Now" and answer the guided questions), or call 1-877-382-4357. This report doesn't usually trigger an individual investigation, but it feeds a shared law-enforcement database that agencies across the country use to spot patterns and build cases against scammers. If identifying information like your Social Security number was involved, also use IdentityTheft.gov, it's built specifically for identity-theft recovery and produces the personalized plan described above.
8. File a complaint with the FBI's Internet Crime Complaint Center (IC3)
If the scam happened online, by phone, or through email or a messaging app, which covers most modern scams, file a complaint at IC3.gov (complaint.ic3.gov). IC3 is the FBI's dedicated intake center for internet-enabled crime. Give as much detail as you have, including screenshots, payment records, and any account names or crypto wallet addresses the scammer used, but don't include your Social Security number or date of birth on the form itself.
9. File a local police report
Contact your local police department (in person, by phone, or sometimes online) and file a report, even if you're sure they can't recover your money. A police report creates an official record with a report number, which your bank, insurer, or credit card company may require to process a fraud claim or reimbursement request. It's also useful documentation if you later need to dispute new accounts opened in your name.
10. Notify the company or platform that was impersonated or used
If a scammer pretended to be your bank, the IRS, Amazon, a delivery company, a dating app, or any real business, report it directly to that company's fraud or trust-and-safety team, most large platforms have a dedicated scam-reporting page. This can get fake accounts or listings taken down before they reach someone else, and some companies maintain their own fraud databases that help protect other customers.
11. Check your credit reports and account activity for new damage
Once your credit is frozen, pull your free credit reports at AnnualCreditReport.com and scan them for accounts you don't recognize. Keep checking your bank and card statements closely for several weeks, scammers sometimes make a small test charge before a larger one. If you spot new accounts or charges, dispute them with the creditor and the credit bureau in writing, and add them to your identity theft report.
Watch Out for Recovery Scams: Don't Get Scammed Twice
Here's something scam victims are rarely warned about: once you've been scammed, you become a target again. Scammers buy, sell, and trade so-called "sucker lists" of people who have already lost money, betting that a recent victim is desperate to get it back and easier to fool a second time.
A recovery scam (sometimes called a refund scam) is when someone contacts you, often out of the blue, by phone, text, email, or social media, claiming they can recover the money you already lost. They may pose as a law firm, a "fraud recovery specialist," a government agency, or even the FTC or FBI itself, sometimes sending fake badges or case numbers to look official. The catch is always the same: they ask for money up front, described as a retainer, processing fee, tax, or release charge, before they'll "release" your recovered funds. There is no recovered money. The fee is the scam.
Remember these facts: The real FTC does not have "agents," will never call you out of the blue about your case, and will never ask you to pay a fee, wire money, buy gift cards, or hand over crypto to get money back. Neither will the FBI, a legitimate bank, or a real law firm working on contingency. If anyone claiming to help you recover scam losses asks for money up front, hang up, do not engage, and report them the same way you reported the original scam.
It's Okay to Feel Shaken, You're Not Alone
Being scammed can trigger real shame, anxiety, anger, and even symptoms similar to trauma, trouble sleeping, replaying the moment over and over, not wanting to tell anyone. This reaction is common and it is not a reflection of your intelligence. Scammers are professionals who study human psychology and run these schemes full-time; many victims are smart, careful people who were targeted at a vulnerable moment.
Talk to someone you trust, a partner, a friend, a family member, sooner rather than later. Saying it out loud tends to shrink the shame and makes the practical to-do list above much easier to actually finish. If you want to talk to someone outside your circle, free and confidential support is available:
The AARP Fraud Watch Network Helpline (1-877-908-3360, Monday through Friday, 8 a.m. to 8 p.m. ET) is open to anyone, not just AARP members, and is staffed by trained volunteers who offer guidance and emotional support to scam victims, including access to free support groups.
If you're in significant financial distress or the exploitation is ongoing (for example, by a family member or someone with access to your finances), your local Adult Protective Services office or a victim services organization can also help, your police report or the FTC and IC3 confirmation pages can point you toward local resources.
Frequently Asked Questions
Sometimes, but it depends heavily on how you paid. Credit card payments generally have the strongest dispute protections. Debit card and bank transfers have more limited protections and tighter deadlines to report. Wire transfers, Zelle, Venmo, Cash App, gift cards, and cryptocurrency are the hardest to reverse because they're designed to move money quickly and are rarely recoverable once sent, but you should still ask your bank or payment provider about a recall or reversal immediately, since acting fast is your best shot.
Yes. Reporting an attempted scam at ReportFraud.ftc.gov or IC3.gov still helps investigators track patterns, and it may prevent someone else from becoming a victim of the same scheme.
It's strongly recommended, even for online-only scams. Some banks, credit card issuers, and insurers require a police report number before they'll process a fraud claim, and it creates an official record that can support future disputes.
ReportFraud.ftc.gov is the FTC's general scam and fraud reporting tool for any kind of scam. IdentityTheft.gov is specifically for identity theft, use it when personal identifying information such as your Social Security number was exposed, since it builds you a free, personalized recovery plan with pre-filled letters and forms.
Be extremely skeptical of anyone who contacts you first, especially if they ask for payment up front to "release" recovered funds. Legitimate law enforcement and consumer protection agencies do not charge victims a fee to investigate or recover money, and real attorneys pursuing recovery typically work on a contingency basis, not an upfront retainer demanded over the phone.
No. A credit freeze blocks new lenders from viewing your credit file at all, which is the strongest protection. A fraud alert instead requires lenders to take extra steps to verify your identity before opening new credit, it's easier to set up but offers a lower level of protection. You can use both, and both are free.
Recovering from a scam is easier when you understand how money, credit, and fraud protections actually work, before you need them. Visit financialconfidence.net/courses to keep learning practical, plain-English lessons on protecting your credit, spotting scams before they happen, and building the kind of financial footing that makes you a harder target next time.
Explore Free CoursesLet us know if this article was useful, it helps us know what to keep improving.
Thanks for letting us know!