What to Do If You Got Scammed
If you just realized you fell for a scam, breathe. You're not the first and you're not stupid. Modern scams target millions of people and use professional manipulation tactics. What matters now is the next few hours.
Here's the exact action plan, in order of urgency.
Right now, in order
- Stop all communication with the scammer
- Disconnect any device they had remote access to
- Call your bank from a number on the back of your card
- Change your most important passwords from a different device
Stop talking to the scammer
Don't reason with them. Don't try to get your money back from them. Don't fall for "We're sending you a refund, just confirm your bank info." That's a follow-up scam.
Block their number and email. Hang up if they call. The scammer will move on to the next target if you stop responding.
If they had remote access to your computer
- Disconnect from internet immediately (unplug ethernet or turn off Wi-Fi)
- Don't use that computer for anything sensitive until it's been cleaned. Assume they installed remote access tools or keyloggers.
- From a DIFFERENT device (phone, tablet, another computer), change your email, bank, and social media passwords
- Plan to have the computer professionally cleaned or factory-reset. A simple antivirus scan isn't enough; scammer tools often hide deep.
If you gave them payment info
Credit card: call the number on the back of the card. Tell them you've been scammed. They can dispute the charge. Most credit cards have strong fraud protection. Easiest to recover.
Bank account (ACH transfer or check): call your bank immediately. Recovery is harder than credit card but sometimes possible if you act within 24 hours.
Wire transfer: very difficult to recover. Call your bank immediately and the receiving bank if you know it. After the money clears (1-3 business days), recovery is nearly impossible.
Gift cards: almost impossible to recover, but try anyway. Call the gift card company (Apple, Google Play, Target, Walmart) immediately with the card numbers. Sometimes they can freeze before redemption.
Cryptocurrency: usually impossible to recover. Transactions are irreversible.
Zelle, Venmo, Cash App, PayPal Friends & Family: These have weaker fraud protection than credit cards. Contact the platform and your bank, but recovery is uncertain.
Lock down your accounts
From a different device than the one the scammer touched:
- Change your email password first (email controls password resets for everything else)
- Change bank and credit card passwords
- Change any password you typed during the scam
- Enable two-factor authentication on every important account
- Check "Devices signed in" on Google, Apple, and Microsoft accounts. Sign out unfamiliar devices.
- Review recent activity on email and bank for things you didn't do
File reports (even if recovery seems unlikely)
- Local police: non-emergency line. They probably can't solve it, but a report number helps with bank disputes and insurance.
- FTC: reportfraud.ftc.gov
- FBI's IC3 (Internet Crime Complaint Center): ic3.gov
- State Attorney General
- If your identity was stolen: identitytheft.gov has a full recovery plan
Protect against identity theft
If the scammer got personal info (Social Security number, driver's license, address), freeze your credit at all three bureaus. It's free and stops anyone from opening new credit in your name.
You can unfreeze later if you need to open new credit. Freezing is the most effective single thing you can do.
If you can't sleep
I get it. Sleep matters. So does action.
Do the urgent stuff tonight: stop talking to scammer, disconnect compromised device, call your bank, change email password. The rest can wait until tomorrow.
The emotional part
You may feel embarrassed. Don't. Scammers manipulate people for a living. Lawyers, doctors, professors, and even cybersecurity experts have fallen for these. The emotional aftermath is real but temporary.
Tell at least one trusted person (family member, friend). Don't keep it secret. Scammers count on shame keeping you quiet so you don't seek help and so they can target you again.
How to avoid the next one
- Never give remote access to anyone you didn't initiate contact with
- Never pay anyone with gift cards. None. Ever.
- Hang up on any call about "account problems," tax issues, or virus warnings
- Don't click links in emails about subscriptions or accounts. Go to the website directly.
- If something feels off, it almost certainly is. Trust that feeling.
Video walkthrough
Video by Kitboga on YouTube
Need help right now?
If you just realized you've been scammed and don't know what to do first, send us a quick email. We've helped clients through every kind of scam recovery. No judgment.
Did this article help someone you love?
Share it with anyone in your family who needs it. Tips also welcome.