You just got scammed. Here's what to do in the next hour
Scams work on smart people because they're built to rush you. If you've just realized you were scammed, the same thing is true in reverse: the faster you act, the more you can undo. Embarrassment is normal — skip it for now. Here's the order.
1. Stop the money, based on how you paid
Call the company that moved the money right now, using the number on the back of your card or on its official website — not a number the scammer gave you.
| How you paid | What to do |
|---|---|
| Credit card | Call the issuer, report fraud, and dispute the charge. You have strong federal protections here |
| Debit card or bank transfer | Call your bank's fraud line immediately. If a scammer used your card or account without you, federal law limits your loss when you report fast (as little as $50 within 2 business days). If you were tricked into sending the money yourself, protections are weaker — but banks sometimes still help, so report it anyway |
| Zelle, Venmo, Cash App, or another payment app | Report it in the app and call your bank. Recovery isn't guaranteed, but it's more likely the faster you report |
| Wire transfer | Call the sending bank immediately and ask it to recall the wire. Hours matter |
| Gift cards | Call the company that issued the card (the number on the back), say it was used in a scam, and ask for a refund. Keep the card and receipt |
| Cryptocurrency | Contact the exchange you used right away. Crypto is very hard to recover, but report it anyway |
| Check | Call your bank to stop payment if it hasn't cleared |
2. Lock down anything they could reach
- Did you give them a password? Change it immediately — and on any other account that used the same one. Turn on two-factor authentication
- Did you let them onto your computer (a "tech support" call)? Disconnect it from the internet, uninstall any remote-access program they had you install, and run a security scan. Change passwords from a different, clean device
- Did you give them your Social Security number or ID? Go to IdentityTheft.gov for a personal recovery plan, and freeze your credit at all three bureaus — it's free
- Did you give them a one-time code? Assume they got into that account. Change its password and check its recent activity and settings
3. Report it
- ReportFraud.ftc.gov — the FTC's central scam database, used by law enforcement nationwide
- IC3.gov — the FBI's Internet Crime Complaint Center, for scams that happened online
- Your state attorney general's consumer protection office
- The platform where it happened — the marketplace, dating site, or social network
Reports rarely get your money back directly, but they build the cases that shut scam operations down — and a report number helps with bank disputes.
4. Watch for the second scam
Scam victims get targeted again, by "recovery" services promising to get your money back for an upfront fee — sometimes claiming to be from the FTC, the FBI, or a law firm. Government agencies never charge to recover money, and no legitimate recovery service can guarantee results. Anyone asking for a fee to get your money back is the next scam.
5. Save the evidence
Screenshots of messages, the phone numbers and email addresses they used, transaction receipts, and dates. Your bank and any police report will ask for it.
Quick reference
- Call your bank or card company now — use the number on your card, not one from the scammer
- Change any password you shared, and turn on 2FA
- Gave your SSN? IdentityTheft.gov + freeze your credit
- Report to ReportFraud.ftc.gov and IC3.gov
- Anyone charging a fee to "recover" your money is scamming you again