If you’re reading this while your heart is still pounding, take a breath — you’re doing the right thing by looking up what to do if scammed instead of panicking or giving up. Scammers count on speed: they want your money moved, your accounts drained, and your evidence deleted before you can think straight. The good news is that the first 24 hours after a scam are also the most powerful hours for fighting back. Money can sometimes be recalled or frozen, accounts can be locked down, and the evidence you preserve today becomes the foundation of every report and dispute you file tomorrow.
This guide walks you through exactly what to do in the first 24 hours after a scam — step by step, in order of urgency. It’s written for everyone: card payments, bank transfers, payment apps, gift cards, and crypto.
Step 1: Stop all contact with the scammer (first 10 minutes)
Do not reply, do not argue, and do not send “one more payment” to unlock your money. Any further contact only gives the scammer more chances to manipulate you or extract details. Block their number, email address, and social media profiles — but don’t delete the conversation history yet (see Step 4 on evidence).
If the scammer is pressuring you to install remote-access software, approve login requests, or hand over one-time codes “to help fix the problem,” stop. Legitimate companies never resolve problems this way, and this is a classic escalation move.
Step 2: Call your bank or payment provider immediately (first hour)
This is the single most time-sensitive step when deciding what to do if scammed. Call the fraud department of your bank, card issuer, or payment service using the number on the back of your card or on their official website — never a number the scammer gave you. Tell them, plainly: “I was scammed. I need to dispute a payment I authorized under false pretenses.”
Different payment methods have different rescue windows, so ask specifically about these options:
- Credit or debit card: Ask the issuer to dispute the charge or issue a chargeback. Card networks have formal dispute processes for transactions made under deception.
- Bank or wire transfer: Ask whether a recall of the transfer is possible. The sooner the request goes in, the better the chance the receiving bank can still freeze the funds before they move on.
- Payment apps (Zelle, Cash App, Venmo, PayPal and similar): Report the payment as fraud inside the app and by phone. Some services can reverse or hold transactions that haven’t settled, and the report creates a record even when reversal isn’t possible.
- Cryptocurrency: Contact the exchange or wallet provider immediately. Some exchanges freeze accounts tied to suspicious transfers when notified quickly — but be realistic that crypto is extremely hard to recover once confirmed.
- Gift cards: Call the card issuer’s customer service number (printed on the card) and ask whether the balance can be frozen. If the PIN or code was never spent, you may get lucky.
Write down the name of every person you speak to, the time of the call, and any reference or case number you’re given. You’ll need these for every report you file next.
Step 3: Lock down compromised accounts (hours 1–3)
Scams rarely stop at the first payment. If you shared a password, an email address, your Social Security number, ID documents, or banking details, assume the scammer will try to use them. Close those doors now:
- Change passwords for your email, banking, and any accounts that share the same credentials — starting with your email, since it’s the key to password resets everywhere.
- Turn on two-factor authentication (2FA) on every financial and email account, preferably with an authenticator app rather than SMS codes.
- Place a credit freeze with all three major credit bureaus — Equifax, Experian, and TransUnion. A credit freeze blocks lenders from pulling your credit report, which stops identity thieves from opening new accounts in your name. According to the FTC’s consumer guidance, credit freezes are free for anyone to place and lift, and they don’t affect your credit score. They stay in place until you choose to lift them, so they won’t get in your way when you’re ready to apply for credit again.
- Check recent account activity for logins, address changes, or transactions you don’t recognize, and report anything suspicious to the provider.
A freeze doesn’t stop fraud on accounts you already hold, so keep monitoring your existing statements — but it is one of the strongest free tools available against follow-up identity theft.
Step 4: Preserve the evidence (hours 2–6)
Before you delete anything “just to forget about it,” save everything. Strong documentation dramatically improves the quality of your reports and any bank dispute:
- Screenshots of the scammer’s website, ads, profile pages, emails, texts, and chat conversations (with visible dates and full URLs where possible)
- Transaction records: dates, amounts, payment method, account numbers involved, transaction IDs or reference numbers, and the receiving bank or wallet address
- The scammer’s phone numbers, email addresses, account usernames, and website addresses
- A written timeline of what happened, while the details are fresh
When you file a report with the FBI’s Internet Crime Complaint Center, you’ll be asked to include identifying information about the scammer, the methods of communication they used, your financial transaction information, and a description of how contact was initiated and how you were instructed to pay. Having this organized in advance turns a painful process into a manageable one.
Step 5: File official reports (hours 2–24)
Your bank can try to stop the money from moving. Only official reports create the legal record that supports disputes, investigations, and in some cases tax treatment or insurance claims later. The Consumer Financial Protection Bureau advises victims of scams to contact the FBI, the FTC, their state attorney general, and their local police. Here’s how, in practical order:
- Federal Trade Commission — ReportFraud.ftc.gov. The FTC’s portal lets you report any scam, fraud, or bad business practice. You click “Report Now,” answer questions about the scam type, how you paid, and how much you lost, and describe what happened in your own words. You’ll get a report number plus tips on next steps. Your report helps the FTC build cases against scammers and alerts other agencies to trends.
- FBI Internet Crime Complaint Center — www.ic3.gov. IC3 is the FBI’s intake portal for internet-enabled crime. Type the address directly into your browser (don’t follow links from emails or messages) and file a complaint with as much detail as you can. If you’re 60 or older and need help filing, the DOJ Elder Justice Hotline at 1-833-FRAUD-11 can assist.
- State attorney general and local police. Use the National Association of Attorneys General website to find your state office, and contact your local police or sheriff’s office on their non-emergency line. A local police report number can be useful when your bank asks for supporting documentation.
If your personal information was exposed, the FTC’s IdentityTheft.gov site builds you a personalized recovery plan based on exactly what was taken.
Step 6: Warn the people around you (within 24 hours)
Scammers often target a victim’s contacts next — pretending to be you, or running the same trick on your family and friends. Send a short, honest message: “I was scammed today by [brief description]. If anyone contacts you about it, don’t engage — block and report.” If you lost access to an email or social media account the scammer might use to impersonate you, ask close contacts to watch for suspicious messages.
This step protects other people and reduces your shame spiral. You will almost always find that someone you tell has a near-miss story of their own.
What NOT to do in the first 24 hours
Knowing what to do if scammed also means knowing what to avoid. These mistakes turn a bad situation into a worse one:
- Don’t pay a “recovery agent.” This is the cruelest follow-up scam of all: someone contacts you claiming they can recover your money — for an upfront fee. The FBI warns explicitly that IC3 will never ask for payment to recover lost funds and will never refer you to a private company that charges for recovery. Anyone asking for money to get your money back is a scammer.
- Don’t delete evidence. Don’t erase messages, delete emails, or clear your call history until everything is documented and reported.
- Don’t take the scammer’s “second chance” offer. Offers to refund you “if you just pay a processing fee” or “reinvest to unlock your withdrawal” are extensions of the same scam.
- Don’t post your personal details publicly. Venting is fine, but posting your full account numbers, transaction IDs, or ID documents on social media creates new risks.
- Don’t follow links in unexpected messages about your case. Spoofed IC3 and bank websites exist. Always type addresses yourself or use numbers from your card or statements.
Red flags that the damage is spreading
Watch for these warning signs in the days after the scam — each one means you should act again immediately:
- Login alerts, password-reset emails, or 2FA codes you didn’t request
- New credit inquiries or unfamiliar accounts on your credit reports
- Friends or family reporting strange messages “from you”
- Your bank card being declined for reasons you don’t understand
- Unexpected packages, bills, or tax documents arriving in your name
- The original scammer contacting you from a new number or profile with a “recovery” offer
How to protect yourself going forward
Once the urgent first 24 hours are handled, build the defenses that make a repeat attack much harder: keep that credit freeze in place until you need credit, review your credit reports regularly, keep 2FA on every financial account, and set up transaction alerts from your bank so unusual activity reaches you in minutes, not weeks. Make reporting a reflex — a scam reported to the FTC or IC3 is data that helps take down entire networks, even if your own case can’t be solved individually. And remember the core of what to do if scammed: act fast, document everything, report widely, and never pay anyone who promises to undo it for a fee.
Sources
- Consumer Financial Protection Bureau — “Who do I contact for help with a scam or fraud?” (last reviewed Aug 28, 2026): https://www.consumerfinance.gov/ask-cfpb/who-do-i-contact-for-help-with-a-scam-or-fraud-en-1777/
- Federal Trade Commission — “How To Report Fraud at ReportFraud.ftc.gov”: https://www.ftc.gov/media/how-report-fraud-reportfraudftcgov
- FBI Internet Crime Complaint Center — “FBI Warns of Scammers Impersonating the IC3” (PSA, 2026): https://www.ic3.gov/PSA/2026/PSA260720
- FTC Consumer Advice — “Freezing? Maybe freeze your credit, too” (2025): https://consumer.ftc.gov/consumer-alerts/2025/01/freezing-maybe-freeze-your-credit-too
Last reviewed: October 2026
This article is for education only and is not financial or legal advice.