You got scammed — here’s what to do right now
If you’ve realized you were scammed — whether you lost money, gave away personal information, or both — the most important thing to know is this: you can still take action. The faster you move, the better your chances of limiting the damage, and in some cases, recovering what was lost.
This guide gives you a clear, prioritized plan. You don’t need to do everything at once. Start with the immediate steps, then work through the rest at your own pace. Getting scammed happens to people every day — what matters now is what you do next.
Step 1: Stop all contact with the scammer
If you’re still in communication with the person who scammed you, stop immediately. Don’t confront them, don’t try to negotiate, and don’t respond to follow-up messages — even if they claim to be “helping” you recover your money. Continued contact gives scammers more opportunities to manipulate you.
Block their phone number, email address, and social media profiles. If the scam happened through a marketplace or platform, report and block them through the platform’s tools. Do not accept any incoming calls or messages from unfamiliar numbers for the next few days — scammers frequently follow up using different numbers.
Why this matters: A common tactic is the “recovery scam,” where someone contacts you claiming they can get your money back — for a fee. This is almost always another scam. Legitimate recovery doesn’t require upfront payment.
Step 2: Secure your financial accounts
Your next priority is protecting your money. The specific steps depend on how you paid the scammer.
If you sent money through a bank transfer or Zelle
Call your bank’s fraud department immediately using the number on the back of your debit card — not a number from an email or text. Tell them you were the victim of a scam and ask them to:
- Flag the transaction as fraudulent
- Freeze or monitor your account for additional unauthorized activity
- Issue a new debit card if your card number may be compromised
Bank transfers and Zelle payments are difficult to reverse because the money moves instantly. However, reporting quickly increases your chances. Some banks have policies that may cover certain types of fraud.
If you paid with a credit card
Contact your credit card company and request a chargeback — a formal dispute of the transaction. Credit cards offer stronger fraud protection than most other payment methods. Explain that you were scammed, provide any evidence you have (screenshots, emails, transaction receipts), and ask the company to reverse the charge.
If you sent gift cards
Call the gift card company (the number is usually on the back of the card) and report that the card was used in a scam. If the funds haven’t been redeemed yet, the company may be able to freeze them. Unfortunately, gift cards are one of the hardest payment methods to recover because scammers drain them quickly. This is exactly why scammers ask for gift cards, crypto, and Zelle — these methods are hard to trace and nearly impossible to reverse.
If you sent cryptocurrency
Cryptocurrency transactions are generally irreversible. Report the scam to the exchange you used (Coinbase, Cash App, etc.) and provide the wallet address you sent funds to. While recovery is rare, reporting helps law enforcement track scam operations.
If you sent a wire transfer
Contact your bank and the wire transfer service (Western Union, MoneyGram) immediately. If the money hasn’t been picked up yet, it may be possible to stop or reverse the transfer. File a fraud claim with the transfer service as well.
Step 3: Protect your personal information
If the scammer obtained personal information — your Social Security number, date of birth, address, or login credentials — you need to lock things down to prevent identity theft.
Change your passwords
Change the password for any account the scammer may have access to. Start with your email (since password reset links go there), then banking, social media, and any other accounts that use the same or similar passwords. Use a unique password for each account. For a complete walkthrough, see our guide on how to secure your online accounts.
Enable two-factor authentication
Turn on two-factor authentication (2FA) — an extra verification step using a one-time code sent to your phone — on every important account. This means even if a scammer has your password, they can’t get in without your phone.
Freeze your credit
If the scammer has your Social Security number, freeze your credit with all three major bureaus. This is free and prevents anyone from opening new accounts in your name:
- Equifax: equifax.com/personal/credit-report-services/credit-freeze/
- Experian: experian.com/freeze/center.html
- TransUnion: transunion.com/credit-freeze
A credit freeze does not affect your credit score. You can temporarily lift it whenever you need to apply for credit. For a complete guide on what to do when your Social Security number is compromised, see our article on what to do if a scammer has your Social Security number.
Set up fraud alerts
Place a fraud alert on your credit file by contacting any one of the three bureaus (they’re required to notify the other two). A fraud alert tells lenders to verify your identity before opening new accounts. It lasts one year and can be renewed.
Step 4: Report the scam
Reporting won’t always get your money back, but it’s still important. Reports help law enforcement identify patterns, shut down scam operations, and warn others. Here’s where to report:
Federal agencies
- FTC (Federal Trade Commission): ReportFraud.ftc.gov — This is the primary federal reporting portal for scams of all types.
- FBI’s IC3 (Internet Crime Complaint Center): IC3.gov — Report internet-based scams, especially those involving significant financial loss.
Your state attorney general
Most state attorney general offices have a consumer protection division that accepts scam reports. Search “[your state] attorney general consumer complaint” to find the filing process.
The platform where the scam happened
If the scam happened on a specific platform — Facebook Marketplace, Instagram, a dating app, or a payment service — report it through that platform’s fraud reporting tools. Platforms use these reports to ban scam accounts and improve detection.
Your local police
Filing a police report creates an official record that can be useful for insurance claims, bank disputes, and identity theft recovery. Bring any evidence you have: screenshots, transaction records, emails, and text messages.
For a comprehensive list of reporting resources organized by scam type, see our guide on where to get help if you’ve been scammed.
Step 5: Document everything
Before you delete anything, save evidence. You may need it for bank disputes, police reports, or insurance claims.
- Take screenshots of all messages, emails, and communications with the scammer
- Save transaction records — bank statements, payment confirmations, wire transfer receipts
- Note dates and times of every interaction
- Save the scammer’s contact information — phone numbers, email addresses, social media profiles, website URLs
- Keep copies of any files or links the scammer sent you (don’t open them again — just save the record)
Store this documentation in a dedicated folder on your computer or phone. It becomes your reference file for every report you file and every dispute you initiate.
Step 6: Watch for follow-up scams
This is a step many people miss. Once you’ve been scammed, you’re on scammers’ radar — and they may come back with new tactics.
Recovery scams are the most common follow-up. Someone contacts you — by phone, email, or social media — claiming they can help you recover your lost money. They might claim to be from a government agency, a law firm, or a “fraud recovery specialist.” They’ll ask for an upfront fee. This is always a scam.
Other follow-up tactics include:
- Fake calls from your “bank” asking you to verify account details
- Emails claiming there’s been “suspicious activity” on your account (using the panic from your recent experience)
- Messages from people claiming to be other scam victims who “found a way to get their money back”
The rule is simple: if someone contacts you about the scam — and you didn’t initiate the conversation — it’s almost certainly another scam. Legitimate agencies don’t charge fees for assistance, and they don’t call you out of the blue.
How long does recovery take?
There’s no single timeline. Credit card chargebacks can take 30-90 days. Bank fraud investigations vary by institution. Credit freezes and fraud alerts take effect within a day. Identity theft recovery can take weeks to months depending on what information was compromised.
The most important thing is to start the process. Every step you take — even if it doesn’t result in immediate recovery — reduces the scammer’s ability to cause further harm.
Moving forward
Getting scammed does not mean you were careless or foolish. Scammers are professionals — they do this every day, and they’re good at it. The tactics they use are designed to bypass normal caution by creating urgency, exploiting trust, and mimicking legitimate organizations.
What you do now — securing your accounts, reporting the scam, and staying alert for follow-ups — is what puts you back in control. And the experience you’ve gained, as unwelcome as it was, makes you harder to scam in the future.
Related resources
- Where to Get Help If You’ve Been Scammed — A comprehensive directory of reporting agencies, recovery services, and support resources organized by scam type and payment method.
- What to Do If a Scammer Has Your Social Security Number — Step-by-step instructions for protecting your identity when your SSN has been exposed.
- How To Secure Your Online Accounts — Lock down your email, banking, and social media with strong passwords, two-factor authentication, and account monitoring.