After You've Been Scammed: A Clear Action Plan
Photo credit: GadgetLite.net | All Things Tech
In this article
If you've handed over details or money to a scammer, these are the immediate steps to take to limit the damage.
Key Takeaways
- Act within the first hour — speed is your most powerful tool after a scam.
- Contact your bank immediately if you shared any financial details or made a payment.
- Change passwords on every account that shares credentials with the compromised one.
- Reporting a scam helps authorities track patterns, even if your money isn't recovered.
- Emotional support is available — being scammed is not a reflection of intelligence.
Why the First Hour Matters Most
Scammers move quickly. The moment you realize you've handed over personal details, login credentials, or money to a fraudster, a countdown begins. Financial institutions can sometimes freeze or reverse transactions if alerted promptly. Criminals also use stolen credentials within minutes to access other accounts, take out credit, or sell your data. The steps below are ordered by urgency — work through them as fast as you realistically can.
If you're unsure whether what happened qualifies as a scam, ask yourself: Were you pressured to act fast? Did someone contact you unexpectedly and ask for payment or personal details? Did something feel slightly off? If yes, treat it as a scam and act accordingly. You can reassess later — hesitating now costs more than acting in error.
If You Shared Your Social Security Number
Sharing your Social Security number (SSN) with a scammer puts you at serious risk of identity theft. Place a credit freeze at all three major bureaus — Equifax, Experian, and TransUnion — as soon as possible. A freeze is free by law and prevents new credit from being opened in your name. You can lift it temporarily whenever you need to apply for credit yourself.
Tools You'll Need Nearby
Before you start, gather the following so you're not searching mid-process:
Your bank's fraud contact number
Call immediately to freeze accounts and dispute fraudulent transactions.
Government ID and Social Security number
Required when placing a fraud alert or credit freeze with a credit bureau.
Password manager
Generate and store unique, strong passwords for every account you need to update.
Authenticator app (e.g. any TOTP-based app)
Set up two-factor authentication that doesn't rely on text messages, which can be intercepted.
Screenshot tool
Capture and save all evidence of the scam before communications disappear.
FTC Report Fraud page (ReportFraud.ftc.gov)
Submit an official fraud report to the Federal Trade Commission.
Device security/antivirus software
Scan your device for malware or keyloggers that may have been installed via a scam link.
Your Step-by-Step Action Plan
Work through these groups in order. The first group addresses financial exposure — the most time-critical. Later groups cover accounts, devices, and follow-up. Bookmark this page so you can return to track your progress.
Financial Damage Control
Account & Password Security
Device & Software Checks
Reporting & Documentation
Once you've secured your accounts, focus on reporting. Many people skip this step out of embarrassment, but it genuinely matters — read more in our guide on why and how to report a scam.
Watch Out for Recovery Scams
After being scammed, some people are targeted a second time by 'recovery services' that claim to retrieve lost money for an upfront fee. These are nearly always fraudulent. Legitimate help comes from your bank, law enforcement, and government agencies — never from unsolicited contacts offering recovery for payment.
Don't Delete Evidence Yet
It's tempting to delete every trace of the scam conversation, but those messages, emails, and screenshots are your evidence. Save everything to a secure location first — you'll need them when filing reports with the FTC, IC3, or your bank's fraud team.
Rebuilding Your Account Security
After the immediate crisis is contained, spend time strengthening your baseline security. If a scammer had access to one account, assume they tested the same credentials elsewhere. Use a password manager to generate unique passwords for every service — no two accounts should share a password.
If you're not sure how to set up recovery options so you can regain access quickly if this happens again, our article on account recovery done right covers backup codes, recovery emails, and trusted contacts in plain terms. For broader questions about protecting personal data inside apps and software, the App Privacy & Safety hub is a useful starting point.
Finally, be kind to yourself. Research consistently shows that scammers deliberately exploit trust, urgency, and emotion — these are engineered manipulations, not personal failures. Speaking to a trusted friend or a consumer advocacy helpline can help you process what happened without shame.
This article is for informational purposes only. If you have experienced financial loss, contact your financial institution and relevant authorities directly for guidance specific to your situation.
Author
Cyber Security Editorial Team
Cyber Security Editorial Team is the collective byline for our editorial team and contributor network. Articles published under this byline or an editorial pen name are researched, written, and reviewed according to our editorial standards for clarity, consistency, and independence before publication.
View all articles →