First, a few honest points
Realising you have been scammed is stressful, and many people feel embarrassed or angry. Scams are designed by people who do this repeatedly, and they work on careful, intelligent people. Feeling bad is common, but it should not stop you from acting, because speed often matters.
It is also important to be realistic. Some money can sometimes be recovered, especially when action is taken quickly and the payment method allows disputes. In other cases it cannot be, and nobody can promise a result. The steps below are general; the right details depend on what was lost, where you live and which providers are involved.
Step 1: Stop contact and stop paying
Do not reply to the scammer again, and do not send further money, even if you are told it will release earlier payments or avoid legal trouble. Requests for “fees” to recover funds are a common continuation of the original scam. Block the number or account once you have saved what you need as evidence.
If you are on a call, hang up. If you gave someone remote access to your device, disconnect it from the internet straight away.
Step 2: Contact your bank or payment provider
If money moved, contact your bank, card issuer or payment service immediately, using the number on your card or the official app rather than any number given by the scammer. Explain what happened and ask what can be done. Depending on the method and the rules where you live, they may be able to:
- Try to stop or recall a transfer that has not been completed.
- Dispute a card payment.
- Block or replace a compromised card.
- Watch for or flag further suspicious activity.
Gift card issuers and money-transfer services also have fraud contacts, and it can be worth contacting them quickly if you paid that way, although success is uncertain.
Step 3: Secure your accounts
If you shared a password, a code or personal details, or clicked a link and entered anything:
- Change passwords, starting with email, since email can reset many other accounts, then banking and anything that used the same password. Do this from a device you trust.
- Use unique passwords. A password manager makes it practical to have a different one for every account.
- Turn on two-factor authentication where it is available, or move to passkey sign-in where a service supports it.
- Check account settings, such as forwarding rules, recovery phone numbers and connected devices, for changes you did not make.
- Sign out of other sessions if the service offers it.
If you do not know which accounts are affected, work from the most valuable and most connected ones outward.
Step 4: Check your device
If you installed anything at the scammer’s request, or opened an attachment, treat the device as possibly compromised. Remove remote-access software, install pending software updates, run a reputable security scan and consider asking a trusted technician for help. Before major cleaning, back up important files, since a full reset can erase them; recovering them afterward is often a matter of data recovery from a backup.
If you used a work device, tell your employer’s IT or security contact promptly.
Step 5: Gather and keep records
Save screenshots, messages, emails, phone numbers, website addresses, payment receipts, account numbers and dates. Write down a short timeline while it is fresh. This helps your bank and any authority that investigates, and it helps you if details become confusing later.
Step 6: Report it
Report the scam to the appropriate bodies in your country. This commonly includes the police or a national fraud-reporting service, a consumer protection agency and, where relevant, the platform where the scam took place, such as a social network, marketplace or email provider. Reports may not lead to individual outcomes, but they help investigators spot patterns and take down fraudulent sites and accounts. Look up your country’s current official reporting channel rather than trusting a link in an unsolicited message.
If identity documents or personal details were shared, ask about credit monitoring or fraud alerts with the relevant services where you live, and be alert to stolen identity data being used later.
Step 7: Watch for follow-ups
People who have been scammed are often targeted again. Typical follow-ups include:
- Someone claiming they can recover your lost money for an upfront fee.
- Callers pretending to be investigators, lawyers or your bank.
- Fresh phishing messages that use details from the first incident, sometimes combined with data from data breaches.
- Further approaches from the same scammer under a different name.
Treat unexpected recovery offers with suspicion, particularly if payment is required first. Legitimate authorities do not charge to return stolen funds.
Step 8: Look after yourself
Financial loss and deception can be distressing. Talking to a friend, a family member or a support service helps. If a large amount was lost, or you are feeling overwhelmed, consider contacting a charity or free advice service in your area. Many exist specifically for people affected by fraud, including romance scams and investment fraud.
Preventing a repeat
After the immediate steps, it is useful to reflect on what made the scam convincing without blaming yourself. Often it was urgency, secrecy or an unusual payment method. A pre-agreed personal rule, such as never acting on an inbound request without checking through a separate route, can interrupt the pattern next time. How online scams work gives the general structure, and sharing what you learned with relatives can protect them as well.