๐Ÿ›ก๏ธ Scams & Spoofing
Text size:
โ€น Back to the guide

If it already happened

Move quickly, in this order. Feel whatever you're feeling afterwards โ€” the next hour matters more.

Before anything else

This was not your fault, and being embarrassed will cost you money.

These operations are run by organized, full-time professionals with scripts refined on thousands of people. Doctors fall for them. Bank managers fall for them. The only thing that helps now is speed, and speed requires telling someone.

The first hour

  1. Call your bank on the number on the back of your card. Say the words "I think I've been scammed" โ€” that phrase routes you to the right team. Ask them to freeze the card or account, reverse anything pending, and put a note on the file.
  2. If you sent a bank transfer or used a payment app, tell them immediately and ask them to attempt a recall. Ask directly whether you are eligible for reimbursement, and get the claim reference number.
  3. Then file at ic3.gov the same day. Not next week โ€” see the box below. This is the one report that can actually get your money back.
  4. If you bought gift cards, keep the cards and the receipts and call the number for that brand of card right away. Funds are sometimes still frozen if the scammer hasn't drained them yet.
  5. If someone was on your computer, disconnect it from the internet and shut it down. Assume anything you were logged into is compromised, and do the next step from a different device โ€” a phone is fine.
  6. Change your email password first, before your bank's. Email is the master key: whoever holds it can reset everything else. Then change any password you reused elsewhere.
  7. Switch on two-factor authentication for email and banking while you're in there. It is the single best thing you'll do all week.
If real money left your account, this is the one that matters

File at ic3.gov within roughly 72 hours.

The FBI's Internet Crime Complaint Center runs a Recovery Asset Team that can work with banks to freeze a fraudulent transfer before the money is gone โ€” published figures put their freeze rate somewhere around 58% to 74% depending on the year. But it hinges almost entirely on speed. After about three days the odds fall away sharply, because the money has been moved on and split up. Call your bank first, then file. Hardly anyone knows this exists, and it is the only report that can get your own money back โ€” see Does reporting help? for what all the others actually do.

The first day or two

  1. Freeze your credit at all three bureaus โ€” Equifax, Experian, and TransUnion. It's free, it takes minutes at each, and it stops anyone opening new accounts in your name. You can lift it temporarily whenever you need to.
  2. Report it. Reporting rarely recovers money directly, but it builds the case that gets these operations shut down, and some banks ask for a report number:
    • reportfraud.ftc.gov โ€” the Federal Trade Commission, for any scam.
    • IdentityTheft.gov โ€” if personal details were taken. It generates a personalized recovery plan and the letters you'll need.
    • ic3.gov โ€” the FBI's internet crime center, for anything online, and especially where real money was lost.
    • Your local police โ€” for a report number. Banks and insurers often want one.
  3. Call the AARP Fraud Watch Network Helpline: 877-908-3360. Free, and open to anyone โ€” you don't have to be a member. Trained volunteers talk you through what to do next, and they are notably kind about the part where you feel foolish. Weekdays, 8 a.m. to 8 p.m. Eastern.
  4. Get the computer properly cleaned if anyone had remote access, by a repair shop or a trusted person. Don't just delete the program they installed.
  5. Write down what happened while it's fresh: times, numbers, names, amounts, what was said. You'll be asked more than once, and memory fades fast.
โš ๏ธ Now brace for the second wave โ€” this one catches people twice Within days or weeks, someone will contact you offering to recover the money you lost. They may claim to be a lawyer, a "fund recovery" firm, a fraud investigator, or even the police. They will know real details about what happened to you, because victim lists are sold on.

It is the same people, or their colleagues, coming back for the rest. Nobody who is legitimate charges an upfront fee to recover scam losses. Recovery goes through your bank, the official reporting sites above, and nowhere else. Being scammed once makes you a target, not a fool.

In the weeks after

Worth saying plainly

Nobody who loves you will think less of you for this.

The shame is manufactured. It's the last tool in the kit, and it exists for one reason โ€” to keep you quiet long enough for the money to be gone. Make the call.
โ€น Back to the guide