<aside>

You do not need to be certain it was a scam before asking for help. Act quickly, without blaming yourself.

</aside>

start here

1. Stop contact with the suspected scammer. Do not send more money, approve another request, or let them “fix” the problem.
2. If money moved or an account is at risk, call the affected bank, card issuer, payment service, or investment custodian immediately. Use the number on a statement, card, or official app. Explain what happened and ask whether they can stop or recall the payment and secure the account. Recovery is not guaranteed.
3. Call your financial advisor using a number you already trust if financial accounts, documents, or messages involving your advisor may be affected. Do not wait for your advisor before contacting the institution that holds the money.

choose what happened

I clicked a link or scanned a QR code

Close the page. A click or scan alone does not prove an account was compromised. Do not revisit it. If you entered information, approved a login, opened a download, or installed software, follow the relevant steps below.

I shared a password or approved a login

Use a different, trusted device if yours may be compromised. Open the provider’s official app or website, change the password, sign out other sessions, and review recovery details and authentication settings. Change reused passwords elsewhere. If locked out, use the provider’s official recovery process.

I opened a suspicious file, installed software, or allowed remote access

Disconnect the affected device from the internet, including Wi-Fi, Ethernet, and cellular data where applicable, to interrupt remote access. Use another device or phone to contact your financial institutions. Seek help from a trusted technician or the device manufacturer before using the affected device for sensitive activity again.

I shared identity information

Use IdentityTheft.gov for recovery steps. Consider a credit freeze with each of the three major credit bureaus. A freeze does not secure existing bank or investment accounts.

preserve and report

• Keep messages, receipts, transaction details, usernames, and a brief timeline when safe. Do not delay urgent calls to collect everything.
• Report scams at ReportFraud.ftc.gov and internet-related crime at IC3.gov. Reports do not replace contacting your bank.
• If anyone threatens immediate physical harm, call 911.

<aside>

Beware of a second scam. Someone offering guaranteed recovery in exchange for an upfront payment may be targeting you again.

</aside>

reliable resources