If you think you’ve been scammed, learn the right order of steps to take in the next few minutes and hours — cutting off the scammer, following the money based on how you paid, securing your accounts, and reporting it to the agencies that can actually help.
Scammed? Do This First to Protect Your Money
You’ve Been Scammed: The Right Order of Steps to Protect Your Money
If you think you may have been scammed, the next few minutes matter. The wrong move can make the damage worse, especially if the scammer is still texting, calling, asking for another payment, or claiming they can help you get your money back.
One step might help you stop a payment. Another misstep could leave your bank account, credit, passwords, or personal information exposed. The good news is that there’s a right order to follow: cut off the scammer, follow the money, secure your accounts, and report it through the right channels.
This guide walks through that order step by step, including what to do based on exactly how you paid, and what to watch for afterward so you don’t get targeted a second time.
Being Scammed Does Not Mean You Were Careless
Many scams are designed to create panic, trust, pressure, or confusion in a very short amount of time. Maybe someone pretended to be your bank, a delivery company, a government agency, tech support, a job recruiter, a buyer, a romantic partner, or even a family member in trouble.
The details change, but the goal is usually the same: get you to act before you slow down and check. If it happened to you, or you’re helping a parent, spouse, friend, or family member, try not to freeze or blame yourself. The goal now is to act in the right order.
Step 1: Cut Off the Scammer
The first rule is simple: cut off the scammer. Do not keep texting them. Do not call them back. Do not ask them to return the money. Do not click another link they send you.
And definitely do not believe anyone who says you can get your money back if you first pay a processing fee, tax, legal charge, recovery fee, or verification payment. That’s often the second part of the scam, and it works because you’re scared and want to undo what just happened.
Step 2: Follow the Money
Once you’ve stopped contact, follow the money. Ask yourself exactly how it left: credit card, debit card, bank transfer, wire transfer, payment app, gift card, cryptocurrency, check, or something else? That answer matters because each payment method has a different recovery path — there’s no single button that reverses every scam. Contact the company connected to the payment as quickly as possible.
Credit or Debit Card
Call the card issuer right away using the number on the back of the card or the official website. Explain that the charge was connected to a scam and ask whether it can be reversed or disputed. If your card number was exposed, ask for the card to be cancelled and replaced, and if the scammer may have access to your online card account, change the password and turn on two-factor authentication.
Bank Transfer or ACH Payment
Contact your bank or credit union immediately. Be very clear about what happened, when it happened, how much money moved, and whether you approved the transfer or someone accessed your account without your permission. That distinction can matter — a transaction you never authorized may be treated differently from a payment you were tricked into approving. Either way, the bank needs to know as soon as possible.
Wire Transfer
If it was a wire transfer, timing is especially important. Call the wire transfer company immediately and report the transfer as fraudulent. Ask whether the money can be stopped or reversed. Wires can move quickly, and once the money is picked up or moved again, recovery becomes much harder — but that doesn’t mean you should give up. Make the call quickly and document the response.
Gift Cards
Gift card scams need a slightly different step. If someone convinced you to buy gift cards and read the numbers over the phone, send pictures, or type the codes into a website, contact the gift card company right away. Keep the physical card and the receipt, and call the company the card was used on to ask whether the funds can be frozen or refunded. The money may already be gone, but it’s still worth trying, especially if the scammer hasn’t drained the card yet.
Payment Apps and Cryptocurrency
If you paid through a payment app, report the transaction inside the app, contact customer support, and also contact the bank account or card that funded the payment. Save the transaction ID, username, phone number, screenshots, and messages. Apps are convenient because money moves fast, but that same speed can make scams harder to unwind — get the app, the bank, and your own records lined up as early as possible.
If cryptocurrency was involved, the situation can be more difficult because crypto transfers are often irreversible. Still, report the scam to the platform or wallet service you used, and save the wallet address, transaction hash, screenshots, messages, website links, and anything else connected to the payment. Even when recovery is unlikely, that information can matter for reports, investigations, and tracking larger fraud patterns.
Checks
In a fake check scam, you may receive what looks like a real check from a fake employer, buyer, prize company, or client. The bank may make some funds available at first, so it looks like the check cleared — then later, when it turns out to be fake, the bank can take the money back and you can be left owing the bank. If a check is involved, call your bank immediately and ask whether payment can be stopped or the deposit needs to be reviewed.
Step 3: Secure Your Accounts
After the money step, secure your accounts. Start with your email, because email often controls password resets for everything else. If a scammer gets into your email, they may be able to reset your bank password, payment app password, shopping accounts, phone account, or even retirement and investment accounts.
Change your email password first, then move to banking, credit cards, payment apps, brokerage accounts, phone service, and any account connected to money or personal information. Turn on two-factor authentication wherever you can — an authentication app is generally stronger than a text message code, but any extra layer is better than just a password.
If you shared a verification code with someone, tell the bank, app, or service immediately. Scammers often ask for codes because those codes can let them sign in, approve transfers, reset passwords, or take over accounts.
Device security matters too. If a scammer had remote access to your computer or phone — maybe through a fake tech support message or a fake bank warning — disconnect from the internet and get help from someone you trust. A scammer with remote access may have seen passwords, bank pages, tax documents, saved files, photos of IDs, or private messages. Don’t keep using that device for banking until it’s been checked.
Step 4: Think Beyond the First Payment
If you shared sensitive personal information — such as your Social Security number, date of birth, driver’s license number, bank account details, or tax information — think beyond the first payment. This can become an identity theft problem. Go to IdentityTheft.gov and create a recovery plan based on what information was exposed.
Depending on what happened, that may include placing fraud alerts, freezing your credit, reviewing your credit reports, closing fraudulent accounts, or disputing debts. A credit freeze can be especially useful if your Social Security number or other identity information was shared — it restricts access to your credit report, which can make it harder for someone to open new credit in your name. You can also place a fraud alert, which tells creditors to take extra steps to verify your identity.
Don’t just check your credit once and forget about it — some identity theft problems show up weeks or months later. Also check your bank accounts closely for small test charges, unfamiliar transfers, new payees, or changed contact information. If your routing and account numbers were exposed, ask your bank whether you need a new account. This can feel like a lot of extra steps, but it’s much easier to deal with a suspicious transaction early than to untangle a bigger problem later.
Step 5: Report the Scam
Once the urgent financial and security steps are underway, report the scam. Reporting may not feel satisfying in the moment, especially if you just want your money back, but it creates a record and helps agencies connect patterns.
- Report fraud to ReportFraud.ftc.gov
- If the scam involved the internet, fake websites, cryptocurrency, online messages, business email compromise, or a romance scam, also file with the FBI’s IC3 (ic3.gov)
- If identity theft is involved, use IdentityTheft.gov
- If a financial company isn’t handling your issue properly, you can submit a complaint through the CFPB
Local police may also be useful, especially if you need a report for your bank, insurance, credit bureaus, or identity theft recovery — for example, if there’s a local suspect, stolen checks, threats, or other documentation needs. A police report doesn’t guarantee recovery, but it can be part of the paper trail you need.
Save Every Piece of Evidence
Save texts, emails, phone numbers, voicemails, screenshots, usernames, websites, receipts, gift card numbers, transaction IDs, crypto wallet addresses, bank statements, fake invoices, job postings, and chat logs. Don’t delete anything because you feel embarrassed.
Write a simple timeline with dates: what the scammer claimed, what you shared, what money moved, and what steps you took afterward. A clear timeline can help a bank, investigator, credit bureau, or complaint reviewer understand the situation faster.
Watch Out for Being Targeted a Second Time
One of the most dangerous moments comes after the first scam, because victims are often targeted again. You may search online for help and see companies claiming they can recover stolen money, recover crypto, track scammers, or force a refund. Some of those are scams too.
A real government agency will not demand gift cards, crypto, wire transfers, or payment apps to recover money. A real bank will not tell you to move your money to a secret “safe” account. And a real investigator should not guarantee recovery in exchange for an up-front fee. This is why slowing down matters — scammers want you isolated, rushed, and ashamed.
What This Means for You
Scams are now a massive, organized problem, not just a few obvious fake emails. The FBI reported hundreds of thousands of internet crime complaints in 2024, with reported losses in the billions. That doesn’t happen because everyone suddenly forgot how to think — it happens because scams have become more professional, more targeted, and more emotionally manipulative.
You may not be able to undo every part of what happened, and not every scam loss can be recovered. But acting quickly, in the right order, can still limit the damage. You can protect the accounts you still have, reduce your risk of identity theft, create a record, and maybe help stop the same scam from reaching someone else.
Related Reading
- What to Do If You’ve Been Scammed — a first-hour and first-week checklist
- FTC Warning: Fake Agents Are Targeting Scam Victims Again
Frequently Asked Questions
What should I do first if I think I’ve been scammed?
Stop all contact with the scammer immediately — no replies, no calls, no more payments — then figure out exactly how the money left so you know which company to call first.
Can I get my money back after a wire transfer scam?
Sometimes, if you act fast. Call the wire transfer company right away and ask whether the transfer can be stopped or reversed. Recovery becomes much harder once the money is picked up or moved again.
Is money sent through cryptocurrency recoverable?
It’s difficult. Crypto transfers are often irreversible, but you should still report it to the platform or wallet service and save every transaction detail for investigators.
Should I pay a company that says it can recover my scammed money?
No. A real government agency or bank will never ask for a fee, gift cards, crypto, or a wire transfer to “recover” your money. That request is usually a second scam targeting you again.
What if I shared my Social Security number with a scammer?
Go to IdentityTheft.gov, create a recovery plan, and consider placing a credit freeze and a fraud alert with the three credit bureaus.
Where do I report a scam?
Report it at ReportFraud.ftc.gov. If it involved the internet, fake websites, or cryptocurrency, also file with the FBI’s IC3 at ic3.gov. Identity theft cases go through IdentityTheft.gov.
The Bottom Line
The scammer wants you to freeze, stay quiet, and send more. Your job now is the opposite: slow down, cut them off, and take the next practical step, in order — cut off contact, follow the money, secure your accounts, and report it.
You may not be able to undo everything, but the right sequence gives you the best chance to limit the damage and protect what’s left.
Money Instructor provides educational information only and does not offer legal, financial, or fraud-recovery advice. Scam tactics change and may not match your situation. If you think you have been targeted or have lost money, verify any claim through official channels and report it to the FTC at ReportFraud.ftc.gov and to your bank or payment provider.