The first 24 hours after a scam: a checklist

Take a breath first

Being scammed is a crime done to you. It is not a test you failed. You can still limit the damage, and the order you do things in matters. Work down this list. If you get stuck, the scam help tool asks a few questions and gives you a plan, and the printable C.A.L.M. checklist has room to write down names and report numbers.

Right now (first 15 minutes): Cut contact

1. End the call, chat, or session

   Hang up. Close the chat. If someone is controlling your computer, unplug it from the internet or turn off Wi-Fi.

2. Don't send anything else

   No more payments, codes, or "fees" to fix the problem. Scammers often ask for one more payment to "release" or "refund" your money.

3. Block them

   Block the phone number, email, and profile. Don't reply, even to say you know it's a scam.

Free recovery checklist

Get the step-by-step plan in your inbox

Email addressEmail me the checklist

The printable C.A.L.M. checklist and who to call. No sales pitch. Or open the checklist now (PDF).

Hour 1: Alert your bank or the payment company

This is the single most important call. Money can sometimes be stopped before it settles.

1. Call the fraud line

   Use the number on the back of your card or in the official app. Say "I want to report fraud." Ask them to stop or reverse the payment.

2. Call the company you paid through

   Gift card company, wire service, payment app, or crypto ATM operator. Our fraud phone numbers page lists verified numbers.

3. Ask for new cards and a new account number if needed

   If the scammer has your card or account details, ask the bank to close and reissue them.

4. Write down who you spoke with

   Name, date, time, and any case or claim number.

Hours 1 to 3: Lock down your accounts

1. Use a safe device

   If the scammer had access to your computer or phone, change passwords from a different device.

2. Change email first

   Your email can reset every other password. Then do banking, then shopping and social accounts.

3. Turn on two-step verification

   This sends a code to your phone when someone signs in. Never read that code to anyone who calls you.

4. Change any reused password

   If you gave a password, change it everywhere you used the same one.

Hours 3 to 6: Protect your identity if you shared personal details

• Freeze your credit at Equifax (1-800-685-1111), Experian (1-888-397-3742), and TransUnion (1-888-909-8872). It's free, it doesn't hurt your credit score, and you have to contact each one separately.
• Go to IdentityTheft.gov if you shared your Social Security number or think it's being misused. You get a personal recovery plan.
• Medicare number shared? Call 1-800-MEDICARE (1-800-633-4227).
• See I gave a scammer my personal information for each type of detail.

Before the day ends: Make reports

1. FTC

   Report at ReportFraud.ftc.gov or call 1-877-382-4357.

2. FBI IC3

   If money was lost through anything online, file at ic3.gov. Include transaction details.

3. If you are 60 or older

   Call the National Elder Fraud Hotline at 1-833-372-8311, Monday to Friday, 10am to 6pm Eastern.

4. Scam texts

   Forward the text to 7726.

Save everything

Don't delete the scam messages until you have reported them. Keep gift cards and receipts even if they are used up.

• Screenshots of texts, emails, chats, and pop-ups.
• Phone numbers that called you and the times.
• Receipts, gift cards, wire forms, crypto ATM receipts, and bank statements.
• Names and case numbers from every call you make.

Over the next few days

• Check bank and card accounts every day for a week.
• Expect a follow-up "recovery" call. Anyone who wants a fee to get your money back is a scammer.
• Get a police report if your bank asks for one. Use the non-emergency number.
• Tell a friend or family member. The AARP Fraud Watch Helpline (1-877-908-3360) also has trained volunteers to talk it through.

Questions people ask