I gave a scammer my personal information. What now?

First: stop sharing, and don't panic

Sharing information is not the same as losing money. Most of the steps below are free and take less than an hour. Hang up or stop replying, then find each item you shared below.

Social Security number

Your SSN can be used to open credit, file a fake tax return, or claim benefits. Lock things down so it is useless to them.

1. Freeze your credit at all three bureaus

   Equifax (1-800-685-1111), Experian (1-888-397-3742), and TransUnion (1-888-909-8872). It's free, doesn't affect your score, and you can lift it when you need to apply for credit. You must contact each bureau separately.

2. Go to IdentityTheft.gov

   If the number has been used, report it at IdentityTheft.gov to get a recovery plan. If you're not sure it has been used, the site has steps for exposed information too.

3. Get an IRS Identity Protection PIN

   This makes it much harder for someone to file a tax return in your name. Get one at irs.gov/ippin.

4. Create your own my Social Security account

   Setting up your account at ssa.gov means a scammer can't open one in your name first.

5. Check your credit reports

   Use AnnualCreditReport.com and look for accounts you don't recognize.

Free recovery checklist

Get the step-by-step plan in your inbox

Email addressEmail me the checklist

The printable C.A.L.M. checklist and who to call. No sales pitch. Or open the checklist now (PDF).

Bank account and routing number

1. Call your bank's fraud line

   Use the number on your card or statement. Tell them a scammer has your account details.

2. Ask about closing the account

   Ask if they recommend closing it and opening a new one. Ask them to flag the account and to watch for new payees or transfers.

3. Change your online banking login

   New password, and turn on two-step verification.

4. Watch for fake checks and deposits

   If money shows up that you didn't expect, don't send any of it back. It's often a fake check or stolen money.

Debit or credit card number

1. Call the card company now

   Use the number on the back of the card. Ask them to cancel the card and send a new number.

2. Dispute charges you didn't make

   Federal law limits credit card liability for unauthorized charges to $50. For debit cards, reporting within two business days limits your liability to $50. After that it can go up to $500, so call fast.

3. Update automatic payments

   Once you have the new card, update any bills that were charged to the old one.

Medicare number

Scammers use Medicare numbers to bill for services or equipment you never got.

1. Call 1-800-MEDICARE

   That's 1-800-633-4227. Tell them a scammer has your Medicare number.

2. Check your claims

   Look at your Medicare statements or your account at medicare.gov for services you didn't get.

3. Report identity theft

   Use IdentityTheft.gov if the number is being misused.

4. Only share it with your doctors and insurers

   Medicare will not call you to ask for your number.

Online passwords or verification codes

A verification code is a key to your account. If you read one to a caller, assume they used it.

1. Change the password from a safe device

   Use a phone or computer the scammer never touched. Start with your email account, since it can reset everything else.

2. Sign out of other devices

   Most email and bank accounts have a setting to sign out everywhere. Use it.

3. Turn on two-step verification

   Then never share the codes with anyone, even someone who says they're from the company.

4. Change reused passwords

   Anywhere you used the same password, change it.

5. If the code was for your bank

   Call the bank's fraud line right away. A bank code often means they tried to move money or add a payee.

Name, address, phone number, or date of birth

On their own, these are often already out there from data breaches. The bigger risk is that a scammer uses them to sound believable in the next call or email.

• Expect more scam calls, texts, and emails. Be extra careful with anyone who "already knows" your details.
• If you also shared your SSN or a bank or card number, follow those steps above.
• Consider a free credit freeze anyway. It is free and is the strongest protection against new accounts in your name.
• Your phone number: ask your mobile carrier about adding a PIN or port-out protection so no one can move your number to a new phone. Options vary by carrier.

Driver's license

• Contact your state's motor vehicle agency. Ask what they recommend. Some states will issue a new license number. Rules vary by state.
• Freeze your credit at all three bureaus, since a license plus your name and birthday can be used to open accounts.
• Report misuse at IdentityTheft.gov.
• If you sent a photo of the front and back, treat it as fully exposed.

Then report it

Report the scam at ReportFraud.ftc.gov. If you're 60 or older, the National Elder Fraud Hotline (1-833-372-8311) can help you with the next steps. See where to report, in order.

Questions people ask