There is a specific, sinking feeling that lands the moment you realize it was a scam. Your stomach drops, your face gets hot, and a voice in your head starts asking how you could have missed it. Take a breath. Millions of careful, intelligent people get caught every year, and what you do in the next hour matters far more than the mistake itself.
This is a recovery checklist, not a lecture. Work through it in order, because the early steps stop the bleeding and the later ones help you claw money and control back.
Key takeaways
- Act fast: contacting your bank in the first hours gives you the best shot at recovering money.
- Change passwords and turn on two-factor login on any account the scammer may have touched.
- Document everything with screenshots before you delete a single message.
- Report the scam so banks and agencies can act and warn others.
- Getting scammed once puts you on target lists, so tighten up and expect follow-up attempts.
First hour: stop the money moving
Money is the most time-sensitive part of recovery, so it comes first. The sooner you call, the more options your bank still has.
Call your bank or card issuer now
Use the number on the back of your card, not any number the scammer gave you. Tell them plainly: “I was scammed and I need to stop or dispute a payment.” If you paid by card, ask about a chargeback. If you sent a bank transfer, ask whether it can be recalled, because some can be if you move within hours.
Freeze the exposed card or account
If your card number was shared, ask for it to be cancelled and reissued. Most banking apps let you freeze a card yourself with one tap while you wait to speak to someone. A freeze is instant and reversible, so use it the second you suspect exposure.
Scammers often call back pretending to be your bank’s “fraud team,” using the panic they just created. Your real bank will never ask for your full password, a one-time code, or for you to move money to a “safe account.” Hang up and dial the number on your card yourself.
First day: lock down your accounts
If you entered any login details, or gave a scammer access to a device, assume the connected accounts are compromised until you have secured them.
Change passwords, starting with email
Your email is the master key, because password resets for everything else land there. Change that password first, then your banking and shopping logins. Make each one different, and if that feels overwhelming, a password manager will carry the load for you.
Turn on two-factor authentication
Two-factor login means a stolen password alone is not enough to get in. Switch it on for your email, bank, and any account holding money or personal data. An authenticator app is stronger than text codes, but any second factor beats none.
Check your email account’s “forwarding” and “recovery” settings after a scam. A common trick is to quietly add a forwarding rule or a backup phone number so the scammer keeps a way in even after you change the password. Remove anything you did not set up yourself.
Document before you delete
Your instinct will be to erase every trace of the whole embarrassing episode. Resist it. Screenshots and records are what let your bank dispute charges and let investigators connect cases.
| Capture | Why it matters |
|---|---|
| The scam messages or emails | Proves how you were contacted and by whom |
| Phone numbers and email addresses | Helps investigators link related scams |
| Payment confirmations and amounts | Needed for disputes and refunds |
| Any website addresses used | Lets platforms take fake sites down |
| Dates and times of contact | Builds the timeline your bank will ask for |
Keep it all in one folder or note. Ten minutes of saving now saves hours of “wait, what was that number” later.
Report it to the right places
Reporting does two things: it opens the door to help, and it feeds the data that shuts scams down for the next person. It is quick, and you do not need to have lost money to file.
Start with the official channels. In the United States, the FTC’s fraud report site walks you through it in a few minutes. Our detailed guide on reporting phishing and scams the right way lists exactly where to forward scam texts, emails, and fake websites so the right teams see them.
If the scam involved a personal relationship built over weeks, be gentle with yourself and read our support piece on protecting yourself from romance scams, which covers the emotional side and how to help someone still caught in one.
The week after: watch and rebuild
The threat does not always end when the money stops. Once you are on a scammer’s “responsive” list, expect a second wave.
Watch for follow-up scams
A cruel but common trick is the “recovery scam,” where someone contacts you claiming they can get your lost money back for a fee. They are the same crooks, or friends of theirs, coming back for a second bite. Nobody legitimate charges an upfront fee to recover scammed funds.
Monitor your statements and credit
Check your bank and card statements closely for the next few months, watching for small unfamiliar charges that test whether a card still works. If personal details were exposed, consider a credit freeze so nobody can open accounts in your name.
To rebuild the instincts that keep this from repeating, spend twenty minutes with our beginner’s guide to spotting scams and phishing. It turns this one hard experience into a radar that serves you for years.
Your afternoon checklist
- Call your bank or card issuer using the number on your card and dispute or stop the payment.
- Freeze or cancel any card whose number was exposed.
- Change your email password first, then your banking and shopping logins.
- Turn on two-factor authentication for email, bank, and money accounts.
- Screenshot every message, number, and payment before deleting anything.
- File a report with the FTC and forward scam messages to the reporting services.
- Remove any unfamiliar forwarding rules or recovery numbers from your email.
- Watch your statements for two to three months and ignore anyone offering paid “recovery.”
Getting scammed does not mean you were careless or foolish. It means someone who does this full time found the one moment your guard was down. Work the list, be kind to yourself, and you will come out of this safer than you were before it happened.
