ScanBeyond
Financial

What to Do If You’ve Been Scammed

Feeling embarrassed or panicked is normal — and exactly what scammers count on. Speed matters more than perfection. Use this checklist to stop further loss, report what happened, lock down your accounts, and avoid the “second hit” from fake recovery services.

12 min readLast updated: Nov 2026~2,000 words
⚠️ Start here

Do not send more money to “unlock,” “release,” “verify,” or “recover” funds. Anyone demanding an upfront fee to get your money back is almost certainly running a second scam.

Act Now — Direct Links

Open these in new tabs while you still have momentum. External links go to official agencies and tools; ScanBeyond links keep you on verified help paths.

First Hour: Stop the Damage

  1. 1
    End contact. Block the number, email, profile, or chat. Do not argue or negotiate.
  2. 2
    Stop any pending payment. Cancel transfers, dispute card charges, or ask the store/gift-card issuer to freeze unused value immediately.
  3. 3
    If you gave remote access, disconnect from the internet, uninstall remote tools, and restart the device before changing passwords. See tech support recovery steps.
  4. 4
    Tell one trusted person. A second set of eyes reduces panic decisions and follow-on mistakes.
  5. 5
    File the FTC report at ReportFraud.ftc.gov while details are fresh.

What to Do by Payment Type

Credit or debit card

Bank transfer / wire / Zelle / Cash App / Venmo

Gift cards

Cryptocurrency

Checks you deposited

Lock Down Accounts & Identity

  1. Change passwords for email first, then banking, then shopping and social accounts — from a device you trust.
  2. Turn on multi-factor authentication (prefer an authenticator app over SMS when you can).
  3. Check email forwarding rules, recovery phone/email, and recent login activity.
  4. If you shared your Social Security number or full identity packet, start an official plan at IdentityTheft.gov and place freezes with Equifax, Experian, and TransUnion.
  5. Review bank and card statements daily for at least two weeks.
  6. If your phone number was taken over, follow SIM swap recovery.
ℹ️ Why email first?

Email is the master key. If scammers can reset passwords through your inbox, locking other accounts won’t stick.

Where to Report

Reporting does not guarantee a refund, but it helps freeze related activity and protects other people.

Guides by Scam Type

After the first-hour actions, open the guide that matches what happened — each has scam-specific recovery steps.

Save Evidence

Before deleting anything, capture:

If new messages arrive, analyze them in ScanBeyond before you engage.

Avoid Fake Recovery Scams

After you lose money, criminals often return as “investigators,” “FTC agents,” “IC3 specialists,” lawyers, or crypto recovery firms. They already know you were victimized — that is their lead list.

⚠️ Second-hit red flag

“Pay us a processing fee / tax / unlock deposit and we’ll return everything” is a scam pattern — every time.

Next 7 Days

  1. 1
    Follow up on every bank, card, and gift-card case number.
  2. 2
    Watch for new phishing that references your exact loss (“we found your case”). Analyze anything unexpected at ScanBeyond.
  3. 3
    Update household rules — family verification code for money requests, no inbound payment links.
  4. 4
    Read the matching scam guide in the Knowledge Base so you recognize the same playbook next time.
  5. 5
    Give yourself credit for acting. Reporting and locking accounts is the right move, even when recovery is uncertain.

Still getting messages from the scammer?

Paste the text, email, or link into ScanBeyond before you reply or click.

Analyze Message — Free

Common Questions

Will I get my money back?
It depends on the payment method and how fast you report. Cards and some app payments have stronger dispute paths than wires, gift cards, or crypto. Act the same day whenever you can, and file at ReportFraud.ftc.gov plus your bank.
Should I be embarrassed to report this?
No. Scams are designed by professionals to create urgency and shame. Reports help you and help stop the ring.
The scammer still has my passwords. What now?
Change email first from a clean device, enable MFA, then reset banking and shopping logins. If identity data was exposed, start IdentityTheft.gov and freeze credit at all three bureaus.
Someone offered to recover everything for a fee. Safe?
Treat upfront “guaranteed recovery” as a scam. Use banks, platforms, and official portals like IC3 instead. See crypto recovery scams.
Where do I find scam-specific steps?
Jump to Guides by scam type above, or browse the full Knowledge Base. Use this page as the universal first checklist.