BUY NOW
Identity Theft & Fraud Prevention 13 min read

Steps to Take After Falling for a Scam

W
Wiperts Privacy Experts
Published August 12, 2020 · Updated October 8, 2026

Realizing you have fallen for a scam is a gut-punch. Many victims feel embarrassment, anger and fear all at once. Please remember that scams are run by professionals who study psychology and use real data about their targets. In 2025 the Federal Trade Commission reported $15.9 billion in fraud losses, and the FBI’s Internet Crime Complaint Center logged 1,008,597 complaints with $20.877 billion in losses. You are far from alone. What matters now is speed and a clear plan. This guide lists the steps to take in the first hour, the first day and the first month.

1. The first hour: stop the damage

Step 1: Stop all contact

Do not reply, call back or click anything else. Scammers often try to exploit panic with new demands, such as extra “fees” to release funds. Block the number or account, but save the messages first. Do not delete anything you may need as evidence.

Step 2: Call your bank or card issuer

Use the phone number on the back of your card or on your bank’s official website, not a number from the scammer. Explain what happened and ask whether the payment can be stopped, reversed or disputed. Ask the bank to lock accounts if credentials were shared, to issue new cards and to set up alerts. For wire transfers, ask the bank to attempt a recall immediately; time matters. The Consumer Financial Protection Bureau explains error resolution and your rights at consumerfinance.gov.

Step 3: Contact the payment app or platform

If you paid by Zelle, Venmo, Cash App, PayPal or a crypto exchange, contact the provider and report the transaction as fraud. If you paid with gift cards, call the card company immediately; some can freeze remaining balances. Provide the card numbers and receipts.

Step 4: Secure your accounts

From a device you trust, change the password on any account you used or shared with the scammer, and on any account that uses the same password. Turn on multi-factor authentication, prefer an authenticator app or passkey, and sign out of all sessions. If you allowed remote access to your computer, disconnect it from the internet, uninstall the remote tool and run a security scan, or get your device checked by a professional. The Cybersecurity and Infrastructure Security Agency has guidance at cisa.gov.

2. The first day: report and protect your identity

Step 5: Report the scam

File a report at ReportFraud.ftc.gov. If the scam happened online or involved cryptocurrency or business email compromise, also file at the FBI’s ic3.gov. Report phishing texts by forwarding them to 7726. If the scam involved the mail, the United States Postal Inspection Service accepts reports at uspis.gov. If it involved impersonation of a government agency, report to that agency too. Your report may not recover your funds, but it helps investigators connect cases.

Step 6: Protect your identity if you shared personal data

If you gave your Social Security number, birth date, ID photo or bank logins, go to IdentityTheft.gov to create a personalized recovery plan. Freeze your credit at Equifax, Experian and TransUnion, which is free and blocks new accounts. Consider a fraud alert. If your SSN was shared, see ssa.gov for guidance, and consider an IRS Identity Protection PIN at irs.gov. Read how to report identity theft for more detail.

Step 7: Tell the people who need to know

Tell family members if the scammer has their information or if they may be targeted. If a work account was involved, tell your employer’s security team. If a scammer impersonated someone you know, warn that person. Silence helps scammers; sharing helps others avoid the same trap.

Curious what’s already out there? Wiperts’ 100% Free Diagnosis shows which data brokers are listing your name, home address and phone number. Check your exposure free — it takes about a minute.

3. The first month: clean up and monitor

Step 8: Watch your accounts and credit

Review bank and card statements closely for several months. Check your credit reports through the official channel linked at consumer.ftc.gov and look for accounts you did not open. Dispute errors in writing. Keep a log of every call and letter with dates, names and reference numbers.

Step 9: Expect follow-up scams

Victims are often targeted again. Scammers sell lists of people who have paid. Be wary of anyone who contacts you offering to recover your money for an upfront fee, claiming to be a lawyer, a government agent or a “recovery specialist.” Real agencies do not charge fees to return money. Do not pay, and report such approaches. Our article new internet scams lists the common patterns.

Step 10: Remove the data that made you a target

Scammers often choose and persuade victims using public information: address, phone number, relatives, age. Search your name and remove your listings from people-search sites using official pages such as spokeo.com/optout, suppression.peopleconnect.us and thatsthem.com/optout. California residents can use DROP at privacy.ca.gov/drop. Ask Google to remove personal results. Change your phone number if harassment continues, and add a carrier PIN. See prevent online scams.

4. Steps by scam type

Scam typeExtra steps
Gift cardCall the card issuer, report the card numbers
Wire transferAsk the bank for an immediate recall, report to IC3
CryptocurrencyReport to the exchange and IC3, keep wallet addresses
Remote access (tech support)Disconnect, remove software, change passwords, scan device
Romance or investmentStop sending money, preserve chats, report to FTC and IC3
Fake checkDo not deposit; if deposited, tell the bank at once
Phishing loginChange password, enable MFA, check forwarding rules
Fake jobFreeze credit if you sent ID, report the posting
Package or toll textIf you entered card details, cancel the card

5. What recovery realistically looks like

Some victims recover funds, particularly when unauthorized card or bank transactions are reported promptly. Others do not, especially with gift cards, crypto and wires that you authorized. Even when money is gone, you can still stop further harm: secure accounts, freeze credit, remove data and report. Treat the process like handling any other loss, with documentation, persistence and support. If you feel overwhelmed, talk to a trusted friend or family member. Many communities and the AARP Fraud Watch Network (aarp.org) offer peer support, and your state attorney general’s office may provide victim services.

6. Emotional recovery

Embarrassment keeps many people from reporting. It helps to remember that scammers use well-rehearsed scripts, convincing data and emotional pressure that would fool most people on a bad day. Telling someone you trust, reporting and focusing on next steps are healthier than blaming yourself. If stress is affecting your sleep, work or relationships, consider speaking to a counselor or your doctor.

7. Preventing a repeat

After the immediate crisis, build protection into your routine. Freeze credit. Use MFA and a password manager. Agree on a family code word. Slow down on money requests and verify through official channels. Review settings and broker listings every 60 to 90 days. Read scammers getting sneakier and how to deal with online scams.

8. A worked example

Walt gets a call from “Microsoft support” and allows remote access to his PC; he then pays $400 in gift cards. Realizing the problem, he disconnects the computer and calls the gift card company, which freezes part of the balance. He calls his bank about the logins he typed, changes passwords from a friend’s phone, freezes his credit and reports at ReportFraud.ftc.gov. A month later someone offers to recover his money for $500; he declines and reports the call. He also removes his address and phone from seven people-search sites.

9. Myths about scam recovery

“Nothing can be done.” Quick action helps. “Reporting is pointless.” It supports investigations. “A recovery company will get my money back.” Most are scams. “I should hide it to avoid shame.” Telling others protects you and them.

10. Three scenarios

Scenario 1: You clicked a link but entered nothing. Close it, run a scan and change passwords if unsure.

Scenario 2: You sent a wire this morning. Call your bank now and ask for a recall.

Scenario 3: You gave remote access. Disconnect, change passwords from another device and have the computer checked.

11. What to expect: a realistic timeline

ActionTime to doWhen it takes effect
Calling the bank15 to 30 minutesImmediate
Password and MFA changes30 to 60 minutesImmediate
Credit freezes30 minutesImmediate
Filing reports30 minutesImmediate
DisputesWeeksVaries
Broker opt-outs2 to 4 hoursDays to 4 weeks

12. Common mistakes

  • Waiting before calling the bank.
  • Paying a recovery service.
  • Skipping the credit freeze.
  • Not keeping records.
  • Leaving public listings that attract repeat scammers.

13. How Wiperts helps after a scam

Wiperts scans more than 100 data brokers and people-search sites, submits removal requests, asks Google and Bing to remove personal results, blurs your home on maps and monitors 24/7 so relisted data is removed again, helping you cut the flow of personal details to scammers who target past victims.

See what scammers can still find about you.

100% Free Diagnosis: Check Your Exposure

Find out what data brokers have on you. Enter your details in the free scanner on the Wiperts homepage:

  • First Name
  • Last Name
  • Select State
  • Email Address
  • Website

Scan Databases Now — no payment is needed to see your exposure report.

14. Key takeaways

  • Act fast: stop contact, call your bank, secure accounts.
  • Report at ReportFraud.ftc.gov and ic3.gov, and use IdentityTheft.gov if you shared identity data.
  • Freeze credit and beware of recovery scams.
  • Remove public listings and review your protections regularly.

Pick the Wiperts plan that fits your household

PlanCoversOne-time deep scrubThen
Individual1 person$89$14/month
Couples (most popular)2 people$149$24/month
FamilyUp to 4 people$199$39/month

Every plan includes removal of your name, date of birth, salary, home address and phone number from 100+ data brokers and people-search sites, Google and Bing search-result removal, home blurring on maps, and 24/7 monitoring that re-removes your data if it reappears. See plans and start your removal

15. Frequently Asked Questions

What should I do first if I realize I was scammed?

Stop all contact with the scammer, do not send more money, and call your bank or card issuer immediately using the number on your card to stop or recall payments.

Can I get my money back?

Sometimes. Unauthorized card or bank transfers reported quickly may be refunded. Payments you authorized, such as gift cards, crypto or wires, are harder to recover, but report right away.

Should I report even if the amount is small?

Yes. Reports help investigators spot patterns and may protect others. File at ReportFraud.ftc.gov and, for internet crime, ic3.gov.

What if I gave my Social Security number?

Freeze your credit at all three bureaus, consider a fraud alert, report at IdentityTheft.gov and monitor your credit reports and Social Security account.

Will a company help me recover my money for a fee?

Be very careful. Many “recovery” offers are scams that target victims again. Legitimate help comes from your bank, regulators and law enforcement.

How do I stop it from happening again?

Use MFA, freeze your credit, verify requests through official channels, remove personal data from public listings and share what you learned with family.

Sources

Ready to erase your footprint?

Stop letting data brokers profit from your personal life. Start your removal today.

Start Removing

Related Reading