Realising you’ve been scammed is stressful — but the first hour matters, and calm, quick action can limit the damage a lot. Here’s exactly what to do, in order.

Disclaimer: General information, not legal or financial advice. For serious losses, contact your bank and local authorities directly.

Step 1: Stop and don’t send anything else

If the scam is ongoing (someone is pressuring you to pay “to fix it” or “release your money”), stop all contact and payments now. Scammers often try to squeeze more once they know you’ll pay.

Step 2: Protect your money

• Call your bank or card provider immediately. Report the fraud; they can freeze the card, block transfers, and sometimes reverse payments.
• Change your banking password and turn on 2FA.
• Watch your statements closely for more charges.

Acting fast gives the best chance of recovering funds.

Step 3: Secure your accounts

If you entered a password or personal details:

• Change that password, and anywhere you reused it — see how to create strong passwords.
• Start with your email, since it can reset everything else.
• Check whether your data has leaked and turn on 2FA everywhere important.

Step 4: Check your device

If you downloaded anything or clicked a suspicious link, scan for malware with a reputable antivirus.

Step 5: Report it

• Report to the platform where it happened (bank, marketplace, social network).
• Report to your country’s fraud/consumer authority (for example, national anti-fraud or consumer-protection agencies).
• Keep evidence: screenshots, messages, transaction details.

Reporting helps you and helps stop the scammer targeting others.

Step 6: Watch for follow-up scams

Victims are often targeted again by fake “recovery services” that promise to get your money back for a fee. These are usually scams too. Be sceptical of anyone who contacts you out of the blue offering to help.

If your identity may be exposed

If sensitive data (ID, address, financial info) was taken, consider monitoring for misuse — see best identity theft protection services — and watch for phishing using your details.

Conclusion

If you’ve been scammed: stop paying, call your bank right away, secure your email and reused passwords, scan your device, and report it — keeping evidence as you go. Then stay alert for follow-up “recovery” scams. It feels overwhelming, but working through these steps calmly gives you the best shot at limiting the damage and getting back in control.