Disruptions
Money or information went to someone it shouldn't have, and you just realized it. The next moves are known, they work, and the sooner they happen the more they recover. Start with your bank, today.
Start with todayThis guide is not legal, tax, financial, or medical advice. It is a plain-language starting point: what to gather, who to call, and what to decide first. If a wire transfer was sent, call your bank now, before reading further. Recall requests work best measured in hours.
What this situation means
A scam landed. Maybe it was a call that felt real, a relationship that turned out not to be, an investment platform that vanished, or a discovery that someone opened accounts in your name. However it happened, the operation behind it was scripted, rehearsed, and refined on thousands of people before it reached you. Engineers fall for these. Attorneys fall for these. Bank employees fall for these.
The shame that arrives with this discovery is not an accident. It is a tool the operation relies on, because embarrassed people stay quiet, and quiet people don't call their bank in time. Setting the shame aside is not just self-kindness. It is the first practical move, because everything that limits the damage requires picking up a phone and saying what happened.
Here is what's true: the recovery steps are known, most of them are free, and the households that come through this fastest are the ones that start today and tell someone. You do not have to solve everything at once. Start with the first 24 hours below.
What to protect first
Stop anything still in motion. Wire recalls, card disputes, and account freezes all work better in hours than in days. Whatever cannot be recovered, the goal shifts to making sure nothing else leaves.
If the scammer has your Social Security number, account numbers, or a copy of your ID, the losses can keep compounding through new accounts. A credit freeze at all three bureaus closes that door and is free.
Change the password on your email first, because email resets every other password. Then any account the scammer touched or could reach. Add a port-out PIN with your mobile carrier so your phone number cannot be hijacked.
If the operation involved a courier coming to your home, or anyone has threatened you in person, involve your local police directly. In-person contact moves this beyond a financial matter, and that is exactly what police are for.
Tell someone in your household or family today. Secrecy is the scam's mechanism, and breaking it is protective. Shared knowledge means shared watching, shared phone calls, and one less thing carried alone.
First 24 hours
Use the number on the back of your card or a paper statement, not a number from any message the scammer sent. Tell them what happened and which transactions are involved. If a wire transfer was sent, ask them to request a recall and provide a hold harmless letter. Recalls requested fast can reduce or eliminate the loss entirely.
Change your email password from a device the scammer never touched, and turn on two-factor authentication if it isn't on. Email controls password resets for every other account, which makes it the vault door. Then change passwords on any account involved in the scam.
Equifax (800-685-1111), Experian (888-397-3742), and TransUnion (888-909-8872). Freezes are free by federal law and block new accounts from being opened in your name. This single step ends most of the ways today's problem becomes next month's problem.
Screenshot the texts, emails, profiles, websites, and payment confirmations. Write down phone numbers, usernames, wallet addresses, and the timeline while it is fresh. Scam infrastructure gets deleted quickly, and your records become the evidence for every report and dispute that follows.
The Internet Crime Complaint Center is the central intake for internet-enabled fraud, and in some cases the FBI can freeze stolen funds before they move. File even if you are unsure your situation qualifies. Keep the complaint number with your records.
IdentityTheft.gov generates a step-by-step recovery plan and the FTC Identity Theft Report that banks and bureaus recognize in disputes. If a federal portal is temporarily offline, file with the IC3 and your state attorney general now and return to the FTC site when it resumes.
That is the whole first day. If you did nothing else this week, these six steps contain the damage. The next right step is rest, and then the 72-hour list.
First 72 hours
File a report with your local police department. Bring your documentation and your IC3 complaint number. Banks, credit bureaus, and insurers often require a police report number for fraud claims, so this errand unlocks the disputes ahead. Officers take these reports routinely; you will not be the first person that week.
Start the disputes. Card charges get disputed through the issuer's fraud process. Unauthorized bank transactions get disputed in writing with your bank. If accounts were opened in your name, contact each company's fraud department, tell them the account is fraudulent, and ask them to close it and send written confirmation.
Pull your credit reports from all three bureaus through AnnualCreditReport.com and read every line. Dispute anything you do not recognize. If your Social Security number was involved, report it to the SSA Office of the Inspector General at oig.ssa.gov or 800-269-0271, and create your my Social Security account at ssa.gov if you have not already, so no one else can.
Replace compromised cards, and if the scammer ever had control of your phone or computer, have the device checked or reset before using it for banking again. Ask your mobile carrier for a port-out PIN if you did not add one on day one.
First 30 days
Work the recovery plan from IdentityTheft.gov item by item, and keep a single folder, paper or digital, holding every report number, letter, and dispute. Follow up any dispute that passes its stated response window with a written status request. Persistence in writing is what closes these out.
Watch your accounts weekly, and turn on transaction alerts if they are not already on. Watch the mail too. Missing statements can mean an address change you did not make, and new cards or bills you did not request mean a new account slipped through before the freeze.
If your Social Security number was exposed, consider requesting an Identity Protection PIN from the IRS at irs.gov/ippin. It blocks anyone from filing a tax return in your name, which is a common follow-on to identity theft, and it is free.
Expect the aftermath to have an emotional shape: anger, embarrassment, and second-guessing are normal for weeks. Keep routines steady, keep sleeping, and keep talking about it with the people who know. If the weight is not lifting, talking with a counselor is a practical step like any other on this page, and 211 can connect you with low-cost options.
Decision points
If the scammer had your login or the account number was fully exposed, closing and reopening is cleaner than monitoring forever. If exposure was limited to a single disputed charge, new cards and new credentials on the same account are usually enough. Your bank's fraud team will have a view; ask them directly.
Freezes at all three bureaus plus free annual reports and account alerts cover most of what paid monitoring sells. Paid services add convenience and some insurance features, not fundamentally different protection. If money is tight after the scam, the free layer is genuinely strong.
Most fraud recovery is process work you can do yourself with the steps on this page. A consultation makes sense when losses are large, when property or a home deed is involved, or when a bank denies a dispute you believe is wrong. Your state bar's referral service can connect you with consumer attorneys, and many offer a low-cost first meeting.
Cut contact. Save what you already have, block the numbers and accounts, and let investigators do any further engaging. Continued contact gives the operation more chances, and some will pivot to threats or a fake refund offer to reel you back in.
What this crisis could break next
A scam rarely ends with the first loss. These are the second-order effects worth getting ahead of this month.
Fraud victims land on lists that scam operations sell to each other. The most common follow-up is a recovery company, fake investigator, or someone claiming to be from the FBI or IC3 offering to retrieve your money for a fee. The real IC3 never contacts victims and never works with recovery firms. Preventive action: decide now that anyone who calls you about recovering the money is a scammer, without exception.
If the loss drained accounts that bills depend on, the fraud can cascade into missed rent or a shutoff notice. Preventive action: map the next 60 days of bills this week and call any creditor you might miss before the due date. Our guides on rent and mortgage trouble and utility shutoffs cover those conversations.
A stolen Social Security number gets reused at tax time and against government benefits. Preventive action: the IRS Identity Protection PIN blocks fraudulent returns, and the SSA's eServices and Direct Deposit Fraud Prevention blocks stop anyone from redirecting benefit payments.
Fraudulent accounts left undisputed harden into a damaged credit file that affects borrowing, insurance rates, and sometimes housing applications. Preventive action: dispute everything unfamiliar now, in writing, while the FTC Identity Theft Report gives your disputes standing.
The most human aftermath: pulling back from the phone, the internet, and other people. Isolation was the scam's tool going in, and it can linger going out. Preventive action: keep the routines that involve other people, and let a few trusted people know what happened so vigilance is shared instead of carried alone.
Documents you may need
Every report and dispute goes faster when these are in one place:
Help and resources
These are the people you call, never the people who call you.
First call for anything involving money in motion: recalls, disputes, account freezes, and hold harmless letters. Use the number on your card or statement.
ic3.gov for internet-enabled fraud of every kind. Fast reports occasionally let the FBI freeze funds in transit.
Fraud reports and the identity theft recovery plan. If a federal portal is temporarily offline, your state attorney general and the IC3 cover the gap.
833-372-8311, weekdays 10 a.m. to 6 p.m. Eastern. Case managers help older adults and their families report fraud and file IC3 complaints.
Your state AG's consumer protection office takes fraud reports and investigates patterns. For fraud or financial abuse involving a vulnerable adult, your county's APS can step in.
If the loss has put bills, food, or housing under pressure, 211 connects you with local assistance programs. Using them is what capable households do under pressure.
When a disaster causes this
Scam operations move into disaster areas within hours: fake FEMA fees, contractors demanding cash up front, and charity fraud. If your situation started in the aftermath of a storm, fire, or flood, the same first-24-hours steps on this page apply, and the National Center for Disaster Fraud takes reports at 866-720-5721.
Our financial resilience guide covers the post-disaster scam patterns in detail, and the financial recovery section covers insurance claims and FEMA assistance done safely.
Adjust for your household
Work the same steps together, with them holding the phone wherever possible so agency stays with them. The DOJ Elder Fraud Hotline (833-372-8311) will walk you both through reporting. Skip any conversation about whose fault it was; the operation was professional, and the fastest recoveries happen in households that treat it that way.
Request a credit freeze for the minor at all three bureaus, dispute the fraudulent accounts in writing as the parent or guardian, and file at IdentityTheft.gov on the child's behalf. Child cases run undetected for years, so pull the child's credit report and read the whole thing.
Two losses happened, the money and the relationship, and both were real to you even though one person was not. Do the financial steps on this page, and give the grief the same standing you would give any loss. Cut all contact, including the apology or explanation the scammer may offer, which is a re-entry script.
Report it to the platform or card issuer immediately anyway. Recovery odds are lower than with wires and cards, but reports sometimes catch balances before they are drained, and the paper trail supports everything else. Then focus energy on the protective steps rather than the sunk loss.
Most operations never make physical contact, but courier-based collection exists. If anyone comes to your door about money or packages you did not order, do not answer questions, take a photo if safe, and call your local police. Mention the address exposure in your police report.
The loss may press on rent, utilities, or groceries this month. Call creditors before due dates, ask about hardship programs, and use 211 and our guide to feeding the household if food is the pressure point. None of that is failure. It is how a temporary loss stays temporary.
Recovery steps
Once the disputes resolve and the accounts are quiet, keep the freezes in place permanently and keep the alerts on. Most households never have a good reason to leave credit files unfrozen between loan applications, and after this experience yours will not be tempted.
Turn what happened into household defenses. Our household security guide covers the family verification word, the two-person rule for large money movements, and the safeguards to set up with older family members, so the next call that comes in meets a rehearsed household instead of an unrehearsed one.
Add the fraud folder to your household records: report numbers, resolution letters, and the timeline. If anything resurfaces on a credit report years from now, that folder settles it in one phone call. Our financial recovery section covers rebuilding from larger losses.