First 24 hours after a scam

Work through these calmly in order. You do not need to do everything at once - start at the top.

Privacy note: this is a checklist to read and print. Do not write OTPs, passwords, card numbers, bank details, or ID numbers onto it.

First 10 minutes

The first priority is to stop the loss and stay calm. Acting in order matters more than acting fast.

• Stop sending money, codes, or details, and end the contact.
• If money moved, contact your bank or payment provider immediately and ask them to stop or recall the payment.
• Take screenshots of the conversation before blocking, if it is safe to do so.
• Do not click anything further in the message, and do not call numbers it gave you.

First hour

• Change passwords for any exposed account from a device you trust, starting with email and banking.
• Turn on two-factor authentication and log out of all active sessions where you can.
• If you installed an app or granted remote access, disconnect from the internet and remove it.
• Tell someone you trust what happened - a second person helps you think clearly.

Same day

• Report to your national cybercrime or fraud service through the reporting directory.
• Check accounts and statements for any unauthorised activity.
• If your identity details were shared, watch for new accounts or loans opened in your name.
• Read the matching recovery guide for your situation.

Evidence to save

• Screenshots of the messages and the sender's number, handle, or email address.
• Dates, amounts, reference numbers, and the payment method used.
• Any receipts, confirmation emails, or call logs linked to the contact.

Who to contact

• Your bank or payment provider - first, whenever money or card details were involved.
• The platform where it happened - report the account on that app or marketplace.
• Your telecom provider - if your number may be compromised or a SIM-swap is possible.
• Your local authority - through the official channel for your country (see the country reporting guides).

What not to do

• Do not send more money to "release", "verify", or "recover" funds.
• Do not trust a follow-up "fraud team" or "recovery agent" who contacts you - these are common second scams.
• Do not share new OTPs, passwords, or card details with anyone, for any reason.
• Do not blame yourself; scams are designed by professionals to catch careful people.

How to reduce further harm

Once the immediate steps are done, slow everything down. Secure your most important accounts first, keep your evidence together in one place, and let your bank and the official reporting service guide the next stages. If you are unsure whether a new message is genuine, check it with the message checker before you act. This page is general educational information, not legal or financial advice - for your own situation, rely on your bank and your local authorities.

Last reviewed: 2026-06-01.