What to do if you already clicked or called

You acted on a scam. Don't panic - here are the calm steps to limit the damage.

First, breathe

Acting on a scam is common, not shameful. What you do in the next few minutes matters most.

If you clicked a link

Close the page and don't enter anything.
If you entered a password, change it from the real website or app.
Turn on two-factor login for that account.
Run a trusted security scan if you downloaded anything.

If you gave money

Gift cards: The money is usually gone fast, but report it to the FTC and the store anyway.
Wire transfer: Call your bank immediately and ask them to recall it.
Card: Call your card company, say it was a scam, and dispute the charge.
Crypto: It's hard to recover, but report it - and tell your bank.

If you gave remote access

Disconnect from the internet.
Uninstall any app the caller told you to install.
Ask a trusted person or a real tech service to check your device.
Change passwords for banking and email from a different device.

Tell someone

Scams thrive in secrecy. Tell a family member, file a report at ReportFraud.ftc.gov, and if your identity was involved, contact your bank and credit bureaus.

You're not the first person this happened to, and you won't be the last. The brave thing is to act now.

What should I do first after a suspected scam?

Your next step depends on what happened. Simply opening a link is different from downloading software, sharing a password, granting remote access, or sending money. If you shared financial information or paid, contact the financial provider promptly through an independently verified number. If identity information was exposed, visit IdentityTheft.gov for a recovery plan.

Save relevant messages, transaction information, and screenshots for your report. Be wary of anyone who offers to recover lost money for an upfront fee.