Scammed Online? Steps to Take Right Now

First, stop the bleeding

The moment you realize you've been scammed, act fast. Money that's still moving can often be pulled back; money that's settled is much harder to recover. Don't waste time being embarrassed — scams are engineered to fool careful people.

• Card payment: Call your bank or card issuer's fraud line (the number on the back of your card) and say the word "fraud." Ask them to stop the transaction and start a chargeback or dispute.
• Bank transfer / wire: Call your bank immediately and ask them to recall the transfer. Wires are hard to reverse, so minutes matter.
• PayPal or similar: Open a dispute in the app under the transaction and escalate it to a claim.
• Gift cards: Contact the card's issuer (Amazon, Apple, Google, Steam) with the card number and receipt — some can freeze unspent balances.
• Crypto: Transactions are usually irreversible, but report it anyway; note the wallet address and transaction ID.

Change your passwords and lock your accounts

If you entered a password, card number, or personal details on a fake site, assume they're compromised.

1. Change the password on the affected account, then on any other account that used the same password.
2. Turn on two-factor authentication (2FA) everywhere you can.
3. If you shared banking logins, contact your bank to reset online-banking access.
4. Watch your email for password-reset messages you didn't request — that's a sign someone is trying to get in.

Gather your evidence before it disappears

You'll need proof for your bank and for reporting. Save it now, because scam sites and messages are often taken down quickly.

• Screenshots of the website, the listing, and the checkout page.
• The order confirmation, receipts, and any tracking numbers.
• All emails and text messages, including the sender's address or number.
• The exact amount, date, and payment method.
• The store's URL, and any names, phone numbers, or social accounts they used.

If you're unsure whether a message you received is part of the scam, you can paste it into the HasTrust scam checker to get a read on it.

Report it to the right places

Reporting rarely gets your money back on its own, but it creates a record, helps investigators, and is sometimes required by your bank.

In the United States

• FTC: Report at reportfraud.ftc.gov.
• Online / wire fraud: The FBI's Internet Crime Complaint Center at ic3.gov.
• Identity theft: IdentityTheft.gov, which builds a recovery plan.

In the UK

• Action Fraud: actionfraud.police.uk or call 0300 123 2040.

Everywhere

• Report the fake shop or listing to the platform it appeared on (the marketplace, social network, or ad provider).
• File with your national or local consumer-protection agency.

Protect against identity theft

If you handed over your name, address, date of birth, or government ID, the risk goes beyond one payment.

• Place a fraud alert or credit freeze with the credit bureaus so no one can open accounts in your name. A freeze is free and you can lift it any time.
• Check your bank and card statements line by line for small "test" charges — scammers often trial a stolen card with a tiny amount first.
• Watch for unexpected bills, new accounts, or mail you don't recognize over the coming weeks.

Beware the second scam: recovery fraud

After you've been scammed once, you may be targeted again by "recovery agents" who promise to get your money back for an upfront fee. This is a scam on top of a scam. Real authorities and legitimate banks never ask you to pay to recover funds. Ignore anyone who contacts you out of the blue offering to help, especially if they ask for a payment, remote access to your computer, or another round of personal details.

How to avoid the next one

Once things are contained, a few habits make you a much harder target:

• Check a store before you pay — look at how long the domain has existed, whether contact details are real, and what independent reviews say. You can run any shop through HasTrust in seconds.
• Be suspicious of prices far below normal, countdown timers, and pressure to "buy now."
• Prefer paying by credit card, which gives you the strongest chargeback rights.
• Never approve a payment or share a one-time code because someone phoned or messaged you first.
• Type website addresses yourself instead of following links in emails or ads.

Being scammed is not a personal failing — these operations are professional and constantly evolving. What matters is moving quickly, protecting your accounts, and reporting what happened so the same trap catches fewer people.