If you think you're being scammed right now — or it just happened — this page is for you. No sign-up, no payment, no judgment. Follow the steps for your exact situation below. Speed matters more than anything else in the first hour, so let's move.
First, breathe. You are not stupid, and you are not alone. Scams stole over $1 trillion worldwide last year — from teachers, engineers, bank managers, and police officers. Modern scam scripts are engineered by professional teams to beat smart, careful people. What matters now is not how it happened. It's what you do in the next 60 minutes.
The 3 things to do immediately — no matter the scam
- Cut the line. Hang up, stop replying, close the chat. Do not "keep them talking," do not send one more message, do not try to outsmart them or get revenge. Every extra minute of contact is used against you.
- Don't send another cent — to anyone. Not a "release fee," not a "verification deposit," not a "refund processing charge." Any request for more money to fix the situation is the same scam continuing.
- Start a written record. Screenshot everything now, before it disappears: messages, usernames, phone numbers, email addresses, payment confirmations, wallet addresses. You'll need these for your bank and for reports.
Where did it happen? Choose your situation:
Jump straight to the exact steps for your case.
Scammed by a fake bank call — or sent money to a scammer
This is the most urgent scenario on this page, because banks can sometimes stop or recall a transfer — but only in the first hours.
- Call your real bank right now — using the phone number printed on the back of your card or on the bank's official website. Never a number the caller gave you, never a number from a text.
- Say the words "fraud" and "unauthorized transaction." Ask them to: freeze the affected account or card, attempt a recall on any transfer, and open a fraud case with a reference number. Write that number down.
- If you gave away your card number or PIN: have the card cancelled and reissued on the same call.
- If you gave away online banking passwords: change them immediately — from a different device if you suspect yours is compromised — and turn on two-factor authentication.
- Report it officially (see the reporting section below). Banks take cases more seriously when there's an official report number attached.
Key fact: if a scammer took money via an unauthorized transaction (they moved it themselves), your bank is usually required to investigate and often must refund you. If you were tricked into sending it yourself, recovery is harder — but a recall attempt in the first hours still sometimes works. Either way: call now, not tomorrow.
Scammed or hacked on Instagram — what to do
If your Instagram account was hacked or stolen:
- Go directly to instagram.com/hacked — this is Instagram's official recovery flow. It works even if the hacker changed your email and phone number.
- Check your email for a message from Instagram saying your email address was changed — it contains a "revert this change" link that often gets your account back in one click. It's valid for a limited time, so look now.
- Once you're back in: change your password, then turn on two-factor authentication (Profile → menu → Accounts Center → Password and security → Two-factor authentication).
- Warn your followers from another channel — hacked accounts are immediately used to scam the victim's friends ("I'm raising money…", "try this investment…").
If you paid a scammer you found on Instagram (fake shop, fake investment, fake seller):
- Contact your payment provider first — card issuer or PayPal — and dispute the charge as fraud. Card payments and PayPal "goods and services" payments have real buyer protection; "friends & family" payments and bank transfers are much harder, but still report them.
- Report the account inside Instagram (profile → ··· → Report → scam or fraud), then block it.
- Screenshot the profile and chat first — scam accounts vanish fast, and you'll want evidence for your dispute.
Scammed or hacked on TikTok — what to do
- Hacked? Try logging in and resetting the password. If the email/phone was changed, go to TikTok → Report a problem, or use the official form at support.tiktok.com and select account hacked. Provide your old username and any proof (original email, past receipts if you ever bought coins).
- Once recovered: Settings and privacy → Security & permissions → turn on 2-step verification, and review "Manage devices" — remove anything you don't recognize.
- Paid a scammer via TikTok Shop or a link from TikTok? Dispute with your card issuer immediately, report the seller/video inside the app, and screenshot everything first.
- Fake "TikTok job" scams (paid to like videos, then asked to deposit money to "unlock" earnings): stop depositing — the earnings screen is fake. Report to your bank and the platforms below.
WhatsApp or text message scam — what to do
- "Hi mum / hi dad, new number" scam: if you sent money, call your bank now and attempt a recall (see the bank section above). Then call your child on their old, real number — you'll usually find them blissfully unaware.
- WhatsApp account stolen? Reinstall WhatsApp and log in with your own phone number — entering the SMS code re-registers the account to you and kicks the scammer out. Then turn on Settings → Account → Two-step verification so it can't happen again.
- Clicked a link in a fake delivery text (DHL, post office, toll fees)? If you entered card details, cancel the card now. If you only clicked, change the password of any account you then logged into, and run your phone's security update.
- Block and report the number in the app; forward scam texts to your carrier's spam service where available (7726 in the US and UK).
I gave a scammer a security code — what happens now
A security code is a password. If you read one out or typed it into a fake site, someone may be inside that account right now. Minutes count:
- Open the real app or site of that account immediately and change the password. If the code was for your bank — call the bank instead (number on your card).
- Check for changes: recovery email, linked phone number, forwarding rules (in email accounts), authorized devices. Undo anything you didn't set.
- Turn on two-factor authentication if it wasn't on, and log out all other sessions (most platforms have a "log out everywhere" button in security settings).
- Protect your email above all. Whoever controls your inbox controls the "reset password" button for everything else you own. Secure it first, always.
I paid a scammer with gift cards
Know this first: no government agency, tax office, tech company, or utility ever takes payment in gift cards. Anyone who asks for them is a scammer, 100% of the time.
- Call the gift card company right now — not the store you bought it in. Apple, Google Play, Amazon, Steam and others have dedicated fraud lines. If any balance is unspent, they can sometimes freeze it.
- Keep the cards and receipts — you'll need the card numbers and purchase proof for the report.
- Report the scam officially (section below) — gift card scams are heavily tracked, and reports genuinely help investigations.
Romance scam or fake investment — what to do
These are the cruelest scams because they steal trust along with money — often over months. If you're realizing it now, that realization took courage. Here's what to do:
- Stop all contact and do not announce it. Don't confront them, don't demand your money back from them — they have a script for that too, and it ends with you sending more.
- Do not pay any "withdrawal fee," "tax," or "account unlock charge" to get your investment out. The balance you see on their platform is a fake number on a fake website. There is nothing to unlock.
- Call your bank about every transfer you made (recall attempts, fraud case). For crypto: contact the exchange you sent from — they can sometimes flag destination wallets — and include all wallet addresses in your official report.
- Save everything before blocking: profiles, chat history, payment records, the platform URL.
- Tell one person you trust today. Shame is the scammer's last weapon — it keeps victims silent and reachable. Saying it out loud once breaks most of its power.
I let a "support agent" access my computer
- Disconnect the computer from the internet now — turn off Wi-Fi or pull the cable. This cuts any live remote session.
- Uninstall any program they had you install (AnyDesk, TeamViewer, UltraViewer, LogMeIn are the usual ones), then restart.
- From a different device, change your important passwords — email first, then banking — and check your bank for transactions made during or after the session.
- If they showed you a "refund" and claimed they overpaid you and you sent the "difference" back: that refund was fake (they just moved money between your own accounts on screen). Call your bank about the money you sent.
- Run a full antivirus scan before using the computer for anything sensitive again.
⚠ The second wave: the scam that comes after the scam
Read this before you Google "how to get my scammed money back." Scam victims' details are sold on lists, and a second industry exists just to hunt them: "recovery agents," "crypto tracing experts," and "lawyers" who contact you — or advertise online — promising to retrieve your money for an upfront fee. Every unsolicited recovery offer is a scam. 100%. No exceptions. The only parties who can genuinely help are your bank, the payment provider, and the official agencies below — and none of them charge you a fee to investigate fraud.
How to report a scam (and why it's worth 10 minutes)
Reporting rarely brings money back on its own — but it creates the official case number your bank needs, feeds the takedown systems that kill scam sites, and protects the next person. Where to report:
- United States: ReportFraud.ftc.gov (FTC) and IC3.gov (FBI's Internet Crime Complaint Center). If your identity data was taken: IdentityTheft.gov for a full personal recovery plan.
- United Kingdom: Action Fraud, or call 159 to be connected safely to your bank.
- Everywhere else: your local police (ask for a written report or case number) and your national consumer-protection or cybercrime portal.
- If identity documents leaked (US): place a free fraud alert with one credit bureau — Equifax, Experian, or TransUnion — and it notifies the other two. Consider a full credit freeze; it's free and reversible.
The part nobody talks about: how you'll feel
Scam victims consistently describe the same aftermath: shame, anger, replaying every message, not wanting to tell anyone. Please hear this: the scam worked because it was engineered to work on intelligent people — the same scripts fool bank employees and engineers every single week. You were attacked, and being attacked is not a character flaw.
Tell someone you trust. If the money lost was serious, consider talking to a professional — financial trauma is real trauma. And if it's your parent who was scammed, lead with this sentence, not with questions: "This wasn't your fault, this happens to millions of people, and we're going to fix it together."
When today is handled: make sure there's never a next time
Everything on this page is free, and it will stay free — share it with anyone who needs it right now. When the dust settles, the real question becomes: how do we make sure this never happens again — to you or your parents?
That's exactly what The ScamProof Protocol is: a complete household defense system you install in one afternoon — the family code word that defeats AI voice cloning, word-for-word scripts for fake bank calls, a step-by-step digital lockdown, and free weekly alerts on every new scam. Built on real, documented cases.
See the Protocol — $89One-time. Instant PDF. Protects the whole household.
Frequently asked questions
Can I get my money back after being scammed?
Sometimes — and speed decides it. Unauthorized card transactions are usually refundable by law. Bank transfers you sent yourself can occasionally be recalled if you call within hours. PayPal "goods and services" and credit card purchases have dispute protection. Gift cards and crypto are hardest, but freezes sometimes work on unspent balances. Whatever the method: contact the provider today, not tomorrow.
Should I report a scam even if the amount was small?
Yes. Reports feed the systems that take down scam operations, and your "small" report is often the missing piece in a much larger case. It also creates a paper trail if the same scammers hit you again.
The scammer has my name, address, or ID photo. How bad is that?
Take it seriously but don't panic. Place a fraud alert or credit freeze (free), watch your bank statements for small "test" charges, and be extra suspicious of calls and emails in the coming months — your details may be sold to other scammers who will reference them to sound legitimate.
Someone is offering to recover my lost money. Is it real?
No. Every unsolicited money-recovery offer — email, call, social media, or a "recommended expert" in a victims' forum — is a follow-up scam targeting people who've already been hit. Only your bank, the payment provider, and official agencies can genuinely pursue your money, and none charge upfront fees.
How do I protect my parents after this?
Start with one calm conversation that removes shame: agree that if anything ever happens — a strange call, a click, money sent — they tell you immediately, no blame. Then set up the basics together: a family code word for emergencies, two-factor authentication on their accounts, and clear rules for calls about money. Our step-by-step guide walks through the entire conversation and setup in one afternoon.
This guide is general information, not legal or financial advice. Sources for our statistics: Global Anti-Scam Alliance (Global State of Scams Report) and the FBI's IC3 Elder Fraud Report. Last updated July 2026 — scams evolve weekly, and so does this page.