What to Do After a Scam

Immediate Action Guide

Scam Response – Incident Response & Recovery Guidance

Falling victim to an online scam can be emotionally overwhelming and financially damaging. Acting quickly and correctly can significantly improve the chances of limiting losses, preserving evidence, and positioning a case for potential recovery.

This guide outlines a structured scam response framework used by digital‑fraud investigators and recovery professionals. It is designed to help victims take immediate, practical steps while avoiding common mistakes that can worsen the situation.


1. Secure Your Accounts Immediately

As soon as you suspect a scam:

  • Change passwords for email, banking, crypto exchanges, and payment apps

  • Enable two‑factor authentication (2FA) on all accounts

  • Log out of all active sessions

  • Revoke any unknown or suspicious API keys

  • Check account recovery emails and phone numbers

If a scammer gained remote access to your device:

  • Disconnect the device from the internet

  • Run a full malware and security scan

  • Avoid using the device for financial activity until cleared

Speed matters — early action can prevent additional losses.


2. Preserve and Document All Evidence

Evidence preservation is critical for investigations and recovery efforts.

Collect and securely store:

  • Transaction receipts and confirmations

  • Screenshots of chats, dashboards, and platforms

  • Emails and phone numbers used by the scammer

  • Bank and card statements

  • Crypto wallet addresses and transaction hashes

  • Website URLs and platform names

  • Names, aliases, or IDs used by brokers or agents

Do not delete or alter any data, even if it seems insignificant. Small details often help investigators identify broader scam networks.


3. Notify Your Bank or Financial Platform

Report the incident immediately to your:

  • Bank or card issuer

  • Payment processor

  • Crypto exchange or wallet provider

Early reporting may allow institutions to:

  • Freeze suspicious transfers

  • Reverse unauthorized charges

  • Flag receiving accounts

  • Support chargeback or dispute claims

Some crypto exchanges can still halt outgoing transfers if notified quickly.


4. Report the Scam to Authorities

Filing official reports helps establish a record and may be required for recovery actions.

Depending on your location, reporting agencies may include:

  • Federal Trade Commission (FTC)

  • Action Fraud (UK)

  • Europol or Interpol

  • ASIC, CySEC, or other financial regulators

  • Local cybercrime or fraud units

Always retain your case or reference number.


5. Blockchain Tracing (For Crypto‑Related Scams)

A common misconception is that cryptocurrency transactions are untraceable. In reality, blockchain activity is permanently recorded.

Professional tracing can help:

  • Identify scam wallet clusters

  • Follow asset movement across addresses

  • Detect interactions with exchanges

  • Flag wallets linked to known fraud operations

This process requires specialized tools and expertise and should be handled by qualified professionals.


6. Avoid Secondary and “Recovery” Scams

Victims are often targeted again after an initial loss.

Be cautious of:

  • Fake recovery agents

  • Impersonated law‑enforcement officials

  • Unlicensed chargeback companies

  • Crypto “hackers” promising guaranteed recovery

Legitimate investigators do not request upfront payments to “unlock” or “release” funds and never guarantee outcomes.


7. Consider Professional Recovery Guidance

Complex cases often require coordinated action involving:

  • Legal positioning

  • Evidence consolidation

  • Financial institution communication

  • Blockchain tracing strategies

  • Regulatory reporting

Professional assistance can help ensure the case is handled correctly and realistically.


Important Notice

Fund recovery depends on many factors, including timing, evidence quality, jurisdiction, and the methods used by the scammers. No recovery outcome can be guaranteed.

This guide is provided for informational purposes and does not constitute legal advice.


Next: Learn more about how the recovery process works in our guide: How Fund Recovery Works – Investigation & Recovery Process.

  •