If you already sent money, shared documents, clicked a fake link, or gave someone a login code, act fast. Your goal is not to prove what happened first. Your goal is to stop more damage, save evidence, contact the right companies, and report the scam through real channels.
Key points
- Stop replying, stop paying, and stop clicking. Scammers often come back with a second demand after the first payment.
- Save screenshots, receipts, usernames, phone numbers, email addresses, account notices, and any fake documents before chats disappear.
- Contact your bank, card issuer, wire service, transfer app, or payment app through the official app or number on your card. Ask them to flag the transaction and tell you the next recovery step.
- Change passwords for affected email, banking, payment, and social accounts. Turn on two-factor authentication if it was off.
- If you shared your SSN, passport, driver's license, or other identity details, treat it as an identity-theft risk now and move to How to Protect Your Personal Information.
- Report fraud to the FTC at ReportFraud.ftc.gov. Report online, email, marketplace, crypto, or other internet-enabled fraud to the FBI at IC3.gov. If someone is in immediate danger, call
911.
Who This Guide Is For
Use this guide if you already did at least one of these things:
- Sent money by bank transfer, debit card, credit card, Zelle, Venmo, Cash App, PayPal, wire transfer, gift card, or crypto.
- Shared your SSN, passport, visa, I-94, bank details, lease documents, or login codes.
- Clicked a fake bank, delivery, job, school, landlord, government, or immigration link.
- Deposited a fake check.
- Let someone into your email, bank, payment-app, or social account.
- Paid a fake landlord, fake employer, fake government caller, fake utility caller, or fake immigration helper.
If you are only trying to spot warning signs before anything happened, read Common Scams Targeting Newcomers first.
What To Do In The First Hour
First-hour scam recovery checklist
0 of 7 doneWork in this order:
- Stop active harm.
- Secure payment and account access.
- Preserve evidence.
- Report and monitor.
Do not wait to collect every fact before you call your bank or change passwords. Speed matters more than a perfect timeline.
If the scam changed payroll, direct-deposit, or tax-form details, contact HR or payroll the same day through the official company portal or directory.
If You Sent Money
The first company to contact is the one that moved the money. This guide stays at the triage level. For payment-app edge cases, mistaken payments, and marketplace scams, use Zelle, Venmo, Cash App, and Payment Apps.
If you deposited a fake check, call your bank before the bank discovers it on its own. Do not spend the money and do not send any refund back.
If You Shared Personal Information Or Login Details
Use the exposure itself as the trigger. Do not wait to see if fraud appears first.
Use How to Protect Your Personal Information for the full identity-theft cleanup, credit-freeze, and monitoring steps.
What Evidence To Save
Save anything that helps you show what happened and when:
- Screenshots of texts, WhatsApp chats, email messages, social profiles, listings, invoices, and fake websites.
- Receipts, transfer confirmations, card statements, transaction IDs, wallet addresses, and case numbers.
- Phone numbers, email addresses, usernames, handles, and profile links.
- Copies of fake leases, fake job offers, fake government notices, and fake utility shutoff messages.
- Notes about dates, times, what you clicked, and what you shared.
Forward suspicious emails only if your bank, employer, school, or another trusted organization gives you a real reporting address. Otherwise, save the evidence and use the official reporting forms.
Where To Report It
You may also need to tell a school, employer, landlord, or utility company if the scam used their name, your work email, a payroll setup request, a housing payment, or an account they control.
When To Tell Your School, Employer, Or Landlord
Tell the organization when the scam touches a real account, payment, or document flow they manage.
Examples:
- A fake recruiter or payroll form used your employer's name.
- A fake school office asked for SEVIS, tuition, or student-account payment.
- A fake landlord, leasing office, or roommate payment request used a real property address.
- A utility scam involved a bill that your landlord or building normally handles.
Ask the organization to confirm what is real, note the scam on your account if relevant, and tell you whether any legitimate document or payment deadline still exists.
Common Mistakes
Decision Rules
| Situation | Practical rule |
|---|---|
| Someone is in danger right now | Call 911 or local police first. |
| You sent money less than a few hours ago | Contact the payment provider first, then report the scam. |
| You shared your SSN, passport, or date of birth | Treat it as an identity-theft risk now. Use IdentityTheft.gov and review your credit reports. |
| You shared a password or code | Change passwords from a clean device before you do anything else. |
| Someone changed your payroll or direct-deposit details | Contact payroll or HR through the official company channel and ask them to lock the change and review recent pay activity. |
| You are unsure whether the message was a scam | Do not keep engaging. Verify through the official company, school, bank, landlord, or agency website you choose yourself. |
| A stranger promises to recover your money for a fee | Assume it is another scam unless your bank or law enforcement tells you to use a specific official process. |
Costs / Timing
- Account calls and password changes should happen the same day.
- Credit freezes are free.
- Credit-report review can start the same day.
- FTC, IC3, and SSA reports can take minutes once you have your evidence ready.
- Money recovery is uncertain. Some payments move too fast to reverse, so do not delay the first bank or card call.
What To Do Next
- Finish the first-hour checklist.
- Read How to Protect Your Personal Information if identity details or account access were exposed.
- Read Zelle, Venmo, Cash App, and Payment Apps if the scam involved a payment app, fake refund, or fake payment screenshot.
- Read Common Utility Scams if the scam involved a shutoff threat or fake technician.
- Read Finding Temporary Housing or Renting Your First Apartment if the scam involved housing.
- Tell a trusted friend, family member, school office, or employer what happened if you need help making the calls.
Related Guides
- Common Scams Targeting Newcomers
- How to Protect Your Personal Information
- Zelle, Venmo, Cash App, and Payment Apps
- Common Utility Scams
- How to Open a U.S. Bank Account
- Understanding Your First Paycheck
- How To Build Credit
Sources
This guide uses official or primary sources for rules and government steps. Local rules may still vary. (Last checked: September 12, 2026)
- FTC: Report fraud
- FTC: IdentityTheft.gov
- AnnualCreditReport.com
- SSA: Protect Yourself from Scams
- FBI Internet Crime Complaint Center