First: Do not blame yourself. Focus on stopping more contact and protecting what may be affected.If someone is in immediate physical danger, call 911.

What if I already paid or shared information?

Take it one step at a time. What you should do depends on whether money, passwords, identity information, or device access was involved.

By the Scrammer team5 min read
An open notebook beside a smartphone and laptop
A short private checklist can make the next steps feel more manageable. Illustrative stock photo by Trent Erwin on Unsplash.

First, do not blame yourself. Focus on stopping more contact and protecting what may be affected.

Start with the part that matters most

  • Stop the conversation. Do not send more money or information, even if someone promises a refund or says one final payment will fix everything.
  • Write down what happened. Keep dates, payment details, messages, and names used in a private place.
  • Contact the affected company yourself. Use the bank's official app, the number on a card, or the real account website.
  • Protect exposed accounts. Change passwords that were shared or reused. Start with email and financial accounts.
  • Review reporting options. The right place depends on the payment method, information shared, and whether the contact happened online.

If money was sent

Contact the bank, card company, payment app, wire company, gift-card company, or other provider as soon as you can. Explain what happened and ask what options are available for that payment method.

There is no guarantee that money can be returned. Be careful if a new person contacts you and promises recovery for an upfront fee. That can be another scam.

If personal information was shared

Make a private list of what was shared. A password needs a different response than a card number or Social Security number.

Use the real service to change exposed passwords and review recent activity. For identity information, IdentityTheft.gov can build an official recovery plan based on what happened.

If someone accessed a device

End the remote connection. From another trusted device, change important passwords and contact any bank or account provider whose information may have been visible. Follow the device company's official security instructions.

Read the money guide

Sources