What to Do After Being Scammed Online

Discovering that you may have been scammed can create urgency and confusion. The first priority is to prevent additional losses while preserving enough information to understand what happened.

• Stop making additional payments
• Do not pay new taxes, verification fees, release charges, or withdrawal fees
• Preserve messages and transaction records
• Contact the financial or payment provider involved
• Secure compromised accounts and devices
• Record important dates, amounts, and account information

Fraudsters frequently continue requesting money after the initial loss. They may claim that another payment is necessary to release funds, pay taxes, verify an account, complete a withdrawal, recover previous losses, or avoid legal consequences.

• Do not make additional deposits
• Do not pay supposed withdrawal fees
• Do not pay unexpected taxes directly to the scammer or platform
• Do not pay account activation or verification fees
• Do not borrow money simply to satisfy another payment demand
• Do not transfer funds to a new account because the scammer claims the previous account has a problem

Save the available evidence before websites, profiles, accounts, advertisements, or conversations disappear. Evidence can help financial institutions, regulators, law-enforcement agencies, and professional advisers understand the transaction history and circumstances.

• Emails and chat history
• Phone numbers and usernames
• Social media profiles
• Website URLs
• Account dashboards
• Contracts and invoices
• Bank transfer receipts
• Card transaction records
• Wallet addresses and cryptocurrency transaction hashes
• Screenshots of balances, withdrawals, and payment instructions
• Names and company details used by the suspected scammer

Whenever possible, keep original files and transaction records rather than relying exclusively on screenshots.

If money has already been transferred, contact the financial institution or payment provider involved as soon as possible. Different payment methods have different dispute, recall, reversal, tracing, or fraud investigation procedures.

• Bank or wire transfer: report the suspected fraud and ask what recall or tracing procedures may be available
• Credit or debit card: ask about fraudulent transaction or charge dispute procedures
• Payment app or e-wallet: report the transaction to the service provider
• Cryptocurrency exchange: report the transaction and destination wallet if the exchange offers fraud reporting support
• Gift card: contact the card issuer and retain the card and receipt
• Other payment methods: contact the company used to send the funds and ask what fraud procedures are available

If the scammer obtained login credentials, authentication codes, personal information, or access to a computer or mobile device, financial recovery should not be the only concern. Preventing additional account compromise is also important.

• Change compromised passwords
• Change passwords reused on other accounts
• Enable multi-factor authentication where available
• Review active account sessions and devices
• Remove unknown devices or applications
• Review banking and payment accounts for unfamiliar activity
• Contact the relevant provider if an account has been taken over
• Run appropriate security checks if remote access or malicious software may have been involved

Cryptocurrency transactions usually cannot be reversed in the same way as many traditional payment transactions. However, transaction evidence can still be important for reporting, exchange notifications, blockchain analysis, and professional assessment.

• Save every destination wallet address
• Save transaction hashes or transaction IDs
• Record the cryptocurrency type and amount
• Download exchange deposit and withdrawal history
• Preserve screenshots and communications showing who provided the wallet address
• Report suspicious activity to the relevant exchange where appropriate
• Do not share private keys or recovery phrases

The existence of a visible blockchain transaction does not by itself mean that funds can be recovered. Recovery possibilities depend on the transaction path, counterparties, exchanges, jurisdiction, and other circumstances.

Reporting creates an official record and may provide information to law-enforcement agencies, regulators, financial institutions, consumer protection authorities, or online platforms.

• Report the incident through the appropriate official fraud or cybercrime channel
• Report financial-services or investment misconduct to the relevant regulator where appropriate
• Report fraudulent accounts or profiles to the platform involved
• Report suspicious transactions separately to the relevant financial provider
• Save report numbers and confirmation emails

Organizing the case into a clear file can make later communication with banks, regulators, law-enforcement agencies, lawyers, or other professionals more efficient.

• A short summary of what happened
• Chronological timeline of events
• Total amount lost
• List of each transaction
• Payment methods used
• Beneficiary account information
• Wallet addresses and transaction hashes
• Scammer contact details and profiles
• Websites and platform information
• Copies of reports already filed
• Supporting screenshots, documents, and communications

Recovery options vary significantly between cases. A fraudulent card transaction, bank transfer, cryptocurrency transfer, fake investment platform, and cross-border fraud case may each require different approaches.

Important factors include the payment method, timing, transaction destination, available evidence, financial institutions involved, whether accounts can be identified, jurisdiction, and the legal or regulatory framework that applies.

Professional assistance may be useful when losses are substantial, transactions are complex, multiple jurisdictions are involved, financial institutions have disputed responsibility, or legal action may need to be considered.

• Verify the identity of the professional
• Verify any claimed professional license
• Understand the services being offered
• Request clear information about fees
• Be cautious of guaranteed outcomes
• Do not provide account passwords or security credentials

GFKC provides informational and case-support resources and does not guarantee recovery outcomes.

• Stop all additional payments
• Save the complete communication history
• Download transaction records
• Contact the financial or payment provider
• Change compromised passwords
• Secure affected accounts
• Record wallet addresses and transaction hashes
• Report fraudulent accounts or websites where appropriate
• Create a basic timeline of events
• Store evidence securely in more than one location