Unfortunately, people getting scammed online is a frequent event. Scammers are getting better at social engineering and are using Artificial Intelligence (AI) to sound more authentic and eliminate any spelling errors.
It really can happen to anyone, so there’s no need to feel embarrassed if you have been scammed. Importantly, acting quickly can limit the damage. So here are some things you can do if you’ve been scammed.
1. Stop all communication immediately
Cut off contact with the scammer. Don’t reply to messages or calls, as this can prevent further manipulation or requests for even more money or information.
2. Secure your accounts
Change the passwords on all your online accounts, especially financial and email accounts. Use strong, unique passwords and enable multi-factor authentication (MFA) wherever possible. Start with the ones the scammer may have gained access to, but don’t stop there and check all your important accounts as well.
3. Monitor your financial statements
Check your bank, credit card, and payment service accounts for unauthorized transactions. Report suspicious activity to your banks and credit card company immediately to freeze or reverse fraudulent charges. Let them know what went down and find out how they can help you.
4. Avoid sponsored search results
It’s really important that you don’t click on sponsored search results when searching for help with resolving a scam. This kind of topic is seen by scammers as a perfect opportunity to scam you even more and they are known to outbid the rightful owners of certain brands. If you’re using a search engine, type the domain name yourself or scroll down to the regular search results.
5. Place fraud alerts and check credit reports
Contact credit bureaus to place fraud alerts on your file. This warns lenders to verify your identity before opening new accounts. Regularly review your credit reports for unfamiliar activity. If this is an option where you live, add a security freeze, more commonly called a credit freeze, to all of your credit reports for free.
- In the US, for a credit freeze contact Experian, Equifax, and TransUnion.
- In Canada, for credit monitoring and alerts contact Equifax Canada and TransUnion Canada.
- In the UK, for credit reports and monitoring contact Experian, Equifax, and TransUnion UK.
6. Try to recover your lost funds
I don’t want to set any expectations here. Depending on the type of scam, your chances are slim to none.
When you’ve fallen victim to a wide-spread campaign, the criminals behind it are usually international, operating from countries where they are unlikely to get prosecuted. Your payments have gone through crypto-exchanges to make them virtually untraceable or through money mules who are often victims of the same organized crime groups.
In these cases, the same is often even true for the person you had contact with. There are scam centers across the world where victims of human trafficking are forced to scam others.
These groups are behind operations specialized in impersonation of banks/government, investment/crypto “opportunities”, romance/job scams, and their demands are to be satisfied in gift cards, wire transfers, or cryptocurrencies.
The small group or lone star scammer can be found phishing after information they can sell to others, or they use methods like fake marketplace listings, selling counterfeit, social engineering, and often start by stealing small amounts. Depending on the platforms where you purchased something, you can use the platform’s refund options or those of your payment provider.
Beware of recovery scams. Ignore unsolicited calls/messages promising to get your money back for a fee. Even if they claim to be the FBI. If you feel threatened or are in immediate physical danger, call your local emergency number (often 911/112/999).
7. Gather evidence
Keep all records related to the scam: emails, texts, receipts, screenshots, and any communication details. This documentation supports investigations and helps law enforcement track scammers.
8. Scan your device
If you clicked any links or downloaded something during the course of the scam, make sure to scan your device with an antimalware solution. The scammer could have planted something for later use.
9. Report the scam
Reporting is crucial. It helps authorities track criminal patterns and may assist in recovering lost funds. Report to the appropriate national agencies, local police, and the platform where the scam occurred. For more details, see our article on how to report online scams.
10. Find support
You are not stupid nor are you alone. We know scams can be distressing. If you need support, know that it is available:
- UK: Victim Support 08 08 16 89 111 (Scotland 0345 603 9213). Samaritans 116 123.
- EU: Victim Support helpline 116 006 (available in many EU countries) for rights info and referrals.
- US: Office for Victims of Crime resources and state/local helplines.
- Canada: Local victim services via police/CAFC referrals.
- Spain: INCIBE 017 for cybersecurity guidance; police 091/062, emergencies 112.
- France: dial 116 006 for victim support/referral
11. Arm yourself with ongoing protection
Firstly, make sure to protect your device with a security solution like Malwarebytes Premium. Then, protect yourself in the browser using our free extension, Browser Guard.
Finally, if you want to check if something is a scam, Scam Guard—our new feature in Malwarebytes Mobile Security—allows you to upload a text, email, or DM to find out if it’s legit or a scam.
Let’s face it, an incognito window can only do so much.
Breaches, dark web trading, credit fraud. Malwarebytes Identity Theft Protection monitors for all of it, alerts you fast, and comes with identity theft insurance.
