Act quickly without blaming the person who was targeted. Contact the bank, card issuer, payment service, or affected account provider through its official channel and say that fraud may have occurred. Only the provider can say which reversals, freezes, or recovery options remain available.

Prioritize by what was exposed

  1. Money or payment details: call the provider using its official app, statement, or the number on the card. Ask it to secure the account, review transactions, and explain the appropriate dispute or recall process. Do not pay anyone who promises recovery for an upfront fee.
  2. Password or one-time code: from a trusted device, contact the service and use its official account-recovery flow. Change the exposed password and any other account using the same password. Review recovery email addresses, phone numbers, forwarding rules, active sessions, and security settings.
  3. Remote access to a device: disconnect that device from networks and stop using it for account recovery. From another trusted device, contact relevant providers. Follow the device maker’s official guidance or obtain reputable technical help before reconnecting it.
  4. Identity information: record exactly what was disclosed. Use the official identity-theft guidance and credit-protection options for your country; steps differ by jurisdiction and by the information exposed.
  5. A social or email account: use the platform’s official compromised-account process. Tell contacts not to trust recent requests from the account.

Preserve a clean record

Save messages, emails, usernames, phone numbers, receipts, wallet addresses, transaction references, and dates. Write a timeline while it is fresh. Do not edit original messages. A provider or investigator may need details, but never send evidence to an unverified person who contacts you offering help.

Report through official routes

Report the account or message to the platform where it appeared and to the organization being impersonated. Use the government fraud-reporting service for your location. Contact local law enforcement when required by your provider, when identity documents are involved, or when there are threats or immediate safety concerns.

Watch for follow-up attempts

Scammers may return pretending to be investigators, support staff, or fund-recovery specialists. Treat every unsolicited recovery offer as unverified. Continue monitoring affected accounts and keep family members informed. Once the immediate risk is contained, create a family callback plan and rehearse the verification routine.