I Got Scammed: What to Do First
If you’ve just been scammed, the most important thing is to act quickly — not to panic. Contact your bank or payment provider immediately, stop all communication with the scammer, and document everything before memories fade or evidence disappears. Recovery is not guaranteed, but the actions you take in the first few hours directly determine how much damage can be limited. This guide walks through exactly what to do, in the right order.
What Actually Happens When You Get Scammed
Being scammed doesn’t mean you were careless or naive. Modern scams are engineered to bypass normal judgment — they use urgency, fear, authority, and trust to make the wrong action feel like the right one.
Scammers study human psychology. They know that a person who believes their bank account is being drained will act fast without thinking. They know that someone who trusts they’re speaking to Apple Support won’t question the instructions they’re given.
Here’s the key point: scams succeed not because victims are uninformed, but because the pressure created in the moment overrides normal decision-making. Understanding this matters — because it changes how you approach recovery and how you talk to your bank.
How Common Scams Actually Work
Most scams follow a predictable manipulation pattern regardless of the specific type:
Step 1 — Initial Contact You receive a call, message, email, or notification that appears to come from a trusted source — your bank, Amazon, Apple, the IRS, or a government agency.
Step 2 — The Threat or Opportunity Something is wrong — or something is being offered:
- “Your account has been compromised”
- “You owe back taxes — pay now or face arrest”
- “You’ve won a prize — just pay a small processing fee”
- “We detected a $400 charge — did you authorize this?”
Step 3 — Urgency and Isolation You’re told to act immediately and not tell anyone — especially not your bank, family, or law enforcement. This isolation is intentional. It removes the people most likely to stop you.
Step 4 — The Ask Send money via wire transfer, gift cards, Zelle, or crypto. Or share your login credentials. Or give remote access to your device. Or verify your details on a fake page.
Step 5 — The Loss Money is sent, credentials are stolen, or device access is granted. The scammer disappears — or pivots to a recovery scam.
Modern Scam Tactics to Know About
Ghost Tapping
Ghost tapping is a newer scam technique where fraudsters use stolen card information alongside digital wallet apps to make contactless payments — without having the physical card. Once your card details are added to their device’s wallet, they can tap and pay at any contactless terminal. Victims often only discover it through unfamiliar charges on their statement.
Fake Bank Fraud Calls
You receive a call from someone claiming to be your bank’s fraud department. The caller ID shows your bank’s real number — spoofed. They tell you there’s suspicious activity and walk you through “securing” your account by transferring funds to a “safe” account. That account belongs to the scammer.
Common Scammer Phrases to Recognize
Scammers use consistent language across different types of fraud:
- “Do not tell your bank — they will freeze your account”
- “This is confidential — do not discuss with family”
- “You need to act in the next 30 minutes”
- “Buy gift cards and read us the numbers — it’s the only secure payment method”
- “We’ll send a verification code — read it back to us”
- “Your computer is sending us error signals”
If you hear any of these phrases, stop the interaction immediately.
Can You Get Your Money Back After Being Scammed?
This is the most asked question — and the honest answer is: it depends on how you paid and how quickly you act.
When Banks May Refund Scam Losses
Unauthorized transactions — if someone accessed your account without your knowledge and made payments, banks are generally required to investigate and may fully refund the loss.
Credit card payments — credit cards offer the strongest consumer protections. Chargebacks are possible for fraudulent charges, and banks are more likely to side with the customer.
Debit card fraud — some protection exists, but it’s weaker than credit cards and depends on how quickly you report.
When Recovery Is Harder
Authorized push payments — if you approved the transfer yourself (even under deception), banks may classify it as authorized. This is where most disputes fail. However, many banks now have internal scam policies that provide partial or full refunds — especially if you report quickly and clearly state you were deceived.
Zelle, Cash App, Venmo — peer-to-peer apps offer very limited fraud protection for payments you initiated. Report immediately and file disputes, but recovery rates are low.
Gift cards — once codes are shared, recovery is extremely unlikely. Contact the card issuer immediately — if the balance hasn’t been used, a block may be possible.
Cryptocurrency — transactions are irreversible by design. Document everything and report to IC3 at ic3.gov, but financial recovery is rare.
This is where people get confused: banks are not automatically required to refund authorized payments — but that doesn’t mean you shouldn’t try. Many do refund, especially when fraud is clearly documented and reported within 24–48 hours.
Warning Signs You’ve Been Scammed
These are the most common indicators that a scam has occurred or is in progress:
- You were asked to keep the interaction secret from family or your bank
- Payment was requested via gift cards, wire transfer, crypto, or Zelle
- The caller ID showed a trusted institution but something felt off
- You were pressured to act immediately without time to think
- A “refund” required you to send money first
- Someone had remote access to your screen while you logged into your bank
- You received charges or transactions you don’t recognize
- Someone asked you to read back a verification code sent to your phone
What to Do If You Got Scammed
If You Sent Money
Contact your bank or payment provider immediately — the same day if possible. Use the word “fraud” when you report it.
- Bank transfer or wire: Request an urgent recall. Ask your bank to contact the receiving institution.
- Credit or debit card: Request a chargeback. Your bank will open a fraud investigation.
- Zelle or Cash App: Report within the app and contact your bank. Recovery is limited but worth pursuing.
- Gift cards: Call the issuer on the back of the card with the card number and PIN. Ask if the balance has been redeemed.
- Crypto: Document all wallet addresses and transaction IDs. Report to the exchange and IC3 at ic3.gov.
Then file reports with:
- FTC: reportfraud.ftc.gov
- IC3: ic3.gov
- CFPB (if a financial institution is involved): consumerfinance.gov/complaint
- In Canada: antifraudcentre.ca
If You Shared Your Banking or Login Information
- Change your passwords immediately — start with your email, then banking, then any reused passwords
- Enable two-factor authentication on all important accounts
- Contact your bank and ask them to flag your account for monitoring
- Check for any accounts or credit lines opened in your name
- Place a credit freeze if personal details were shared: Equifax, Experian, and TransUnion all offer free freezes
If You Clicked a Suspicious Link or Entered Details
- Change the password for any account you accessed via that link
- Check your email account for unauthorized forwarding rules or recovery address changes
- Run a security scan on the device you used
- Monitor accounts for unusual login activity over the next 48–72 hours
If You Gave a Scammer Remote Access to Your Device
- Disconnect from the internet immediately — turn off Wi-Fi or unplug the router
- Uninstall any remote access software: AnyDesk, TeamViewer, UltraViewer, Quick Assist, Chrome Remote Desktop
- Restart your device
- Change all passwords from a different, trusted device
- Run a full antivirus scan before logging into any accounts
- Contact your bank if you were logged into banking during the session
For a complete step-by-step plan covering the next 72 hours, the Response Plan Hub guide at responseplanhub.com/responseguide covers each scenario in structured detail.
Common Scam Variations to Know
Recovery Scams — The Second Hit
After being scammed, many victims are targeted again — this time by “recovery agents” who claim they can get the money back for a fee. These are almost always scams. No legitimate service charges upfront fees to recover fraud losses. If someone contacts you offering to recover your money, they are very likely the same network that scammed you the first time.
Impersonation Scams
Scammers pose as government agencies (IRS, Social Security, Medicare), banks, tech companies (Apple, Microsoft), or well-known retailers (Amazon). The common thread is authority — they use the credibility of a trusted institution to make their request feel mandatory.
Payment App Scams
Zelle, Cash App, and Venmo scams typically involve fake buyer or seller scenarios, fake “accidental” payments requiring refunds, or romantic relationships that eventually require financial help. Once money leaves via these apps, recovery is very difficult.
Mistakes and Misconceptions
Q: If I authorized the payment, my bank can never help me A: This is one of the most damaging misconceptions. Many banks have scam reimbursement policies that cover authorized payments made under deception — particularly if reported quickly. Always contact your bank and file a formal fraud report regardless of whether you approved the transaction. The word “fraud” matters more than the word “authorized.”
Q: Scammers only target elderly people A: The FTC’s own data shows that younger adults (18–39) are actually more likely to report losing money to fraud than older adults — though older victims tend to lose larger amounts. Scams are designed to exploit urgency and trust regardless of age. Anyone can be targeted.
Q: Deleting the messages or emails means the problem is gone A: Deleting communications doesn’t undo the scam and may actually hurt your case. Banks, the FTC, and police all benefit from evidence. Keep screenshots of all messages, emails, and transaction records before taking any action. Evidence is what turns a report into an investigation.
Q: If I report it, I’ll get in trouble for falling for it A: Reporting a scam is never punished. Agencies like the FTC and IC3 exist specifically to help victims and gather intelligence on fraud operations. Reporting protects you legally and contributes to enforcement action against the scammers. There is no downside to filing a report.
FAQ
Q: What should I do immediately after getting scammed? A: Contact your bank or payment provider first — especially if money was sent. Then change passwords for any accounts that may have been compromised, starting with your email. Document everything — screenshots, transaction details, phone numbers used. Then file reports with the FTC at reportfraud.ftc.gov and IC3 at ic3.gov. Speed matters most in the first 24 hours.
Q: Do banks refund money if you’ve been scammed? A: It depends on how the money was sent and how quickly you report. Unauthorized transactions are generally refunded after investigation. Authorized payments — where you approved the transfer under deception — are harder to dispute, but many banks do offer refunds under internal scam policies, especially when reported promptly and clearly documented as fraud. Always ask and always use the word fraud.
Q: Can I recover my money after being scammed? A: Partial or full recovery is possible for some payment types — particularly credit card payments and bank transfers reported within hours. Gift card payments and crypto transactions are very rarely recovered. The most important factor is how quickly you act. Even if full recovery isn’t possible, filing reports creates a record that supports any future dispute or legal action.
Q: What are common scammer phrases I should recognize? A: Common phrases include “don’t tell your bank,” “act within the next 30 minutes,” “buy gift cards and read us the numbers,” and “we’ll send a verification code — read it back to us.” Any request that involves secrecy, urgency, gift cards, or reading back codes you receive is a strong indicator of fraud regardless of who the caller claims to be.
Q: What is ghost tapping and how does it work? A: Ghost tapping is a fraud technique where scammers add stolen card details to a digital wallet on their own device and use contactless payment at physical terminals — without needing the physical card. Victims notice it through unexplained charges on their statement. If you suspect ghost tapping, contact your bank immediately to freeze the card and dispute the charges.
Key Takeaway
Getting scammed does not mean the situation is hopeless — it means the clock has started. The first 24 hours are when most of the meaningful action happens: contacting your bank, changing passwords, filing reports, and securing accounts. Recovery is not guaranteed, but it is more likely the faster you move. Scammers rely on victims feeling too embarrassed or confused to act — reporting quickly, clearly, and with documented evidence is how you fight back effectively.