Skip to main content

    What to Do After Responding to a Scam

    Stop contact, contact the provider involved and secure any exposed accounts. Act promptly, but do not pay anyone who guarantees they can recover your money.

    By ZoraSafe · Content reviewed

    Start with what happened

    A reply, a payment, a shared password and installed remote-access software need different responses. Write down what you did, when it happened and which accounts or devices were involved. If someone is in immediate danger, contact local emergency services.

    Sources: FTC: What to do if you were scammed

    If money was sent

    Contact your bank, card issuer, payment app, wire service or other payment provider through its official channel. Explain that you suspect fraud and ask what recall, reversal, dispute or protection options apply. Keep receipts and reference numbers.

    Processes and rights vary by payment method and circumstances. Cryptocurrency and other transfers may be difficult to reverse. Neither ZoraSafe nor a report to an agency guarantees a refund.

    Sources: FTC: What to do if you were scammed

    If an account or device was exposed

    1. From a trusted device, open the provider’s official recovery process. Secure your email account if it can reset other accounts.
    2. Change exposed or reused passwords. Review recovery addresses, phone numbers, connected apps and forwarding rules.
    3. Review and revoke unfamiliar sessions using the provider’s security settings, and enable a stronger MFA option where available.
    4. If remote access or software was installed, stop using that device for sensitive activity and get trusted technical help.
    5. If identity information was exposed, use IdentityTheft.gov’s guidance for the data involved.

    Sources: FTC: How to recover your hacked email or social media account; FTC: What to know about identity theft; FTC: What to do if you were scammed

    Preserve evidence and tell the right people

    Save messages, usernames, URLs, receipts and timestamps without reopening suspicious attachments. Report to the FTC through ReportFraud.ftc.gov and follow relevant law-enforcement or provider instructions. Tell your employer’s IT or fraud team if work access or payments were involved. Warn contacts if your account sent fraudulent messages.

    Sources: FTC: What to do if you were scammed; FTC: How to recover your hacked email or social media account

    Expect follow-up recovery scams

    Someone offering guaranteed recovery, demanding an upfront fee or asking for access to your wallet or account may be another scammer. Return to the provider through a channel you found independently. Continue reviewing account activity and keep a record of follow-up reports.

    Sources: FTC: Refund and recovery scams

    Sources and product references

    Reviewed 2026-10-07. Source dates and scope matter; a linked source supports the associated guidance, not every claim about every product.