I Think I've Been Scammed — Now What? Immediate Recovery Steps
Updated 27 January 2026
Use Our Recovery Tool
If you are panicking, use our interactive assessment to get a personalised action plan in 30 seconds.
Start Assessment →Realising you may have been scammed is a horrible feeling. Your heart races, you feel sick, and you just want to fix it. First: breathe. You are not stupid, and you are not alone. Scams are designed to trick human brains, and they work on doctors, lawyers, and tech experts every single day.
The most important thing right now is speed. What you do in the next hour matters more than what you do next week.
Step 1: Identify What Was Compromised
Different scams require different fixes. Determine which bucket you fall into:
- I clicked a link but didn't enter details.
- I shared personal info (name, address, date of birth, phone).
- I shared credentials (passwords, usernames, OTP codes).
- I sent money (bank transfer, credit card, crypto, gift cards).
- I gave remote access (downloaded AnyDesk, TeamViewer at someone's request).
Step 2: Immediate Damage Control
If you sent money via Bank/Card
Call your bank immediately. Do not email. Do not use chat bots. Call the fraud number on the back of your card. Tell them: "I have been scammed and I authorised a payment to a fraudster." Ask them to attempt a recall and freeze your account.
If you shared passwords or codes
Change your passwords now. Start with your email account, then your bank, then social media. If you use the same password everywhere, change it everywhere. Enable Two-Factor Authentication (2FA) immediately.
If you gave remote access
Disconnect your device from the internet. Turn off Wi-Fi or pull the ethernet cable. The scammer may still have access. Uninstall the software they asked you to download. Run a full antivirus scan. Ideally, have a professional check your device before reconnecting.
Step 3: Secure Your Identity
If you shared your driver's licence, passport, or tax ID:
- Contact the issuer: Report the document as stolen/compromised.
- Check your credit report: Look for any loans or credit cards you didn't apply for.
- Contact IDCARE (Australia/NZ) or IdentityTheft.gov (US): They provide free, specialised support for identity theft.
Common "After-Scam" Scams (Recovery Scams)
⚠️ WARNING: Do not trust "Recovery Agents"
After you get scammed, you are a target for "Recovery Scams". Strangers on social media or search engines will claim they can "hack the scammer" and get your money back for a fee. These are also scammers. Only your bank or the police can help. Never pay someone to get money back.
Frequently Asked Questions
Will I get my money back?
It depends. If you paid by credit card, you have a good chance via a chargeback. If you sent a bank transfer, it is harder but possible if acted on quickly. Crypto and gift card payments are almost impossible to recover.
Should I report it to the police?
Yes. File a report with your local police or cybercrime reporting body (e.g., ReportCyber in Australia, Action Fraud in UK, IC3 in US). You will need the report number for insurance or banking claims.
I just clicked a link, am I safe?
Likely yes, if you didn't enter info or download a file. However, disconnect from the internet and run a virus scan just in case. Watch out for more spam messages, as they now know your number is active.
You will get through this. It is expensive and stressful, but it is fixable. Take it one step at a time.
Related Guides
Bank Impersonation Scams: How Fraudsters Pose as Financial Institutions
Fake bank calls, texts, and spoofed caller IDs explained.
Scam Text Message Examples: SMS Fraud Patterns Explained
Real SMS scam templates: parcel delivery, bank alerts, and urgency tactics used worldwide.
How to Spot a Fake Link Before You Click
Subdomain tricks, lookalike domains, and URL red flags explained.
Suspicious about a message you received?
Don't guess. Check it instantly with our free tool.
Check for Scam