Skip to main content
Scam Checker
Back to Guides

I Think I've Been Scammed — Now What? Immediate Recovery Steps

Updated 13 October 2026

Use Our Recovery Tool

If you are panicking, use our interactive assessment to build a practical action checklist. If money or account details are at risk, contact your bank through its official route.

Start Assessment →

Realising you may have been scammed is a horrible feeling. Your heart races, you feel sick, and you just want to fix it. First: breathe. You are not stupid, and you are not alone. Scams are designed to trick human brains, and they work on doctors, lawyers, and tech experts every single day.

The most important thing right now is speed. What you do in the next hour matters more than what you do next week.

Step 1: Identify What Was Compromised

Different scams require different fixes. Determine which bucket you fall into:

  • I clicked a link but didn't enter details.
  • I shared personal info (name, address, date of birth, phone).
  • I shared credentials (passwords, usernames, OTP codes).
  • I sent money (bank transfer, credit card, crypto, gift cards).
  • I gave remote access (downloaded AnyDesk, TeamViewer at someone's request).

Step 2: Immediate Damage Control

If you sent money via Bank/Card

Call your bank immediately. Do not email. Do not use chat bots. Call the fraud number on the back of your card. Tell them: "I have been scammed and I authorised a payment to a fraudster." Ask them to attempt a recall and freeze your account.

If you shared passwords or codes

Change your passwords now. Start with your email account, then your bank, then social media. If you use the same password everywhere, change it everywhere. Enable Two-Factor Authentication (2FA) immediately.

If you gave remote access

Disconnect your device from the internet. Turn off Wi-Fi or pull the ethernet cable. The scammer may still have access. Uninstall the software they asked you to download. Run a full antivirus scan. Ideally, have a professional check your device before reconnecting.

Step 3: Secure Your Identity

If you shared your driver's licence, passport, or tax ID:

  • Contact the issuer: Report the document as stolen/compromised.
  • Check your credit report: Look for any loans or credit cards you didn't apply for.
  • Contact IDCARE (Australia/NZ) or IdentityTheft.gov (US): They provide free, specialised support for identity theft.

Common "After-Scam" Scams (Recovery Scams)

⚠️ WARNING: Do not trust "Recovery Agents"

After you get scammed, you are a target for "Recovery Scams". Strangers on social media or search engines will claim they can "hack the scammer" and get your money back for a fee. These are also scammers. Only your bank or the police can help. Never pay someone to get money back.

Frequently Asked Questions

Will I get my money back?

It depends. If you paid by credit card, you have a good chance via a chargeback. If you sent a bank transfer, it is harder but possible if acted on quickly. Crypto and gift card payments are almost impossible to recover.

Should I report it to the police?

Report through the appropriate service: ReportCyber in Australia, Report Fraud in England, Wales and Northern Ireland, Police Scotland on 101 in Scotland, or IC3 in the US. Keep any report or reference number; your bank or insurer may ask for it, as Report Fraud explains. Do not wait for a reference number before contacting your bank about a suspicious payment.

I just clicked a link, am I safe?

Close the page and do not open unexpected downloads or install anything it suggests. A click alone does not prove infection, but entering no details does not guarantee safety. Keep your device updated. If you suspect harmful software downloaded, follow ACSC's recovery steps for your device; on a computer, update security software and run a scan. If you shared passwords, payment details or remote access, follow the relevant steps above.

You will get through this. It is expensive and stressful, but it is fixable. Take it one step at a time.

Not sure whether the message you received was a scam?

If you're still holding the original text, email, or link, paste it into our free scam checker before doing anything else. It analyses for phishing patterns, lookalike domains, and other fraud signals so you know exactly what you're dealing with.

Check a suspicious message, email, or link →

Related Guides

Bank Impersonation Scams: How Fraudsters Pose as Financial Institutions

Fake bank calls, texts, and spoofed caller IDs explained.

Scam Text Message Examples: SMS Fraud Patterns Explained

Real SMS scam templates: parcel delivery, bank alerts, and urgency tactics used worldwide.

How to Spot a Fake Link Before You Click

Subdomain tricks, lookalike domains, and URL red flags explained.

Suspicious about something you received?

Check what you received for warning signs with our free tool.

Open the damage-control checklist

Or search the community scam reports and the report lookup.