1. Stop the interaction
Do not send another payment to “unlock” a refund, release an account, pay a tax, complete verification or prove cooperation. Do not install more software or give additional codes.
2. Try to stop or reverse money movement
Contact the bank, card issuer, e-wallet, payment app, wire service, cryptocurrency platform or other provider you used. Tell them the transaction was connected to fraud and ask what can still be stopped, reversed, frozen or disputed.
Time matters. Keep the case/reference number and the name or identifier of each institution you contacted.
3. Secure exposed accounts
If a password was shared, change it immediately and change any other account that reused it. Start with email because access to email can be used to reset many other accounts. Turn on multifactor authentication where available.
If you shared card or bank details, follow the institution’s fraud instructions. If identity information was exposed, use your country’s identity-theft resources and monitoring options.
4. Check affected devices
If you installed software, gave remote access, opened a suspicious attachment or think malware was installed, stop using the device for banking or other sensitive logins until you have updated security software and run appropriate scans.
5. Preserve evidence
Save messages, emails, usernames, profile URLs, phone numbers, website addresses, transaction receipts, account numbers, wallet addresses, QR codes and screenshots. Do not edit originals if you can avoid it.
6. Report in the right places
Reporting depends on where you live and what happened. The useful sequence is often: payment provider or bank, affected platform/service, relevant regulator, then law enforcement or national cybercrime reporting channel.
7. Expect a second approach
Scammers may return pretending to be investigators, lawyers, regulators or recovery agents who already know details of your loss. Treat unsolicited recovery offers as a new verification problem.
If the incident began as a job offer
If you paid a supposed employer to unlock commissions, uploaded identity documents, granted remote access, or received money to forward as a supposed employee, the next steps differ. Follow the WhatsApp and recorded-call job offer response guide for scenario-specific steps alongside the immediate actions above.
Common questions
Can I definitely get my money back?
No. Recovery depends on the payment method, timing, provider rules, jurisdiction and facts. Acting quickly can improve the options, but nobody can guarantee recovery.
Should I pay someone who says they can recover the money?
Be extremely cautious. People who already lost money are often targeted by refund or recovery scams, especially when the service demands upfront fees or guarantees success.
Sources and references
These sources support the factual guidance and analysis on this page. For reporting, legal, financial or provider-specific procedures, follow the linked organization’s current instructions.
- What To Do if You Were ScammedU.S. Federal Trade Commission
- IdentityTheft.gov recovery planningU.S. Federal Trade Commission
- Refund and Recovery ScamsU.S. Federal Trade Commission