how to use internet.

← Back to Scams & phishing

Protect yourself from online scams

Progress 0 / 12
Chapters (12)

What to do if targeted or compromised

Despite our best efforts, anyone can fall victim to a scam or have their information compromised. What matters most is how quickly and effectively you respond. This chapter provides a comprehensive, step-by-step action plan for different scenarios.

Important Mindset: Don’t Panic, But Act Fast

Key principles:

  • ✅ Time is critical: Faster response = better chance of limiting damage
  • ✅ Don’t feel ashamed: Scammers are professionals; anyone can be targeted
  • ✅ Action over blame: Focus on damage control, not self-criticism
  • ✅ Document everything: Save all evidence
  • ✅ Report widely: Help authorities stop scammers
  • ✅ Be realistic: Some losses are unrecoverable, focus on preventing further damage

Reporting helps:

  • Stop scammers from targeting others
  • Build law enforcement cases
  • Help payment processors identify fraud patterns
  • May be required for insurance/tax deductions

Scenario 1: You Sent Money to a Scammer

Immediate Actions (Within Minutes-Hours):

If You Paid By Credit Card:

  1. Call credit card issuer immediately

    • Number on back of card
    • Report fraudulent charge
    • Request immediate chargeback
    • Get case/reference number

  2. Timeline:

    • You have 60 days to dispute charges
    • Act within 24-48 hours for best results
    • Freeze card to prevent additional charges

  3. What to tell them:

    • “I was scammed, this is a fraudulent charge”
    • Provide transaction details
    • Explain briefly what happened
    • Request chargeback under “goods/services not received” or “fraud”

  4. Success rate:

    • High if reported quickly
    • Credit cards offer strong buyer protection
    • Federal law limits liability to $50 (often $0 with issuer)

If You Paid By Debit Card:

  1. Call bank immediately

    • Report unauthorized transaction
    • Request reversal
    • Freeze/cancel card

  2. Timeline:

    • Report within 2 business days: max $50 liability
    • Report within 60 days: max $500 liability
    • After 60 days: unlimited liability

  3. Success rate:

    • Lower than credit cards
    • Depends on bank’s fraud protection policies
    • Money may already be withdrawn from account

If You Paid By Wire Transfer:

Western Union / MoneyGram:

  1. Call immediately:

    • Western Union: 1-800-448-1492
    • MoneyGram: 1-800-926-9400

  2. Request cancellation if:

    • Money hasn’t been picked up yet (rare)
    • May be able to stop transfer

  3. File complaint:

    • Both companies have fraud departments
    • Won’t recover funds but creates record

  4. Success rate:

    • Very low (5-10% if caught immediately)
    • Most money is picked up within hours
    • Once picked up, essentially unrecoverable

Bank Wire Transfer:

  1. Call your bank immediately

  2. Request recall:

    • If to domestic bank, may be recalled if not yet credited
    • International wires nearly impossible to recall

  3. Success rate:

    • Low (10-20% if within hours)
    • Depends on receiving bank cooperation

If You Paid By Payment App (Venmo, Zelle, Cash App):

  1. Report within the app:

    • Open transaction
    • Report as fraud/scam
    • Provide details

  2. Contact support:

    • Venmo: support.venmo.com
    • Zelle: zellepay.com/support
    • Cash App: cash.app/help

  3. Success rate:

    • Very low (5-15%)
    • These apps are designed for friends/family (no buyer protection)
    • Zelle is particularly difficult to recover

  4. Contact your bank:

    • If sent from linked bank account
    • Report as unauthorized/fraudulent
    • Limited success but creates record

If You Paid By Gift Cards:

  1. Contact gift card company immediately:

    • iTunes/Apple: 1-800-275-2273
    • Amazon: 1-888-280-4331
    • Google Play: support.google.com/googleplay
    • Visa/Mastercard gift cards: Number on back

  2. Provide:

    • Card numbers (front and back)
    • Purchase receipt if available
    • Details of scam

  3. Success rate:

    • Very low (5-10%)
    • Most funds redeemed immediately
    • Some companies more helpful than others

  4. Reality check:

    • Gift cards are designed to be irreversible
    • Scammers use them because they’re untraceable
    • Once redeemed, recovery is nearly impossible

If You Paid By Cryptocurrency:

  1. Report to crypto exchange:

    • If you sent from Coinbase, Kraken, etc.
    • Provide wallet addresses
    • Request investigation
    • They may freeze receiving account

  2. Report wallet addresses:

    • CipherTrace, Chainalysis (blockchain analysis)
    • Some track stolen crypto

  3. File police report:

    • Required for any potential recovery
    • Provides documentation for taxes

  4. Success rate:

    • Extremely low (1-2%)
    • Crypto transactions are irreversible by design
    • Anonymous nature makes tracking difficult
    • Almost never recovered

General Financial Actions:

  1. Document everything:

    • Save receipts, confirmations, transaction IDs
    • Screenshot conversations, emails, texts
    • Save websites, phone numbers, names used
    • Note exact dates and times

  2. Report to authorities:

    • FTC: ReportFraud.ftc.gov (file complaint)
    • FBI IC3: ic3.gov (if loss over $1,000)
    • Local police: File report (needed for insurance, taxes)
    • State Attorney General: consumer protection division

  3. Report to platforms:

    • Where you met the scammer (dating app, social media, etc.)
    • Helps get scammer accounts shut down

Scenario 2: You Gave Personal Information

If you provided any of these, take immediate action:

  • Social Security Number
  • Driver’s license or state ID number
  • Bank account numbers
  • Credit card numbers
  • Passwords
  • Date of birth
  • Mother’s maiden name
  • Security question answers

Immediate Actions:

  1. Place fraud alert with credit bureaus:

    Contact one (automatically notifies other two):

    • Equifax: 1-888-766-0008 or equifax.com/personal/credit-report-services
    • Experian: 1-888-397-3742 or experian.com/fraud
    • TransUnion: 1-800-680-7289 or transunion.com/fraud

    Fraud alert:

    • Lasts 1 year (renewable)
    • Free
    • Requires creditors to verify identity before opening accounts
    • Doesn’t affect credit score

  2. Consider credit freeze (stronger protection):

    Contact all three bureaus:

    • Freezes prevent new credit accounts from being opened
    • Free by federal law
    • Can unfreeze temporarily when applying for credit
    • Most effective identity theft protection

    How to freeze:

    • Online at each bureau’s website
    • Receive PIN to manage freeze
    • Freeze and unfreeze anytime

  3. Monitor credit reports:

    • AnnualCreditReport.com - free reports from all 3 bureaus
    • Check every 4 months (rotate bureaus)
    • Look for accounts you didn’t open
    • Check for incorrect personal information

If SSN Was Compromised:

  1. Report to Social Security Administration:

    • Call 1-800-772-1213
    • Visit ssa.gov/myaccount
    • Request SSA-7028 form (request for reinvestigation)

  2. Report to IRS:

    • Call 1-800-908-4490
    • Request IP PIN (Identity Protection PIN)
    • Protects against fraudulent tax returns
    • File Form 14039 if tax return filed in your name

  3. File Identity Theft Report:

    • IdentityTheft.gov (FTC site)
    • Creates official identity theft report
    • Helpful for disputes with creditors

If Bank Account Info Was Compromised:

  1. Call bank immediately:

    • Close compromised account
    • Open new account with new number
    • Request new debit card
    • Change online banking password

  2. Update automatic payments:

    • Direct deposits (payroll, Social Security)
    • Automatic bill payments
    • Linked accounts

  3. Monitor account daily:

    • Set up text/email alerts for all transactions
    • Check daily for 60 days

If Passwords Were Compromised:

  1. Change password immediately:

    • On compromised account
    • On any account using same password
    • Make passwords unique and strong

  2. Enable two-factor authentication (2FA):

    • On all important accounts
    • Use authenticator app (not SMS if possible)

  3. Check for unauthorized activity:

    • Review recent logins and sessions
    • Log out of all devices
    • Check account recovery information (email, phone)

  4. Use password manager:

    • Generate unique strong passwords
    • Prevents using same password across sites
    • Options: 1Password, Bitwarden, LastPass

If Email Was Compromised:

  1. Change password immediately:

    • Use strong, unique password
    • Enable 2FA

  2. Check forwarding rules:

    • Scammers often set up forwarding to monitor your email
    • Look in settings for unauthorized rules

  3. Review sent mail:

    • Scammers may send phishing from your account
    • Warn contacts if you see suspicious sent mail

  4. Update security questions:

    • Change answers to security questions
    • Use nonsense answers scammers can’t research

  5. Alert contacts:

    • Warn friends/family about potential scam emails from you

Immediate Actions:

  1. Disconnect from internet:

    • Prevents malware from communicating with server
    • Stops data exfiltration
    • Don’t turn off computer (may lose evidence)

  2. Run antivirus scan:

    • Full system scan with updated antivirus
    • Windows Defender (built-in) or Malwarebytes
    • Let scan complete

  3. Change passwords (from different device):

    • Email, banking, important accounts
    • Don’t change passwords on compromised device until cleaned

  4. Check for keyloggers:

    • Malware may record your keystrokes
    • Change all passwords from clean device

  5. Back up important files:

    • Before any system changes
    • To external drive (disconnect after backup)

If Ransomware:

  1. Do NOT pay ransom:

    • No guarantee files will be decrypted
    • Funds criminals
    • May be targeted again

  2. Disconnect immediately:

    • Prevent spread to network/other devices

  3. Report:

    • FBI IC3: ic3.gov
    • No More Ransom project: nomoreransom.org (free decryption tools)

  4. Restore from backup:

    • If you have clean backup
    • May be only recovery option

Professional Help:

  • Significant infection: Professional computer forensics/cleaning
  • Business: IT security professional
  • Can’t remove: Factory reset/clean Windows install may be necessary

Scenario 4: Identity Theft Discovered

Signs of identity theft:

  • Bills for accounts you didn’t open
  • Calls from debt collectors about debts you don’t owe
  • Fraudulent charges on accounts
  • Tax return rejected (someone filed with your SSN)
  • Unexpected credit inquiries
  • Mail doesn’t arrive

Comprehensive Action Plan:

  1. File identity theft report:

    • IdentityTheft.gov (FTC)
    • Creates official recovery plan
    • Provides affidavit for disputing fraud

  2. Place fraud alert or credit freeze:

    • See “Scenario 2” above for instructions

  3. Close fraudulent accounts:

    • Contact fraud department of company
    • Provide identity theft report
    • Request “fraud victim” status in writing
    • Don’t pay fraudulent charges

  4. Dispute fraudulent information:

    • Contact credit bureaus
    • File disputes for incorrect information
    • Provide identity theft report
    • Request fraudulent accounts be removed

  5. File police report:

    • Bring identity theft report from FTC
    • Get copy of police report (needed for creditors)

  6. Contact your creditors:

    • Banks, credit card companies
    • Place fraud alerts on accounts
    • Request new account numbers

  7. Update passwords and security:

    • All financial accounts
    • Email and important accounts
    • Enable 2FA everywhere possible

  8. Monitor for ongoing fraud:

    • Check credit reports monthly (for 12 months)
    • Set up account alerts
    • Review statements carefully

Scenario 5: Business Email Compromise (For Employees)

If you realized you authorized fraudulent wire transfer or gave sensitive company information:

  1. Report immediately to:

    • Your supervisor
    • IT/Security department
    • Finance/Accounting department
    • Do NOT wait or try to fix yourself

  2. If wire transfer:

    • Contact bank immediately (company’s account)
    • Request wire recall
    • May have 24-hour window

  3. If credentials compromised:

    • Change passwords immediately
    • Revoke access to systems
    • IT should check for unauthorized access

  4. Preserve evidence:

    • Don’t delete emails
    • Screenshot conversations
    • Save email headers

  5. Company should:

    • Report to FBI (BEC cases)
    • Contact insurance carrier
    • Review security procedures
    • Implement additional training

Important: Don’t hide it. Early reporting gives best chance of recovery and prevents further damage.

Tax and Insurance Considerations

Tax Deductions for Scam Losses:

  • Theft losses: May be tax-deductible
  • Requirements:
    • Police report filed
    • Documented evidence
    • IRS Form 4684
  • Consult CPA or tax professional

Insurance Claims:

  • Homeowners/renters insurance: May cover some fraud losses
  • Identity theft insurance: If you have it, file claim
  • Business insurance: Cyber insurance may cover BEC losses
  • Requirements: Police report, documentation

Recovery Scams (Don’t Be Victimized Twice)

After losing money, beware of:

“Recovery services” offering to get your money back:

  • Claim they can recover lost funds
  • Request upfront fees ($500-$5,000)
  • Almost always scams

“Lawyers” or “investigators”:

  • Cold call offering assistance
  • No lawyer requires payment before services
  • Verify credentials with state bar

“Government officials”:

  • Claim you need to pay fees/taxes to unfreeze accounts
  • Real government agencies don’t work this way

“Hackers” who will “hack back” the scammers:

  • Illegal and ineffective
  • Will take your money

“Refund” scams:

  • Scammer contacts you offering refund
  • Needs your bank info or wants you to pay processing fees
  • Same scammer or accomplice

Reality: If someone promises they can definitely recover your lost funds (especially crypto, wire transfers, gift cards), they’re scamming you again.

Legitimate Recovery Resources

Government Resources:

  • FTC Identity Theft: IdentityTheft.gov (free recovery plan)
  • FBI IC3: ic3.gov (report, not recovery)
  • AARP Fraud Watch: aarp.org/fraudwatchnetwork (free support)

Credit Bureaus (fraud assistance):

  • Equifax, Experian, TransUnion fraud departments
  • Free fraud alerts and credit monitoring

Non-Profit Support:

  • AARP Fraud Network: Support for scam victims
  • Better Business Bureau: BBB.org/scamtracker
  • Identity Theft Resource Center: idtheftcenter.org (free victim assistance)
  • Local legal aid societies (free for low-income)
  • State Attorney General consumer protection

Emotional Support:

  • AARP Fraud Victim Support: 877-908-3360
  • Scam survivor forums: r/scams, various support groups
  • Counseling: Many therapists specialize in fraud victims

Protecting Yourself Going Forward

Preventive Measures:

  1. Enable security features:

    • Two-factor authentication everywhere
    • Biometric login where available
    • Account alerts for all transactions

  2. Use strong, unique passwords:

    • Password manager
    • Never reuse passwords

  3. Monitor accounts:

    • Check bank/credit card statements weekly
    • Annual credit reports (AnnualCreditReport.com)
    • Set up transaction alerts

  4. Limit information sharing:

    • Shred sensitive documents
    • Don’t overshare on social media
    • Be skeptical of requests for information

  5. Stay educated:

    • Review common scams regularly
    • Share knowledge with family/friends
    • Take this type of training seriously

  6. Have emergency plan:

    • Know who to call (save numbers)
    • Have credit bureau numbers saved
    • Know your banks’ fraud phone numbers

Special Situation: If Someone You Love Is Being Scammed

What to do:

  1. Don’t shame them:

    • Makes them defensive
    • May prevent them from getting help
    • Scammer may use your criticism to isolate them further

  2. Present evidence calmly:

    • Show red flags objectively
    • Use examples from this course
    • “This matches the pattern of [specific scam]”

  3. Acknowledge sophistication:

    • “These scammers are professionals”
    • “Anyone can fall for this”
    • “I’m concerned because I care”

  4. Offer to help verify:

    • “Let’s call [bank/company] together to verify”
    • “Let’s reverse image search their photos”
    • “Let me help you research this investment”

  5. If they won’t stop:

    • Document everything (may need for elder services)
    • Consider POA if elderly/cognitive decline
    • Contact adult protective services if needed
    • Consult elder law attorney

  6. Protect shared accounts:

    • If you share finances, secure them
    • May need to separate finances temporarily

Key Takeaways

  • ✅ Act immediately - time is critical for limiting damage
  • ✅ Don’t feel ashamed - anyone can be targeted
  • ✅ Document everything - save all evidence
  • ✅ Report widely - FTC, FBI IC3, police, companies
  • ✅ Credit card disputes have highest success rate
  • ✅ Wire transfers, gift cards, crypto are nearly impossible to recover
  • ✅ Place fraud alert or credit freeze if personal info compromised
  • ✅ Beware recovery scams - don’t be victimized twice
  • ✅ Learn and protect going forward - education is best prevention

Final Message: Being targeted by a scam doesn’t mean you failed—it means criminals targeted you. What matters is how you respond. Fast action, thorough reporting, and implementing better security going forward are the keys to recovery. Share what you’ve learned to protect others. Together, we can make digital deception obsolete.

Quick Reference: Who to Call

Financial:

  • Credit cards: Number on back of card
  • Bank: Number on statement/card
  • Equifax: 1-888-766-0008
  • Experian: 1-888-397-3742
  • TransUnion: 1-800-680-7289

Government:

  • FTC: ReportFraud.ftc.gov
  • FBI IC3: ic3.gov
  • IRS (identity theft): 1-800-908-4490
  • SSA: 1-800-772-1213

Support:

  • AARP Fraud Victim Support: 877-908-3360
  • Identity Theft Resource Center: 888-400-5530

Payment Services:

  • Western Union: 1-800-448-1492
  • MoneyGram: 1-800-926-9400
  • Zelle: zellepay.com/support
  • Venmo: support.venmo.com

Save these numbers in your phone now.

Author:
How To Use Internet
Last updated:
11/30/2025