What to Do If You've Been Scammed: The First 60 Minutes

The first sixty minutes after a scam are the most important. The window for bank recovery, account protection, and minimising further damage closes fast. This is not a moment for research — it is a moment for action in a specific sequence.

Work through this plan in order. If you are helping someone else who has been scammed, walk through it with them.

Step 1: Call your bank immediately — this is the most time-sensitive step

The number is on the back of your debit or credit card. Call it now, before doing anything else.

Tell them: you have been the victim of fraud. Give them the details of the transaction — the amount, the account it was sent to, the date and time. Ask them to issue a recall immediately. Ask them to put a fraud marker on your account.

In the UK, the Contingent Reimbursement Model means banks are required to reimburse victims of authorised push payment fraud in many cases — but the faster you report, the better your chances. Some banks have a dedicated 24-hour fraud line; for others, call the main number and state clearly that you need the fraud team.

If a card payment was made: Ask the bank to raise a chargeback. Card payments are generally easier to reverse than bank transfers.

If gift cards or cryptocurrency were used: These are very difficult to recover. Still report it, but manage your expectations. The priority becomes preventing further loss.

Step 2: Change passwords for any accounts that may be compromised

Start with your email account — if a scammer has access to that, they can use it to reset every other password you own. Then your online banking, then anything else the scammer might have seen credentials for.

Use a different device if possible, particularly if the scammer had any access to your computer. If you need to use the same device, disconnect from the internet first and reconnect only to change passwords.

Step 3: Place a fraud alert on your credit file

Contact one of the three UK credit reference agencies — Equifax, Experian, or TransUnion. By law, they must notify the other two. A fraud alert means any lender checking your credit must take extra steps to verify your identity before approving credit.

For stronger protection, apply for a CIFAS protective registration (cifas.org.uk, £25). This flags your record specifically as a known fraud victim, triggering enhanced checks before any financial product can be opened in your name.

US residents: Place a fraud alert with Equifax, Experian, or TransUnion (free). For stronger protection, freeze your credit at all three bureaus (also free). File a report at identitytheft.gov.

Step 4: Report to Action Fraud (UK) or the FTC (US)

UK: Report online at actionfraud.police.uk or call 0300 123 2040. You will receive a crime reference number — keep this. It is needed for insurance claims and may be useful if the case is investigated.

US: Report at reportfraud.ftc.gov. Also file with the FBI's Internet Crime Complaint Center at ic3.gov.

Also report to: the platform where the scam occurred (Facebook, WhatsApp, dating site, marketplace). This helps protect others. If you received scam mail, report it to Royal Mail (UK) or the Postal Inspection Service (US).

Step 5: Document everything before the trail goes cold

Screenshot every message, email, and online profile you have from the scammer. Note down phone numbers, times of calls, usernames, URLs, and any names or companies they used. Save bank transaction references.

This documentation is needed for your fraud report, your bank's investigation, and any insurance claim. Do it now, before messages disappear or accounts are deleted.

Step 6: Secure your accounts and monitor closely

Enable two-factor authentication on email and banking. Check your bank statements daily for the next four weeks. Set up account alerts for any transaction over a small threshold (many banking apps allow this). Check your credit report in 30 and 90 days.

Watch out for recovery scams

The emotional side

Scam victims frequently feel shame, embarrassment, and self-blame. These feelings are understandable but misplaced. You were targeted by professionals who have perfected techniques that defeat even the most cautious people. Reporting quickly, without embarrassment, is the single most important thing you can do — both for your own recovery and to protect the next person.

Tell someone you trust. Keeping it private isolates you and makes the recovery harder. Action Fraud also offers victim support resources.