The first hour after a mistake
You clicked, typed a password or sent a payment. What you do in the next hour decides how much it costs.
If you typed a password
Go to the real site by typing its address and change the password there. If the site has a “sign out of all devices” option, use it. Change the same password anywhere else you used it, then turn on a second sign-in step.
For a work account, tell your IT team before you do anything else. They can see sign-ins you cannot see.
If you opened a file or installed something
Disconnect the device from the network: turn off Wi-Fi or unplug the cable. Do not switch the device off, because the people who investigate may need what is in its memory. Then call IT from another device.
On a personal computer, run a full scan with the built-in security tool. Afterwards, change the passwords you used on that computer from a different device.
If you sent money or card details
Call the bank on the number printed on your card. Ask them to stop or recall the payment and to block the card. A transfer can sometimes be stopped within hours. After that, report the fraud to the police or your national reporting service.
Tell people, without embarrassment
Attackers rely on the fact that people feel foolish and stay quiet. A report within minutes lets others block the same message for everyone. Careful and experienced people get caught too, usually on a busy day.
This note is our own plain-language summary. For the full guidance, read the original: https://consumer.ftc.gov/articles/what-do-if-you-were-scammed
Disconnect from the network, but leave the device switched on.