If you believe you interacted with a scammer, such as responding to a fake job offer, clicking a link, opening a document, or sharing information, take the steps below. Acting quickly can limit harm and help protect others.
End all communication with the scammer
Do not reply, click links, or open attachments
Do not try to fix the situation by continuing the conversation
Once a scammer knows you are responsive, continued contact increases risk.
Change passwords immediately for any potentially affected accounts:
School or work accounts
Social media
Financial or shopping accounts
If you reused the same or similar passwords anywhere else, change those as well.
Important:
If you store passwords in your browser (Chrome, Edge, Firefox) and your email or Google or Microsoft account was compromised, assume all saved passwords are compromised.
Turn on MFA wherever it is available:
Authentication apps or hardware tokens are more secure than SMS
Use SMS only if no other option exists
Remember:
No legitimate organization will ask for your password or MFA code
Never approve a login request you did not initiate
Reporting helps protect others and supports investigations.
Use built-in reporting tools in email and cloud platforms
Report scams on any platform where the interaction occurred
If an organization is being impersonated, report it using their official website
Do not use contact information provided by the scammer.
If you shared financial information, sent money, or deposited a check:
Contact your bank or card issuer immediately using a trusted method
Phone number on the back of your card
Official website or mobile app
Scammers may impersonate banks or other organizations
Do not trust inbound calls, texts, or emails
Hang up and contact the organization directly using an official channel
If the contact was legitimate, it can be confirmed this way.
Keeping devices updated is one of the most effective protections.
Ensure all devices are fully up to date
Apply security patches promptly
Antivirus scans can help, but they are not sufficient on their own. Modern protection relies heavily on operating system security and updates.
Watch for signs of ongoing or delayed impact:
Review bank and credit card activity
Check for unusual logins or account changes
Monitor your credit report
Consider placing a free credit freeze or fraud alert with major credit bureaus.
If you lost money or shared sensitive personal information:
Contact your local law enforcement agency
File reports with appropriate fraud or cybercrime authorities
Save all related evidence, including emails, messages, screenshots, and receipts
You may need this documentation later.
Scams rely on urgency, pressure, and trust.
Be cautious by default. Do not assume inbound messages are legitimate
Pause before clicking, replying, or sharing information
Verify requests using trusted contact methods
Share your experience and this site with others. Awareness helps protect everyone.
If something feels off, stop and verify before taking action.
Think before you click. Attackers are targeting your credentials and personal information.