You Gave a Scammer Your Data or Money: What to Do Right Now

Realising you've just been scammed by phone is unsettling, but acting quickly and methodically can significantly limit the damage. Whether you shared a card number, gave a one-time password, clicked a link, or transferred money, the first hour matters most. This guide walks through what to do immediately, in order of priority, so you can protect your finances, your accounts, and your identity.

1. Stay calm and stop all contact

If you're still on the phone or messaging the scammer, end the conversation immediately. Do not explain, argue, or try to get your money back yourself — this often leads to follow-up scams where fraudsters pose as "recovery agents" or bank staff offering to help. Block the number and do not answer calls from it or similar numbers again.

2. Protect your money first

If you shared banking details, card numbers, or made a transfer, contact your bank immediately using the number on the back of your card or on their official website — never a number given to you by the caller.

• Ask the bank to freeze or block the affected card or account.
• Report any transaction you didn't authorise and ask about a chargeback or fraud claim.
• If you gave out online banking credentials or a one-time code, ask the bank to lock online access and reissue credentials.
• Set up a temporary alert or monitoring on the account if your bank offers it.

The sooner you report unauthorised transactions, the better your chances of recovering funds, since banks and card networks often have short windows for disputing charges.

3. Change passwords and secure your accounts

If the scam involved a phishing link, a fake login page, or you read out a code, assume the related account is compromised.

• Change the password for that account immediately, from a device you trust.
• If you reuse that password anywhere else, change it there too — attackers often try the same password across multiple sites.
• Turn on two-factor authentication where it isn't already active, ideally using an authentication app rather than SMS.
• Log out of all active sessions/devices if the account offers that option, and review recent login activity for anything unfamiliar.

4. Check what exactly was exposed

Think through the call carefully: did you share your full card number, CVV, ID number, address, date of birth, a password, or a one-time code? Different data types create different risks — a stolen ID number can enable identity fraud even without banking access, while a one-time code paired with earlier phishing can grant direct account entry. Make a short written note of what was shared and when; this will help you when reporting the incident and when monitoring for follow-up fraud.

5. Watch for identity theft signs

If personal identification details were exposed, keep an eye on:

• Unexpected credit applications, loans, or new accounts opened in your name.
• Unfamiliar entries on your credit report or credit-monitoring service.
• Mail or emails confirming purchases, subscriptions, or accounts you didn't create.

If your country offers a credit freeze or fraud alert service through a credit bureau, consider using it, especially if a national ID or full financial profile was shared.

6. Report the incident

Reporting helps authorities track scam patterns and can sometimes assist in recovering losses or stopping further victims.

• File a report with your national consumer-protection or anti-fraud authority, or the cybercrime reporting channel your country provides.
• Notify your mobile carrier if the scam involved SIM-swapping, spoofed calls, or suspicious SMS activity on your line.
• Report the number on a phone-number lookup and reporting service like this one, so others searching that number can be warned.
• If the scam happened through a specific platform (a messaging app, marketplace, or social network), report it through that platform's fraud or safety reporting tool as well.

7. Warn people close to you

Scammers sometimes use information from one victim to target their contacts, especially if an email or messaging account was compromised. Let close family or colleagues know briefly what happened so they can recognise a similar approach if it comes their way.

8. Document everything

Keep records as you go: screenshots of messages, the number that called, the time and date, what was said, and any transaction confirmations. This documentation is useful for your bank, for official reports, and for any follow-up disputes.

Checklist for the first 24 hours

• Stopped all contact with the scammer and blocked the number.
• Called the bank using the number on your card, not one given by the caller.
• Changed passwords on any affected accounts and enabled two-factor authentication.
• Noted exactly what information or money was shared.
• Reported the incident to the relevant authority and your mobile carrier if needed.
• Reported the phone number to a reputation service so others are warned.
• Told close contacts if there's a risk of follow-up scams.

Being scammed is not a reflection of carelessness — these calls are designed by professionals to create urgency and confusion. What matters most now is the speed and order of your response: protect the money, lock down the accounts, and report the number so it can be flagged for others.