After the scam call: what to do in the first hour

The hour after you realize you have been scammed matters more than the next ten. Money has not always moved yet. Banks still have time to reverse charges. Accounts can be frozen before changes propagate. The window is not long, but it is real — and most people lose it because they freeze, or feel ashamed, or sit in disbelief instead of acting.

This is a calm playbook for the sixty minutes after the call. It assumes nothing about what kind of scam it was. It works whether you handed over a credit card number, read an SMS code aloud, granted a remote-desktop session, or simply realized the friendly "fraud department" agent from twenty minutes ago was the actual fraud.

Step one: hang up and stay off the phone

If you are still on the call, end it now. Do not explain, do not negotiate, do not wait for a transfer. Hang up.

If a "supervisor" or a "second agent" calls back within minutes, that is not a coincidence — it is the same operation. Real institutions do not coordinate that quickly. Send those calls to voicemail and keep the line free.

The cleanest sign that the original call was a scam is the urgency of any follow-up.

Step two: write down what you remember

Open a note on your computer or a piece of paper and dump everything: the caller's number, the time, who they said they were, what they asked for, what you said, what you typed, what you clicked. Do this before adrenaline blurs the details.

This is the document you will read off when you call your bank, the card company, and law enforcement. Five minutes spent here saves an hour of "wait, what did they say again?" later.

Step three: call your bank — from the back of your card

If money or card details were involved, this is the most important call of the hour. But do not use any number the scammer gave you, and do not call back the number that called you. Look at the back of your debit or credit card and dial the number printed there.

Tell them, plainly: "I just gave information to someone I now believe was a scammer." They have a script for this. They can flag the account, freeze the card, reverse pending charges, and start a fraud claim. Charges that have not posted yet are the easiest to claw back. Charges from the last twenty-four hours are second-easiest. After that, the path narrows.

If a wire transfer has gone out, ask specifically for a "wire recall." That is a real, time-sensitive process, and naming it gets you to the right desk faster.

Step four: lock the rest of the dominoes

Scammers rarely stop at one piece of information. If you read out an SMS code, the account that code belonged to is now exposed; sign in from a trusted device and rotate the password. If you gave a Social Security number, place a fraud alert with one of the three credit bureaus — the bureau you call is required to notify the other two. If you granted screen access to your computer, disconnect it from Wi-Fi, then have a real technician inspect it before you log in to anything sensitive again.

Change passwords on a different device than the one the scammer touched. If your phone may have been compromised in a SIM swap, do this from a laptop on a network the phone is not on.

Step five: file the reports

In the United States, file with the FTC at reportfraud.ftc.gov and, if money was lost or an account was breached, with the FBI's Internet Crime Complaint Center at ic3.gov. For tax-themed scams, add a report to the Treasury Inspector General for Tax Administration. Outside the US, file with your national equivalent: Action Fraud in the UK, the Canadian Anti-Fraud Centre, ScamWatch in Australia.

Reporting rarely returns the money on its own. What it does is feed pattern data — the same number, script, or wallet appearing across hundreds of reports — that helps carriers and platforms shut the operation down. Five minutes of typing matters more than it feels like.

If a real crime occurred — money lost, identity stolen — file a local police report too. You will need the case number for some bank claims and insurance policies.

Step six: tell one person

Not the internet. One person you trust, out loud. The shame loop is the scammer's last tool, and saying the words "I got scammed" to another human breaks it. The earlier in the hour you do this, the better the rest of the hour goes.

And the part that comes next

Within a day or two, expect a friendly "recovery" call from someone offering to get your money back for a fee. Ignore it. That is the same network, running the second act on a list of people who have already proven willing to pick up. Real recovery comes from your bank, your card issuer, and the agencies you reported to — none of whom will cold-call you about it.

If you want to know who the original number actually belongs to before you hang up for good, look it up and add a community report. Each report makes the next person's call a little less convincing.