Scam Detective

What to Do If You Gave Info to a Scammer

February 20, 2026

It happens to smart people every day. You clicked a link, entered your login, replied with personal information, or gave a caller your Social Security number — and then realized something was wrong. The sinking feeling is awful, but what you do in the next few hours matters far more than the mistake itself.

This guide walks you through immediate damage control, step by step.

Step 1: Stop All Contact with the Scammer

If you're on the phone, hang up. If you're in an email thread, stop replying. If you're on a website, close the tab. Do not try to confront the scammer or "get your money back" by continuing to engage — that's exactly what they want.

Block the phone number, email address, or social media account they used to reach you.

Step 2: Change Compromised Passwords — Now

If you entered a password on a phishing site or gave login credentials to someone, change that password immediately. Then change it on every other account where you used the same password (this is why password reuse is dangerous).

Priority order:

  1. Email account (this is the master key — password resets for everything else go here)
  2. Banking and financial accounts
  3. Social media
  4. Any account tied to the same password

Enable two-factor authentication (2FA) on every account that supports it. An authenticator app (Google Authenticator, Authy) is more secure than SMS-based 2FA.

Step 3: Freeze Your Credit

If the scammer has your Social Security number, date of birth, or enough personal information to open accounts in your name, freeze your credit at all three bureaus immediately. This is free and prevents anyone — including you — from opening new credit lines until you lift the freeze.

Each bureau gives you a PIN to lift the freeze later. Store these PINs somewhere safe — not in your email.

Step 4: Contact Your Bank

If you shared financial information (bank account numbers, debit/credit card numbers, or made a payment to the scammer):

  • Call your bank's fraud department using the number on the back of your card — not a number the scammer gave you.
  • Request a new card number if your card was compromised.
  • Ask about reversing recent unauthorized charges.
  • Set up transaction alerts so you're notified of any new charges.

For wire transfers or cryptocurrency payments, contact the bank or exchange immediately. These are harder to reverse, but acting quickly gives you the best chance.

Step 5: File Official Reports

Reporting creates a paper trail that helps law enforcement and protects you legally.

  1. FTC: File at ReportFraud.ftc.gov. This feeds into the Consumer Sentinel database used by over 2,800 law enforcement agencies.
  2. FBI IC3: If you lost money or the scam involved a cybercrime, file at ic3.gov.
  3. Local police: File a police report, especially if identity theft is involved. You may need the report number for disputes with creditors.
  4. State Attorney General: Most states have a consumer protection division. Find yours at naag.org.

Step 6: Monitor for Identity Theft

Even after freezing your credit, monitor for signs that your information is being used:

  • Check your credit reports weekly at AnnualCreditReport.com (free).
  • Watch for unexpected bills, medical statements, or collection notices.
  • Monitor your email for password reset requests you didn't initiate.
  • Check your Social Security statement at ssa.gov for unreported income (a sign someone is using your SSN for employment).

Consider setting up a fraud alert (different from a credit freeze) — this requires creditors to verify your identity before opening new accounts.

Step 7: Secure Your Devices

If you clicked a malicious link or downloaded a suspicious file:

  • Run a full antivirus/malware scan on the device you used.
  • Update your operating system and browser to the latest version.
  • Check your browser extensions — remove any you don't recognize.
  • If you installed software the scammer asked you to install (remote access tools like AnyDesk, TeamViewer), uninstall it immediately and change all passwords from a different device.

Don't Blame Yourself

Scammers are professionals who do this full-time. Their techniques are specifically designed to bypass rational thinking by triggering fear, urgency, or trust. Falling for a scam doesn't mean you're careless — it means you encountered a well-crafted attack.

What matters now is how quickly you respond. Every step above reduces the damage and makes it harder for the scammer to profit from what they took.

Check If a Number, Email, or Website Is a Known Scam

If you want to verify whether the contact that scammed you has been reported before, paste it into the search bar at the top of this page. We track phone numbers, email addresses, domains, and companies across FTC complaints, phishing databases, and community reports.