The First 24 Hours After Suspected Financial Fraud

Use the number on the back of the card, a verified statement, or the institution’s official app—not a link or number in the suspicious message. Explain exactly what happened and ask what can be frozen, recalled, replaced, or flagged. Different payment methods have different procedures and protections, so identify whether the event involved a card, bank transfer, wire, check, cash app, gift card, or crypto asset.

Do not send more money to unlock, insure, recover, or verify the first payment. Recovery scammers often contact victims while the event is still unfolding. Government agencies and legitimate institutions do not need a gift card, crypto transfer, or secret cash shipment to protect an account.

Email is often the reset key for financial accounts. Change its password from a trusted device, enable multifactor authentication, review forwarding rules and logged-in sessions, then secure financial accounts and the mobile carrier account. Use unique passwords rather than changing one reused password everywhere.

If identity information was exposed, consider a credit freeze with each nationwide bureau. A fraud alert and a freeze serve different functions; learn what each does before choosing. Keep confirmation numbers and note which accounts were secured.

Save screenshots, transaction IDs, usernames, phone numbers, email headers, receipts, and the exact timeline. Do not continue engaging merely to gather evidence. Report identity theft at IdentityTheft.gov when applicable and follow the tailored recovery plan. Report the scam to the relevant company and regulator; local law enforcement may also be appropriate for theft, threats, or documentation needs.

Track every conversation: date, time, department, representative, case number, promise, and deadline. Recheck statements and reports because fraud can spread. Trauma and embarrassment are normal responses; neither means the victim caused the crime.