Lost Money to an Online Scam? The First 72 Hours Matter

If you've just realized you've sent money to a scammer, or are actively being defrauded, immediate action is critical. This guide provides an hour-by-hour playbook for the first 72 hours, designed by TrustMatch to help you stop financial losses, gather evidence, and report the crime effectively.

1. Cut All Communication

Stop all contact with the scammer immediately. Block their phone numbers, email addresses, and social media profiles. Do not respond to any further messages, no matter how urgent or threatening they seem. This prevents further emotional manipulation, stops you from sending more money, and closes off potential avenues for them to gather more personal information from you. Your immediate silence is a powerful first step in regaining control.

2. Secure All Financial Accounts

Access all bank accounts, credit cards, investment accounts, and digital wallets that may have been compromised or used in the scam. Change passwords and enable two-factor authentication (2FA) wherever possible. Review recent transactions for any unauthorized activity. This step is crucial for stopping ongoing financial bleed and protecting your remaining assets from further theft or misuse by the scammer.

3. Alert Your Bank or Payment Provider

Contact your bank, credit card company, or payment service (e.g., PayPal, Venmo, Western Union) as soon as possible. Report the fraudulent transaction(s) and request an immediate freeze on the funds or a chargeback. Provide them with all known details of the transaction. The quicker you act, the higher the chance of recovering lost funds, as many institutions have specific timelines for disputing fraud. According to the CFPB, prompt reporting significantly increases the likelihood of fund recovery in specific fraud types.

4. Change All Potentially Compromised Passwords

Change passwords for all online accounts that use the same or similar login credentials as any accounts involved in the scam. Prioritize email, social media, and any financial platforms. Use strong, unique passwords for each account. Enable multi-factor authentication (MFA) on everything. This proactive measure prevents scammers from gaining access to other personal accounts, stopping broader identity theft attempts.

5. Document Everything Systematically

Create a detailed log of every interaction and piece of information related to the scam. This includes dates, times, communication channels (email, text, social media), names/aliases used by the scammer, transaction details, and any websites visited. Screenshot conversations, save emails, and download relevant files. Comprehensive documentation forms the foundation of your report to authorities and financial institutions, making recovery efforts more effective.

6. Run a TrustMatch TrustCheck

Gather any identifying information you have on the scammer – their first name plus a phone number or email address. Visit TrustMatch.com, enter the details, and initiate a TrustCheck. This service provides a TrustScore and a verdict in under a minute, indicating potential risks associated with the identity. While it may not recover funds, a TrustCheck can confirm the individual's fraudulent identity, provide data for law enforcement, and prevent future scams.

7. Check Your Credit Reports Immediately

Obtain copies of your credit reports from all three major bureaus (Equifax, Experian, TransUnion). Review them carefully for any unfamiliar accounts or inquiries that could indicate identity theft. Place a fraud alert on your credit file, which makes it harder for identity thieves to open new accounts in your name. This step helps detect and prevent further financial damage stemming from the scam.

8. Isolate Any Compromised Devices

If you downloaded any files, clicked suspicious links, or granted remote access during the scam, immediately disconnect the affected device from the internet. Run a full scan using reputable antivirus and anti-malware software. Consider a factory reset if you suspect deep compromise. Isolating and cleaning the device prevents scammers from installing spyware, keyloggers, or accessing more personal data.

9. File a Report with the Federal Trade Commission (FTC)

Visit ReportFraud.ftc.gov and file a detailed report about the scam. The FTC uses these reports to track fraud patterns, identify scammers, and potentially take legal action. While the FTC doesn't resolve individual cases, your report contributes to a larger database that helps protect other consumers. Keep a record of your FTC report number, as other agencies may request it. As of May 2026, the Federal Trade Commission reported that consumers lost over $10 billion to fraud in 2023.

10. Report to the FBI's Internet Crime Complaint Center (IC3)

If the scam involved the internet (email, social media, dating apps, fake websites), file a report with the FBI's Internet Crime Complaint Center (IC3) at IC3.gov. Provide all documentation and details you've gathered. The IC3 collects and analyzes intelligence on cybercrime to support law enforcement investigations, especially for scams involving interstate or international elements. Your report is vital for federal investigation efforts.

11. Contact Local Law Enforcement Agencies

File a police report with your local law enforcement department. While local police may have limited resources for online scams, a police report is often required by banks, credit card companies, and insurance providers for fraud claims or chargebacks. Bring all your documentation, including FTC and IC3 report numbers, to make the process smoother. Obtain a copy of the police report for your records.

12. Notify Social Media Platforms and Messaging Apps

If the scam originated or occurred on platforms like Facebook, Instagram, WhatsApp, or Telegram, report the scammer's profile to the respective platform administrators. Provide screenshots and links to their profiles. Platforms can often remove fraudulent accounts, preventing them from targeting other potential victims. This action helps protect the broader community from similar scam attempts.

13. Alert Relevant App Stores or Marketplaces

If the scam involved a malicious app, report it to the app store (Google Play, Apple App Store). If it occurred on an online marketplace (eBay, Etsy, Amazon), report the seller or listing to the platform. These reports help platforms remove fraudulent applications or sellers, safeguarding other users. Provide specific details like app names, seller IDs, or listing numbers for effective action.

14. Consider Identity Theft Protection Services

Enroll in an identity theft protection service. These services monitor your credit, public records, and dark web for unauthorized use of your personal information, alerting you to suspicious activity. They can also assist with recovery if your identity is compromised. While an expense, this proactive measure provides peace of mind and an extra layer of defense against future identity-related fraud.

15. Dispute Unauthorized Charges

Work closely with your bank or credit card company to dispute any unauthorized transactions. Follow their specific procedures for disputing charges, which often involve filling out affidavits and providing evidence. Be persistent and provide all documentation you've collected. The process can take time, but consistently following up increases your chances of successful fund recovery.

16. Consult Legal Counsel for Recourse

If you lost a significant amount of money, or your identity has been severely compromised, consult with an attorney specializing in consumer fraud or cybercrime. A lawyer can advise you on potential legal avenues for recovery, such as civil lawsuits against the scammer (if identifiable) or against financial institutions for negligence. Legal advice can clarify complex recovery paths.

17. Seek Emotional Support

Experiencing a scam can be emotionally devastating, leading to feelings of embarrassment, anger, and betrayal. Reach out to trusted friends, family, or a professional counselor. Support groups for scam victims can also provide a safe space to share experiences and coping strategies. Remember, you are not alone; seeking emotional support is a critical part of your recovery process.

18. Protect Others from Similar Scams

Share your experience with others, especially those in your community or social circles, to raise awareness about the specific scam tactics used against you. Educate elderly family members or vulnerable individuals. By sharing your story, you help others recognize the warning signs and avoid becoming victims themselves, turning your negative experience into a valuable preventative lesson. According to a 2024 AARP study, roughly 25% of scam victims never reported the incident, hindering collective prevention efforts.

Step	What to Verify	Red Flag if Missing or Inconsistent
Initial Contact	Scammer's identity, communication method, stated purpose	Vague identity, refusal to video call, urgent requests, unsolicited contact
Transaction Details	Recipient name, bank/wallet info, amount, payment method, reason	Recipient name doesn't match story, unusual payment method (gift cards, crypto), immediate pressure to send
Digital Footprint	Website URLs, email addresses, social media profiles	Typos in URLs, generic email domains, newly created social profiles, few connections, stolen profile pictures
Promises/Guarantees	Return on investment, relationship status, delivery of goods/services	Promises of guaranteed high returns, sudden declarations of love, goods/services never materialize after payment

Quick Checklist: Essential Actions

These immediate steps consolidate critical actions to take within the initial hours of realizing you've been scammed. Acting swiftly across these key areas maximizes your chances of mitigating damage and initiating recovery. Do not delay any of these steps; each contributes significantly to your overall protection and potential for recourse.

1. Immediately terminate all communication with the scammer and block their contact information across all platforms.
2. Contact your bank, credit card company, and any payment service used to report fraudulent transactions and freeze funds.
3. Change passwords for all compromised or linked online accounts and enable multi-factor authentication for enhanced security.
4. File detailed reports with the FTC at ReportFraud.ftc.gov and the FBI's IC3 at IC3.gov, providing all documented evidence.
5. Use TrustMatch to verify any known scammer details, assisting with official reports and personal awareness.

Red Flags During This Process

Stay vigilant even as you take these recovery steps. Be wary of anyone contacting you claiming to be a "recovery agent" or "fund specialist" who demands upfront fees or personal information to help you get your money back. These are often follow-up scams targeting victims. Genuine recovery efforts do not require advance payments. Never share your bank account login, passwords, or send money to anyone promising to recover your losses. Always verify the legitimacy of any service or individual offering assistance through official channels. Remember, taking these steps protects your assets and your identity while upholding the dignity of any genuine individual. These are not surveillance tactics, but essential security measures.