How to do it
After a scam, time matters more than anything. Follow the steps in this order, from most urgent.
- Stop the money. If you paid or gave bank details, call your bank immediately at the official number (on the back of the card or in the app). Ask to block the card and to attempt a chargeback or to block the payment. The sooner you call, the higher the chances of recovering.
- Block access. If you entered a password on a fake page, change it right away on that service and on every other one where you used the same one. Enable two-step verification where it wasn't on: it prevents whoever has your password from getting in anyway.
- Preserve all the evidence. Don't delete anything. Save the messages, the emails, the phone numbers, the times, the site addresses, the payment receipts, the screenshots of the calls or profiles. They're needed for the bank, for the report and for the notifications.
- Report it. File a report with law enforcement: even if recovery isn't guaranteed, the report is often necessary for the bank and the insurer and it helps stop the scammers. Also report the content to the platforms involved (the email as phishing, the fake profile, the scam site).
Check: you've handled the emergency well when you've closed the two taps (money and access), you have an orderly file of evidence and you've started the report and the notifications. From there on it's a matter of following up on the cases, but the urgent part is secured.
Reminder to keep handy: 1) bank right away, block and attempt the chargeback; 2) change the reused passwords and enable two-step verification; 3) save all the evidence without deleting anything; 4) report to the authorities and notify the platforms.
A concrete example
Paolo gets a fake message from the bank; he clicks, enters his credentials on a page identical to the original, and realizes right after that he made a mistake. Instead of freezing, he acts. He calls the bank at the number on the back of the card: they block access and put the account under watch, stopping a transfer that was about to go out. Then he changes the password (which he also used for his email) and enables two-step verification everywhere. He takes screenshots of the message and the fake page, and goes to file a report. The account is safe because he acted in the first half-hour, not the next day.
When it does NOT work (and how to fix it)
If the bank says the payment can't be reversed
Some payments (instant transfers, cryptocurrencies, gift cards) are hard or impossible to revoke. Don't stop at the "no": ask the bank anyway to flag the fraud and put the account under observation, file a report (necessary for any refunds or insurance), and if the money went to an identifiable service (an exchange, a shop) report it to that one too. Keep everything: sometimes recoveries arrive through indirect routes.
If the scammers still have your data or access
A scam can be just the beginning: with your data they can attempt other hits or sell the information. Change all the important passwords (not just the exposed one), enable two-step verification everywhere, check that no contact details or forwarding rules have been added to your email, and keep an eye on accounts and transactions in the following weeks. If they stole your personal data, watch out for any contracts or requests in your name.
If you feel guilty and frozen by shame
Shame is the scammers' best ally, because it pushes you to stay silent and not act. These scams are built by professionals to fool anyone, and AI has made them more convincing than ever: having fallen for it doesn't make you naive. Talking about it (with the bank, the authorities, a trusted person) is the first step to limiting the damage and to helping stop those who strike others too.
A tip from someone who actually uses it
Keep handy, before you need it, your bank's direct number and the procedure to block cards: save them in your phone now. In the moment of the scam, every minute lost looking for the right number is money walking away. Those who react fast limit the damage; those who freeze or wait "to understand better" often discover that it was precisely the waiting that did the damage.
Frequently asked questions
Will I get back the money I lost?
It depends: for cards and some payments the bank can sometimes reverse or refund, especially if you report in the first hours; for instant transfers, cryptocurrencies and gift cards recovery is much harder. It's not guaranteed in any case, but acting immediately and reporting maximizes the chances. Waiting reduces them almost to zero.
Is reporting really worth it, if they won't catch the scammer anyway?
Yes, and thinking otherwise is what leaves scammers undisturbed. The report is often the condition for obtaining refunds from a bank or insurer, it feeds investigations that can link multiple cases, and it helps stop networks that strike many victims. Even if your single case doesn't lead to an arrest, your silence would only help the one who scammed you.