What to do in the first 48 hours after an online fraud

Whatever you’re being told, don’t send any more money — not for fees, taxes, ‘unlocking’ or anything else. Then secure what you still control.

• Change passwords for email, banking and any affected accounts, starting with your email.
• Turn on multi-factor authentication wherever possible.
• If you installed remote-access software at someone’s request, uninstall it and have the device checked.
• If a crypto wallet may be compromised, move any remaining funds to a new wallet you create yourself.

If you paid by bank transfer or card, call your bank as soon as possible and explain that you’ve been the victim of fraud. Some transfers can be stopped or recalled if the receiving bank acts quickly, and card payments may be disputable.

It’s natural to want to delete everything. Please don’t. The messages and records you’d rather forget are exactly what an investigation needs.

• Screenshot the website or app, your account page and balance.
• Save chat histories and emails — export them if the app allows.
• Record transaction IDs, wallet addresses, dates and amounts.
• Write down names, usernames, phone numbers and website addresses used.
• Note a simple timeline: when it started, key conversations, each payment.

Report the fraud to your local police and to your country’s national fraud reporting service. Reporting creates an official record, may connect your case to others, and is often required by banks and insurers.

Also report the scam profile, page or advert to the platform where you found it, so it can be removed.

In the days after a fraud you may be contacted by people offering to recover your money. Treat any unsolicited offer with extreme caution — fake recovery services are one of the most common follow-up scams.