Think you've been scammed? Do these 6 things now

Realising you might have been scammed is a horrible feeling — but what you do in the first hour matters more than the panic. Here’s a calm, practical order to work through.

1. Stop

Don’t send any more money, and don’t share any more details. Scammers often push for “one more step” — that’s the moment to stop completely.

2. Disconnect if the device may be compromised

If you clicked something, installed something, or gave someone remote access, disconnect that device from the internet. That limits what an attacker can keep doing.

3. Change your passwords — on a different device

Using a phone or computer you trust, change the passwords for your important accounts (email first — it’s the key to the others). Don’t do this on the possibly-infected device.

4. Turn on two-factor authentication

Two-factor authentication adds a second step to logging in, so even a stolen password isn’t enough. Turn it on for email, banking and anything important.

5. Contact your bank if money or card details were involved

If you shared banking or card details, call your bank straight away. They can watch for or stop fraudulent transactions.

6. Get the device checked properly

If a device may be infected or had remote access, have it cleaned and checked before trusting it again — and review what else might be exposed.

Need a hand?

This is exactly what Scam & Phishing Recovery is for — a calm clean-up, securing your accounts with passwords and two-factor, and making it less likely to happen again. The Scam Recovery & Security Check package bundles it all into one job. There’s no judgement here — it happens to careful people too.