There is no shame in being targeted. These operations are staffed, scripted and international. Your job is not to out-argue them. It's to close every door they still have open. You don't have to get this perfect. Doing the next right thing is enough.
In danger right now, or someone is on their way to your home? Call your local emergency number first, then come back to this page. US/CA 911 · UK/IE 999 · AU 000 · NZ 111 · SG 999 · HK 999 · IN 112 · PH 911 · ZA 10111 · NG 112 · KE 999 · GH 191 · JM 119 · TT 999 · BB 211
π Download the printable one-pager (for a family member, a bank branch, or to keep offline)
Too much to read right now? Three things, in this order:
Hang up now. Block the number, email and social account. Don't stay on the line "to keep them talking," and don't send a smaller amount to "close the case." That's how losses stack. If the voice on the call sounded exactly like someone you know, that's not proof it was them: AI voice cloning is common now. Hang up and call that person back on a number you already had saved.
Use the number on the back of your card or in your banking app, not one from a search engine or a text. Fake "bank fraud department" numbers are seeded into search results deliberately; treat any number you find by searching as unverified until you've checked it against your card or statement. In the UK, you can also dial 159, which routes you to your bank on a line scammers can't spoof. In India, also dial 1930 quickly; that helpline can push a freeze request through the banking system. In Singapore, call the bank and 1799 (ScamShield). Ask the bank to freeze cards, stop outgoing payments and flag the account. Speed is the only lever you control on wires, Faster Payments, UPI, PayNow and crypto.
Change your passwords now, starting with email. Change email first, since it resets everything else, then banking and social passwords, from a device you trust. Turn on two-factor authentication. If you gave remote access, disconnect from the internet. Place a fraud alert or credit freeze where your country offers one.
Save everything before it disappears. Screenshots of chats and sites, full email headers if you can get them, phone numbers, wallet addresses, usernames, receipts, dates and amounts. Don't crop out context. Official forms ask for it. A notebook of times and names helps if the phone itself is the crime scene.
This is the paperwork step, and it can wait until you're steady. Consumer portals (FTC, Scamwatch) feed intelligence databases. Police portals (IC3, Report Fraud, ReportCyber, local CID) create a crime record you may need for the bank or insurer. File both where both exist, then report the account to the platform: bank app, marketplace, dating app, app store, telco spam shortcode.
You will probably be targeted again. Knowing that in advance is your best defence. Shame is part of the product. Tell someone you trust. Then expect a "recovery agent," "task force officer," or "lawyer" to appear. They found you because victim lists leak and circulate. Real agencies do not ask for gift cards, crypto or remote access to get your money back. Read the full recovery-scams warning before you respond to anyone offering to help.
Best chance of a recall or chargeback. Authorised-push-payment rules vary by country. Ask for a reference number and the fraud team, not the front-line chat bot.
Feeds pattern analysis. Rarely investigates your case alone. Still worth doing, since takedowns and prosecutions are built from volume.
Handles the part portals ignore: panic, isolation, what to say to family, how to resist the second pitch.