Find your row, make that call first

Speed matters most with money. The FTC's guidance is ordered by how you paid (FTC):

How you paid	Who to contact	What to ask
Credit card	The issuer, on the number on the back of the card	Reverse the charge; federal law protects against unauthorised use
Debit card	Your bank, on the number on the card	A refund; federal law also covers unauthorised debit use
Bank transfer or Zelle	Your bank, immediately	Reverse the payment
Venmo, Cash App, PayPal	The app, immediately	Reverse the payment
Wire (Western Union, MoneyGram)	The company, quickly	Say a scammer tricked you; ask for a refund
Gift card	The card issuer, on the number on the card	A refund; keep the card and receipt
Cryptocurrency	The exchange or crypto ATM operator	Report fraud, ask for reversal; then report to the FTC
Cash by US mail	US Postal Inspection Service, 1-877-876-2455	An intercept, for a fee, if not yet delivered

Crypto has fewer legal protections than cards, though some states have laws that may help (FTC).

You gave information, not money

What they got	Do this
Social Security number	If it was used, report at IdentityTheft.gov and follow the recovery plan; if not, or unsure, use IdentityTheft.gov/databreach (FTC)
Username and password	New strong password, then two-factor; if locked out, use the account's recovery process (FTC)
Remote access to your computer or phone	Update security software, run a scan, delete what it finds, then change passwords (FTC)
A one-time code by phone	Treat it like a password: change the password for that account and check its recent activity

In the UK

Call your bank on the number on your card first, then report it to Report Fraud, or to Police Scotland if you live in Scotland; numbers are on where to report. For card purchases, many credit cards protect you under the Consumer Credit Act, and debit cards may allow a chargeback (NCSC).

Watch for the second scam

Scammers target people who have already lost money, posing as an agency, law firm or the original company and offering to recover it for an upfront "retainer" or "processing" fee. The FTC is blunt: real agencies never charge to help you get a refund, so never pay upfront (FTC). Hang up and call your bank yourself, on a number you already have.

Keep a record

Save the messages, the link, receipts, the card if it was a gift card, and the names and times of every call. Banks and the police will ask.

Start from the message

If it began with a link, run it through our link checker so you can describe the real domain when you report. Phone-specific clean-up: iPhone or Android.

Left out of this page: investment and romance scams that ran over months, and business payments. Those usually need your bank's fraud team and a police report.