Quick Scam Check

What to do if you already paid a scammer

If you already paid a scammer or shared personal information, act quickly, but do not panic. You may not be able to undo everything, and Lumoset cannot recover money for you, but there are still useful steps you can take right now.

Start with the payment or account that is most at risk. Then secure your accounts, report what happened, and watch for follow-up scams.

Download the free 2026 scam guide (PDF) Take the free course

Run this check first

1
Write down what happened while it is fresh: date, payment method, amount if you know it, names used, phone numbers, email addresses, websites, and what you shared.
2
Identify what the scammer received: money, card number, bank login, password, one-time code, Social Security number, ID photo, remote access to a device, or personal details.
3
Contact the company that can still act. That may be your bank, card company, payment app, phone company, email provider, or the account the scammer reached.
4
Change passwords for any account involved. Use a different password than before, and turn on two-step login if the account offers it.
5
Watch for recovery scams. Anyone who contacts you promising to get your money back for a fee may be trying to scam you again.
6
Report it to the right place, knowing that reporting helps create a record but does not guarantee money back.

What to do next

If it looks like a scam

If you paid, call your bank, card company, or payment provider right away. Use the number on the back of your card, inside the official app, or on a statement. Say plainly that you believe you were scammed and ask what options exist for stopping, reversing, disputing, or securing the account. Do not promise yourself a result. Just make the call quickly.

If it looks real

Still keep your notes. Contact the company through an official path and confirm the payment, order, account warning, or request. If the company says there is no issue, treat the original contact as a scam and move back into the protection steps.

Real examples and first steps

If you paid by credit or debit card, call the card company. Ask whether the charge can be disputed, whether the card should be replaced, and whether account alerts can be turned on.

If you sent money from a bank account, call the bank. Ask what can still be done and whether your online banking login needs to be reset.

If you used a payment app or bank transfer, contact the payment app or bank through its official support path. Be direct that you believe the payment was part of a scam.

If you bought gift cards and gave the numbers to a scammer, keep the cards and receipts. Contact the gift card company and ask whether any balance remains or whether the card can be frozen. Do this quickly, but do not pay anyone who promises they can recover the value for you.

If you shared a password, change it anywhere you reused it. Start with email, banking, payment, phone, shopping, and social accounts. Your email is especially important because it can be used to reset other accounts.

If you shared a one-time code, contact the account provider. A code may have allowed the scammer to sign in, reset a password, or approve a transaction.

If you gave remote access to your computer or phone, disconnect from the person, remove any remote-access app they asked you to install, and get help checking the device. If banking or email was used on that device, change those passwords from a different trusted device if you can.

If you shared identity information, go to IdentityTheft.gov, the FTC's identity-theft recovery site, and follow its recovery plan. If the scam happened online and involved money, you can also report it to the FBI's Internet Crime Complaint Center at IC3.gov.

Free guide and course

The 2026 Top 5 Scams in the US

Lumoset Foundation's free 2026 scam guide explains the patterns that often lead to payment: fake toll texts, fake package notices, renewal invoices, family emergency calls, and bank-impostor scams. It can help you understand what happened without blaming yourself.

Download the free guide (PDF) →

Spot the Scam: free course

You can also take the free Spot the Scam course at lumoset.org/allcourses/. The course is for prevention going forward. It cannot recover money, but it can help you recognize the next attempt sooner.

Start the free course →

Three generations of a family looking through a photo album together

Other scam checks

A doctor using a tablet and phone for an online consultation

Be careful with the second scam

After someone has been scammed, another scam often follows. It may be called recovery help, tracing, refund support, investigation service, chargeback help, or crypto recovery. The story changes, but the pattern is familiar: someone promises a result, asks for a fee, and pressures you to act.

Be especially careful if the person contacts you first. Real banks, agencies, and companies do not need you to pay a stranger in order to begin a basic report. If you want help, start with your bank, card company, local law enforcement, the FTC, IC3, or a trusted nonprofit or consumer-protection source.

What to tell yourself right now

This happened because the scam was designed to work, not because you are careless. Scammers use fear, urgency, fake authority, and isolation. Those tactics work on careful people too.

The useful question now is not "How did I miss it?" The useful question is "What can I protect next?" Start with money, then accounts, then identity, then reports.

If you are helping someone else, stay calm. Do not lecture. Help them make the calls, change the passwords, and write down what happened. Shame makes people hide. Calm help gets the next step done.

Keep copies of receipts, messages, emails, phone numbers, and reports. You may need them later for the bank, a card dispute, a police report, or an identity-theft recovery plan.

Lumoset cannot recover money or investigate your case, but we can help you understand the pattern and build safer habits for the future. The next safe step is the one you can take now.