I’ve Been Scammed Online: What Should I Do First?

What to do immediately after an online scam, what evidence to preserve, and how to avoid losing more money.

Realizing that you have been scammed can be overwhelming.

You may be angry, embarrassed, confused, or unsure whether anything can be done. Perhaps you sent money to an investment platform that suddenly stopped responding. Maybe you purchased something online and never received it. You could have transferred cryptocurrency to someone who disappeared afterward, or you may have been manipulated into giving a stranger access to your account.

Whatever happened, your first priority should not be trying to chase the scammer yourself.

Your first priority should be protecting yourself, preserving evidence, and stopping the situation from getting worse.

1. Stop Sending Money

This is one of the most important first steps after discovering an online scam.

If the person or platform is still communicating with you, they may attempt to convince you to send additional money.

You may be told that you need to pay a:

• Withdrawal fee
• Tax
• Verification fee
• Processing charge
• Security deposit
• Account activation fee
• Blockchain fee
• Legal or compliance fee

You may even be told that it is the “final payment” required to release your money.

Then another fee appears.

This can become a cycle where the victim continues paying because they believe they are getting closer to recovering their funds.

2. Do Not Delete the Evidence

One of the biggest mistakes victims make is deleting conversations because they are embarrassed, angry, or simply want to forget what happened.

Don't.

Your messages and records may contain information that helps establish exactly what happened.

Preserve as much of the following as possible:

• Emails
• WhatsApp conversations
• Telegram messages
• Text messages
• Social media conversations
• Usernames
• Phone numbers
• Email addresses
• Website addresses
• Screenshots
• Investment account screenshots
• Payment receipts
• Bank statements
• Cryptocurrency transaction records
• Wallet addresses
• Transaction hashes
• Invoices and contracts
• Advertisements

Keep the original information whenever possible. Do not edit screenshots or alter records simply to make them easier to understand.

Something that appears insignificant to you may help establish a timeline later.

3. Write Down Exactly What Happened

Your memory can become less reliable as time passes, especially when a scam involved multiple payments and conversations.

Create a simple timeline while the details are still fresh.

Include dates, amounts, payment methods, names, websites, wallet addresses, and communications wherever possible.

4. Identify How You Paid

The payment method can be extremely important when assessing what happened.

Determine exactly how the money left your possession.

Bank Transfer

Record the receiving account information, transaction reference, date, amount, and any other information provided by your bank.

Credit or Debit Card

Keep the transaction details, merchant information, receipts, and relevant correspondence.

Cryptocurrency

Record:

• Cryptocurrency used
• Amount transferred
• Wallet address
• Transaction hash
• Blockchain network
• Date and time of the transaction

Payment Applications

Save the recipient's account information, transaction records, confirmation numbers, and relevant communications.

5. Contact Your Bank or Payment Provider

If money was transferred through a bank, card, payment service, or other financial provider, contact the relevant provider as soon as possible.

Explain clearly that you believe the transaction was connected to fraud and ask what options may be available based on the payment method and circumstances.

There is no guarantee that a transaction can be reversed. However, reporting the incident promptly gives the payment provider an opportunity to review the transaction and explain what steps may be available.

Keep records of your communications with the bank or payment provider, including reference numbers and dates.

6. Secure Your Accounts

Some online scams involve more than stealing money.

A scammer may also obtain access to your email, social media, cryptocurrency exchange, banking credentials, or other accounts.

If you believe your login details were exposed, change your passwords and use strong, unique passwords where possible.

Enable two-factor authentication on important accounts where available.

If you provided sensitive financial information, contact the relevant financial institution and explain what happened.

7. Report the Scam

Depending on where you live and the type of fraud involved, you may have several reporting options.

These can include your bank or payment provider, relevant law-enforcement agencies, financial regulators, cryptocurrency exchanges, online platforms, and other appropriate authorities.

When making a report, provide factual information rather than speculation.

Include dates, amounts, transaction records, websites, account information, communications, and other evidence that can help explain what happened.

8. Be Careful With “Recovery Agents”

Unfortunately, being scammed once can sometimes expose victims to another scam.

A person may contact you claiming they can recover your cryptocurrency or investment funds.

They may claim to work with lawyers, investigators, government agencies, blockchain specialists, banks, or international recovery organizations.

Then they request an upfront payment.

Be extremely cautious.

The fact that someone knows details about your previous scam does not prove that they can recover your money.

Verify who they are, understand what services they actually provide, and avoid anyone promising a guaranteed recovery before examining your case.

9. Preserve Cryptocurrency Transaction Information

If cryptocurrency was involved, do not delete the transaction information.

Blockchain transactions can contain important information about the movement of digital assets.

Save the transaction hash and the sending and receiving wallet addresses.

Also record which blockchain network was used. For example, a USDT transaction could involve different networks, so the network information can matter when examining a transaction.

Remember that blockchain tracing is not the same thing as guaranteed recovery. Identifying where cryptocurrency moved does not automatically mean that the assets can be returned.

10. Consider Getting the Situation Professionally Assessed

If you have gathered the available evidence but are unsure what happened or where to begin, a professional assessment may help you understand the situation.

An assessment can involve reviewing the available documentation, payment history, communications, websites, wallet addresses, transaction information, and other relevant evidence.

The purpose should be to understand the circumstances and determine what investigative options may exist.

What Information Should You Prepare?

If you decide to seek professional assistance, prepare a clear record of what happened.

1. When you first encountered the website, person, or investment opportunity.
2. How you were contacted.
3. How much you initially deposited.
4. Every additional payment you made.
5. Where the payments were sent.
6. When you first attempted to withdraw your money.
7. What explanation the platform or person gave you.
8. Any additional fees they demanded.
9. Any cryptocurrency wallet addresses involved.
10. Any communication with the people operating the platform.

The goal is to turn a confusing experience into a structured record that can be reviewed more effectively.

Can Stolen Money Be Recovered?

There is no universal answer.

Recovery depends on many factors, including how the money was transferred, where the funds went, how quickly the incident was identified, whether the recipient accounts or wallets can be traced, and what evidence is available.

Cryptocurrency transactions, for example, can often be examined through publicly available blockchain data. But tracing a transaction does not automatically mean that the funds can be recovered.

Similarly, identifying a bank account that received fraudulent funds does not guarantee that the money can be returned.

Anyone promising guaranteed recovery should therefore be treated cautiously.

A responsible investigation should begin with the facts of the case rather than a promise of a particular outcome.

Frequently Asked Questions