The First 60 Minutes After a Scam — Your Emergency Action Plan

The first hour after a scam does not feel like an emergency, which is exactly the problem. There’s no smoke, no siren — just a quiet, sinking certainty that the money already moved and the calm voice on the phone was never who they said. And unlike almost anything else that goes wrong with money, the clock that starts the moment you realize it is short. What you do in the next sixty minutes decides how much of it, if any, comes back.

This is the version to act on before you’ve had time to read anything longer. Four moves, in order, the first of them a phone call. Everything else — the shame, the how-did-I-miss-it, the telling people — can wait an hour. These can’t. When the dust settles, our fuller recovery guide for the first hour, day, and week picks up where this leaves off.

What should you do in the first hour after being scammed?

Call the bank or card issuer on the back of your card immediately and ask them to recall or freeze the transfer — recovery odds are highest within 72 hours. Then change your email password, turn on two-factor authentication, report the scam at reportfraud.ftc.gov and ic3.gov, and freeze your credit at all three bureaus. The order matters: money first, accounts second, reports third.

Minutes 0–5: Stop the money

Everything else can wait five minutes. This can’t. Call the number on the back of your card — not the number the scammer gave you, not the top result from a panicked Google search, which is often itself a fake support line.

1. Tell them exactly what moved and how. A wire, an ACH transfer, a Zelle payment, a debit or credit charge. Ask them to recall the transfer, stop the payment, or open a dispute — the wording depends on the rail, and they’ll know which applies.
2. Get a reference number for the call. You’ll need it, and “I called that afternoon” carries a lot more weight with a case number attached.
3. If more than one account is exposed, call each. A single scam often touches a card and a bank login and a P2P app all at once.

Minutes 5–15: Lock your accounts

Change your email password first — always. Whoever has your email can reset the password on everything else, so it’s the master key. Do it from a device you’re confident isn’t compromised. Then your bank, then anything that shared that same password (this is the moment a password manager earns its keep). Turn on two-factor authentication wherever money lives; an authenticator app beats a texted code, since the FBI has been warning for two years that SIM-swap attacks routinely defeat SMS-based 2FA.

Screenshot everything before you touch it. The texts, the emails, the website address, the caller ID, the payment confirmation. Don’t delete the messages, however much you want them gone — the bank, the FTC, and the FBI will all ask, and a screenshot taken now is worth an hour of “I think it said…” later.

Minutes 15–30: Report it in the places that matter

Two reports, both free, both fast. File at reportfraud.ftc.gov, which feeds the FTC’s Consumer Sentinel database that state attorneys general and the FBI use to spot patterns. Then file at ic3.gov, the FBI’s Internet Crime Complaint Center, whose Recovery Asset Team is the group that actually coordinates with receiving banks to freeze a wire before it’s laundered out.

If any government ID, driver’s license image, or Social Security number was part of what you handed over, add a third: identitytheft.gov, which builds a personalized recovery plan and pre-fills the dispute letters. That case has its own playbook — we wrote it up in what to do if you gave your SSN to a scammer.

Minutes 30–60: Freeze your credit and write it down

Freeze your credit at all three bureaus. It’s free, it takes about ten minutes, it has no effect on your score, and it’s the one move that reliably stops a fraudster from opening new accounts in your name. You do it three times — Equifax, Experian, TransUnion — and lift it in about a minute the next time you actually apply for credit.

Then write down what happened in three sentences, while it’s still sharp: the names used, the phone numbers, the amounts, the times. You will be asked to repeat this to five different people over the next week, and the version you write in the first hour is the accurate one.

Can you actually get it back? It depends how you paid

The honest answer is “sometimes, and it hinges almost entirely on the rail the money left on.” A credit card gives you the strongest hand: federal law lets you dispute a fraudulent charge, usually within about sixty days, and the money is provisionally pulled back while it’s investigated. A debit card is weaker — the protections exist but the clock is tighter — so speed matters more.

Bank transfers are the hard cases. A wire can sometimes be recalled if you catch it inside that 72-hour window and your bank works with the receiving bank and IC3, but nothing about it is guaranteed. Zelle and other pay-by-app transfers to a stranger are usually treated like handing over cash, which is exactly why scammers steer you toward them — though scam-reimbursement rules for these have been shifting, so call your bank and ask rather than assuming the answer is no. Gift cards and crypto are the longest shots, and the only move that helps is calling the issuer or reporting the wallet immediately.

In the first hour, do NOT

Once the hour is over

If you made the four moves — bank, lock, report, freeze — you’ve done the part that’s time-sensitive, and you can breathe. The next steps run on days, not minutes: pulling your free credit reports at annualcreditreport.com, watching statements, and telling the people close to you so the follow-up call lands on a household that’s already on alert. Our full recovery guide lays out that first week in order.

The one-line version

Bank first, on the number printed on your card. Then lock your accounts, email password before anything else. Then report at reportfraud.ftc.gov and ic3.gov. Then freeze your credit. Four calls, one hour — that sequence is most of the difference between “we lost everything” and “we lost a Tuesday.”