IF YOU ARE HIT

Stop. Lock. Report. Do not pay a second stranger.

Recovery agents who message you after a loss are usually the same operation, or a copycat. File with the agencies below. Keep addresses, times, and amounts.

1. 01

   Stop the session

   Do not send another dollar. Close the site. If you installed something, disconnect the device from the network.

2. 02

   Lock what they can reach

   From a different device, change email first, then the exchange, bank, and password manager. Sign out other sessions. Revoke token approvals.

3. 03

   Call the carrier if the phone went dark

   Ask them to freeze the number and check for a recent SIM change. Then remove SMS as a login factor.

4. 04

   Report while the trail is warm

   File with the FTC and IC3 the same day. Tell the exchange or bank exactly when the transfer left. Note wallet addresses. Do not pay a “recovery agent” who contacts you next — that is the second scam.

5. 05

   Watch for 90 days

   Freeze credit if identity details leaked. Read statements. Tell family, because the same script often moves to them.

Where to file

• FTC ReportFraudConsumer fraud, impostors, texts, and unwanted calls. This is the default U.S. report.
• FBI IC3Internet crime, especially when money moved, crypto was involved, or a business was hit.
• Have I Been PwnedCheck whether an email showed up in a known breach. Then change those passwords.
• IRS tax scamsHow to tell a real IRS notice from a text that wants bitcoin.