Search the briefing
Try “phishing,” “identity theft,” or “security key.”
Topic briefing
Latest in this topic
Review installed apps, browser extensions, administrator permissions, startup items, notification permissions, and recent downloads. Remove items you do not recognize only after recording them, update the device, and run a trusted security scan. If a scammer had administrator or remote…
Mark the phone lost with the platform’s official find-device service, lock it, contact the carrier, and review the primary email, financial, password-manager, and cloud accounts. Change credentials when access may be exposed. Do not remove an Apple device from Find…
Rebuild in layers: document fraudulent events, secure email and phone recovery, replace reused credentials, freeze credit where appropriate, repair affected financial and government records, and monitor for follow-on misuse. Use IdentityTheft.gov and each institution’s official process; reject recovery services that…
In the first 30 minutes, secure the email account that controls recovery, change the affected password from a trusted device, end unfamiliar sessions, remove changed recovery methods, and enable stronger authentication. Then review financial, message, app, and forwarding activity and…
If you only opened a link, close it and do not enter data or approve downloads. Update and scan the device if the page behaved suspiciously. If you entered a password, code, card, or identity information, respond to that exposure…
Change the password immediately on the real service from a trusted device, end other sessions, correct recovery details, and enable stronger authentication. Change every other account that used the same or a closely related password, starting with email, banking, the…
Contact the company that moved the money first—the bank, card issuer, wire service, payment app, gift-card issuer, or exchange—and say it was a scam. Ask whether it can stop, recall, reverse, or dispute the transaction. No recovery is guaranteed, but…
Disconnect the device from the network if the scammer still has access, end the session, and do not use that device for banking or password changes until it is assessed. From another trusted device, contact financial providers and secure email…
Report first to the organization that can limit immediate harm: the bank or payment provider, affected account service, mobile carrier, marketplace, or platform. Then use ReportFraud.ftc.gov for U.S. consumer fraud and IC3.gov for internet-enabled crime; contact local emergency services or…
Preserve originals before blocking or deleting: messages with full headers, profile and listing URLs, usernames, phone numbers, transaction IDs, receipts, wallet addresses, tracking details, and a dated timeline. Screenshots are useful context, but export or save original electronic records when…
