Search the briefing
Try “phishing,” “identity theft,” or “security key.”
Tagged reports
Review installed apps, browser extensions, administrator permissions, startup items, notification permissions, and recent downloads. Remove items you do not recognize only after recording them, update the device, and run a trusted security scan. If a scammer had administrator or remote…
Rebuild in layers: document fraudulent events, secure email and phone recovery, replace reused credentials, freeze credit where appropriate, repair affected financial and government records, and monitor for follow-on misuse. Use IdentityTheft.gov and each institution’s official process; reject recovery services that…
In the first 30 minutes, secure the email account that controls recovery, change the affected password from a trusted device, end unfamiliar sessions, remove changed recovery methods, and enable stronger authentication. Then review financial, message, app, and forwarding activity and…
If you only opened a link, close it and do not enter data or approve downloads. Update and scan the device if the page behaved suspiciously. If you entered a password, code, card, or identity information, respond to that exposure…
Change the password immediately on the real service from a trusted device, end other sessions, correct recovery details, and enable stronger authentication. Change every other account that used the same or a closely related password, starting with email, banking, the…
Disconnect the device from the network if the scammer still has access, end the session, and do not use that device for banking or password changes until it is assessed. From another trusted device, contact financial providers and secure email…
Report first to the organization that can limit immediate harm: the bank or payment provider, affected account service, mobile carrier, marketplace, or platform. Then use ReportFraud.ftc.gov for U.S. consumer fraud and IC3.gov for internet-enabled crime; contact local emergency services or…
Preserve originals before blocking or deleting: messages with full headers, profile and listing URLs, usernames, phone numbers, transaction IDs, receipts, wallet addresses, tracking details, and a dated timeline. Screenshots are useful context, but export or save original electronic records when…
