You are not alone, and taking a few calm, prompt steps can help you protect your accounts and organize what happened. This quick guide covers what to do next, what to avoid, and how to stay alert afterward.

1. Lock Down Your Accounts Right Away

• Change your passwords: Make new passwords for any account that was hacked. Also, change any other accounts where you used that exact same password.
• Turn on extra security (Two-Step Verification): This is a feature that texts a code to your phone when you log in. Turn this on right away for your main email and your online banking.
• Kick out strangers: Go to your security settings and click “log out” or “sign out” of any phones, computers, or devices you don’t recognise.

2. Talk to Your Bank and Keep Proof of the Scam

• Call your bank right away: Phone your bank’s fraud department to stop any payments and freeze your cards. If you are in the UK, you can simply dial 159 to be safely connected straight to your bank’s real fraud team.
• See if you can get your money back: Check the official Citizens Advice website to see your refund rights. There are rules that can help you get money back if you were tricked into sending a bank transfer, paid with a credit card, or used a debit card.
• Keep every message and receipt: Save all text messages, emails, receipts, phone numbers, website links, and photos of your screen.
• Write down what happened: Note down the exact dates, times, how much money was involved, and what the scammer asked you to do. Do not delete or change any of the original messages.
• What this does: You stop the scammers from taking any more money, and you have a neat file ready to hand over to the police or your bank.

3. Report the Scam

• File a police report: If you live in England, Wales, or Northern Ireland, submit a report online via the official Report Fraud Portal (the primary policing system that replaced Action Fraud) or call 0300 123 2040. If you live in Scotland, report it directly to Police Scotland by calling 101.
• Report suspicious communications: Forward scam text messages to 7726, send phishing emails directly to report@phishing.gov.uk, and report malicious links through the NCSC Suspicious Website Reporting Service.
• Alert the platform: Report the incident directly to the app, website, or marketplace where the interaction took place. Always navigate to official reporting pages independently rather than clicking links sent by a scammer.
• Expected result: Your report is submitted to the appropriate UK organisations for enforcement review.

What not to do

• Do not keep negotiating. More conversation can give the scammer additional information or another chance to pressure you.
• Do not send more money. Ignore requests for taxes, release fees, verification payments, or “recovery” charges.
• Do not share security details. Never provide passwords, one-time codes, recovery phrases, or remote access to your device.
• Do not rely on contact details from the message. Reach providers and agencies through official apps, websites, or statements.

If you think you’ve been victim of a scam and want someone to take a look feel free to reach out to me at info@vigilantscroll.com

---