What should I do if I already gave a scammer my information?

If you gave card or bank details

1. 1Call the fraud number printed on your card or statement — not one from the caller — and say the word 'fraud.'
2. 2Ask them to block the card, issue a new number, and place a watch on the account.
3. 3Review recent transactions with the representative and dispute anything unfamiliar in writing.
4. 4Change your online banking password from a different device and turn on two-factor authentication.
5. 5Set up alerts for new payees, large withdrawals, and international transactions.

If you gave your Social Security number

1. 1Go to IdentityTheft.gov and file a report to get a personalized recovery plan.
2. 2Freeze your credit free at Equifax, Experian, and TransUnion.
3. 3Create your my Social Security account at ssa.gov before someone else does, and review your earnings record.
4. 4Watch for a fraudulent tax return; if your e-file is rejected, file IRS Form 14039.
5. 5Consider a Self-Lock through E-Verify to block employment misuse.

If you gave your Medicare number

1. 1Call 1-800-MEDICARE and report potential compromise so the record is flagged.
2. 2Contact your state Senior Medicare Patrol for a free statement review.
3. 3Read every Medicare Summary Notice for a year and question unfamiliar suppliers or services.

If you gave a password or a one-time code

1. 1Change that password immediately, starting with your email account, since email resets everything else.
2. 2Change it anywhere you reused it, and switch to unique passwords stored in a password manager.
3. 3Turn on two-factor authentication, and review account recovery settings for phone numbers or emails you do not recognize.
4. 4Check for forwarding rules in your email — attackers add them to intercept future codes.

If you installed software or allowed remote access

1. 1Disconnect the device from Wi-Fi immediately.
2. 2Uninstall any remote tool such as AnyDesk, TeamViewer, UltraViewer, or LogMeIn.
3. 3Change your passwords from a clean device, not the affected one.
4. 4Have a trusted technician review the machine before you use it for banking again.

What comes next

Expect a follow-up. Victim information is resold, and the second contact is usually a 'recovery agent,' a 'fraud investigator,' or a supposed refund from the original company. No legitimate recovery service charges an upfront fee, and no government office charges for help. Keep one folder with dates, case numbers, and names — recovery is administrative work, and documentation is what shortens it.