Stop further access
Contact affected financial institutions through trusted contact information, change compromised passwords from a secure device and enable multifactor authentication. Do not continue communicating with someone demanding secrecy, gift cards, cryptocurrency or remote access.
Preserve records
Keep messages, email headers, phone numbers, usernames, payment confirmations, dates and a chronological summary. Do not edit original files. Avoid sending additional funds in response to promises that money can be recovered.
Use federal reporting resources
IdentityTheft.gov provides an official recovery plan for identity theft. The Federal Trade Commission fraud-reporting service accepts consumer reports. Internet-enabled crime may also be reported to the FBI Internet Crime Complaint Center.
Contact local police when appropriate
A police report may be necessary for particular losses, insurance claims or identity-theft documentation. Eligibility for online reporting varies. Use the agency serving the location connected to the incident and follow its screening questions.
Watch for recovery scams
People already harmed are often targeted again by impostors promising guaranteed recovery for an advance fee. Verify every organization independently and be cautious with unexpected contacts claiming to be investigators, banks or government officials.