Online Safety
What to Do If You've Been Scammed Online — An Immediate Action Guide for Seniors
If you clicked a suspicious link, sent money to someone you now suspect was a scammer, or gave your personal information to the wrong person — this guide is for you.
Here's the bottom line up front: the faster you act, the better your chances of limiting the damage. In some cases, banks can reverse fraudulent transactions within 24 to 48 hours. But you have to move quickly.
Take a breath. Then follow these steps in order.
Last updated: 2026-06-25
You Are Not Alone — And You Did Nothing Wrong
Before anything else, understand this: being scammed is not a sign of weakness or gullibility. The Federal Trade Commission reports that adults over 60 lose more than $3 billion to fraud every year — not because they're naive, but because scammers are professionals who spend all day, every day, perfecting their methods.
They fake caller IDs. They impersonate banks and government agencies. They use real logos, real names, and real-sounding phone numbers. They create urgency and fear on purpose so you act before you think.
If you were scammed, you were targeted by someone who does this for a living. That's on them — not you.
Now let's fix it.
Step 1: Stop — Do Not Send More Money or Information
If a scammer is still in contact with you, do not respond further. Many scams have a second phase where the fraudster contacts you again, claiming they can help you recover your money — for a fee. This is called a "recovery scam," and it's extremely common.
- Hang up the phone if they're calling
- Do not click any additional links they've sent
- Do not send gift cards, wire transfers, or cryptocurrency to anyone promising to help you get your money back
The only path forward is through the steps below.
Step 2: Write Down Everything — Right Now
Before your memory fades, document what happened. You'll need this information for your bank, law enforcement, and recovery agencies.
Write down or take screenshots of:
- The date, time, and method of contact (phone, email, text, website)
- The exact amount of money sent (and how — wire transfer, gift card, Zelle, credit card)
- Any phone numbers, email addresses, or website URLs involved
- Names used by the scammer (even fake ones)
- Any account numbers or confirmation numbers provided
If you clicked a link or visited a suspicious website, note the URL. Don't click it again.
Step 3: Call Your Bank or Credit Card Company Within the Hour
This is the most time-sensitive step. Call the number on the back of your card or on your bank statement — not any number given to you by the scammer.
Tell them exactly what happened and ask them to:
- Reverse or dispute the charge (possible for credit cards and some debit transactions)
- Flag your account for suspicious activity
- Issue a new card if your card number was compromised
- Put a hold on wire transfers if one is still pending
For wire transfers: call immediately. Banks have a narrow window — sometimes just hours — to intercept an outgoing wire. The sooner you call, the better.
For gift cards: call the gift card company directly (the number is on the back of the card). Some companies can freeze an unused gift card balance before the scammer drains it.
Step 4: Report the Scam to Federal Agencies
Reporting doesn't guarantee you'll get your money back, but it creates an official record, alerts investigators to active scam operations, and sometimes results in recovery — especially when many people report the same scammer.
File reports with:
- FTC (Federal Trade Commission): ReportFraud.ftc.gov — the main agency for consumer fraud. Takes about 10 minutes.
- FBI Internet Crime Complaint Center (IC3): IC3.gov — use this if the scam happened online or via email.
- Your state attorney general's office: Most states have a consumer protection division that tracks local fraud patterns.
- Local police: File a local police report. You may need this report number for your bank or insurance company.
If a scammer impersonated a specific company (Amazon, IRS, Social Security Administration), report it directly to that organization's fraud department as well.
Step 5: Freeze Your Credit at All Three Bureaus
If you gave out your Social Security number, date of birth, or full name and address, a scammer may try to open credit cards, take out loans, or file taxes in your name.
A credit freeze is free and blocks new accounts from being opened in your name. You must place it separately with all three bureaus:
- Equifax: equifax.com or 1-800-349-9960
- Experian: experian.com or 1-888-397-3742
- TransUnion: transunion.com or 1-888-909-8872
A freeze doesn't affect your existing accounts or your credit score — it simply prevents anyone (including you) from opening new credit without first unfreezing it.
You can also place a fraud alert, which is a one-step process at any single bureau (they're required to notify the others). A fraud alert lasts one year and requires lenders to take extra steps to verify your identity before approving new credit.
Step 6: Change Your Passwords Immediately
If you entered any passwords on a suspicious website, or if a scammer had access to your device, assume those passwords are compromised.
Change passwords for:
- Your email account first (it's the master key to everything else)
- Your bank and investment accounts
- Any accounts that use the same password
- Social media accounts
Use a different password for every account going forward. A password manager makes this much easier — it remembers complex passwords so you don't have to.
Also check your email's "sent" folder and account settings. Scammers who access your email sometimes set up forwarding rules to quietly receive copies of your messages.
Step 7: Start Monitoring Your Identity Going Forward
Even after you've taken the steps above, the information stolen in a scam can surface weeks or months later on the dark web — sold to other criminals who may try to use it.
Aura is one of the most effective identity protection services available for this exact situation. It continuously monitors your personal information across the dark web, financial accounts, court records, and more — and alerts you the moment something suspicious appears.
Aura also includes:
- $1 million in identity theft insurance if fraud does occur
- 24/7 U.S.-based support from identity theft resolution specialists
- A free VPN and antivirus bundled in the plan
If your information was compromised in a scam, having an active monitor on it is the difference between catching fraud early and discovering it when real damage has already been done.
Affiliate Disclosure: This article may contain affiliate links. If you make a purchase through these links, we may earn a small commission at no extra cost to you. We only recommend products we genuinely believe in. This helps support our work and allows us to continue providing free content.
What If You Sent Gift Cards or a Wire Transfer?
These are the hardest to recover. Gift cards are essentially cash — once the scammer redeems the card numbers, the money is usually gone. Wire transfers are also difficult to claw back once settled.
That said, there are still steps worth taking:
- Gift cards: Call the card issuer immediately (number on the back). Some companies can freeze an unredeemed balance. Document the card numbers you gave the scammer and file an FTC report.
- Wire transfers: Contact your bank the same day. Ask them to issue a "wire recall." Banks have limited ability to do this once funds reach another bank, but the attempt costs nothing.
- Cryptocurrency: The FBI's IC3 handles crypto fraud. Recovery is rare but not impossible — especially if you act fast before the scammer moves the funds.
Be realistic: recovery rates for these payment types are low. The priority is stopping any additional loss and protecting your accounts going forward.
The Emotional Side — It's Okay to Ask for Help
Many seniors feel deep shame after being scammed and don't tell family members or friends. That silence is exactly what scammers count on — it keeps victims from reporting fraud and getting help early.
Being scammed is not a personal failing. It is a crime committed against you.
If you're struggling emotionally, the AARP Fraud Watch Network helpline (877-908-3360) offers free support from trained volunteers who have helped thousands of scam victims. Calls are confidential.
Talk to someone you trust. Let them help you work through the steps above if needed.
Protect Yourself Going Forward
Once you've addressed the immediate situation, consider these longer-term protections:
- Sign up for identity monitoring (Aura, mentioned above) so any future misuse of your information surfaces immediately
- Add two-factor authentication to your email and financial accounts — even if someone gets your password, they can't log in without your phone
- Set up a VPN on devices you use for banking and sensitive activities
- Tell a trusted family member what happened so they can help you stay vigilant
You've been through a frightening experience. The steps above will help you close the wound, watch for infection, and build better defenses so it doesn't happen again.
Stay Protected — Join the ClearShield Community
Every week, we send practical, plain-English cybersecurity tips to thousands of seniors who want to stay safe online without becoming tech experts.
Sign up below — no spam, no technical jargon. Just useful information you can act on.