You came across a number on the internet for some purpose, such as booking an appointment or a reservation. Unsuspecting, you called the number, and somewhere in the middle of the conversation, it started to feel way off.
The person on the other side asks you to pay an amount instantly through your bank card or sends you an OTP or any shady-looking link through WhatsApp or text.
Maybe you already read out a card number, tapped on any link, or let someone access your device remotely without knowing. Next, you receive an SMS that a significant amount has been debited from your bank account.
If you ever end up calling a scam number, the first half an hour decides a lot. Stop talking, protect the money, then clean up the device and change the passwords.
TL;DR: If you called a scam number, hang up and cut off any remote access first. Then call your bank or card issuer on the number printed on your card, scan your device, change your passwords, and report the scam. Do not call the scam number back, and ignore anyone who offers to recover your money for a fee.
The first few minutes after a scam call
First thing, never call phone numbers you find on suspicious websites, web ads, or pamphlets stuck on streets. In case you did, hang up. Do not call back, and do not answer if the number rings you again. I suggest blocking the number from sending you calls or texts.
If you installed anything or typed a code for them, close that app and disconnect the device from the internet. Simply tap on the flight mode button on your phone to disrupt the active network.
I would rather lose five minutes to a dropped Wi-Fi connection than have a session still running in the background with some scammer remotely emptying my bank account. Incidents like these are as real as it can get.
How to get your money back from scammers?
The FTC says your money might already be gone, but it is always worth asking the company you paid through whether it can be recovered. The right call depends on how you paid.
| How you paid or what you shared | Who to contact first |
|---|---|
| Credit or debit card | The card issuer or bank, using the number on the card |
| Bank transfer or Zelle | Your bank or credit union, and ask them to reverse it |
| Payment app such as PayPal or Venmo | The app, and ask it to reverse the payment |
| Gift cards | The gift card issuer; keep the card and receipt |
| Cryptocurrency | The exchange or ATM operator, then report to the FTC |
While it is fresh, write down the number you called, the time, the name they gave, and any amounts they mentioned. Details blur quickly, and a report with specifics is more useful.
Secure the device and your email accounts
If the caller had access to your computer or phone, the FTC says to
- Update your security software.
- Run a full malware scan, and delete/remove anything it flags.
- Then change your passwords
- Turn on two-factor authentication for your primary email accounts.
Avoid logging in to your bank or email from the same device while you sort this out. Do the password changes from a different device if you can. It is slower, and it removes the doubt about whether the old one is still being watched.
Check your bank accounts too. Malwarebytes recommends the same steps for people who called a scam invoice number: scan, check accounts, change critical passwords, and enable multi-factor authentication.
What to do if you gave out personal details to the scammer?
If you shared a Social Security number and think it was used fraudulently by miscreants, the FTC points you to identitytheft.gov for a recovery plan.
Otherwise, when you are not sure your credentials were misused, it has a separate data breach path for steps to protect yourself.
If you gave out a password and can still sign in, change it, and change it anywhere you reused it. If you cannot sign in, use the account’s recovery process. The details you gave feel small in the moment, and they are exactly what gets reused later and turns your life upside down.
Duly report the scam to appropriate authorities
Report the call at reportfraud.ftc.gov. The FTC says reports help it build cases, spot trends, and warn others.
Expect persistent calls from the scammers, because people who have been scammed once can get targeted again by the scammers and their associates. A stranger offering to recover your money for a fee is another version of the same scam.
Our coverage of Android bank call verification shows one way phones are starting to push back on fake bank calls.
Frequently Asked Questions
Can I get my money back after calling a scam number?
Sometimes, but the FTC says your money might already be gone. Contact the company you paid through right away and ask it to reverse the payment.
What if I only called and gave them nothing?
Calling alone does not hand over access, so hang up and do not call back. Stay alert for follow-up calls, and report the number.
Should I call the scam number back to cancel?
No, calling back gives the scammer another chance to pressure you. Contact your bank or the real company using a number you find yourself.
Where do I report a scam call?
Report it to the FTC at ReportFraud.ftc.gov. Include the number you called and what happened.
Situational awareness is the key to staying safe from phone call scams
You will probably replay the call in your mind for a few days and wonder how gullible you were to fall for such a scam. That is normal. It happens to most unsuspicious folks. That won’t help you anyway.
Avoid calling suspicious numbers you find on random walls, street ads, or on sites that promise something lucrative for free or assure fixing your “slow” PC. If it is too good to be true, then it probably is.
Immediately taking control of your primary accounts, changing passwords, restricting access, scanning your device for malware, and alerting the authorities should take care of the problem for good.
