The first day after a scam matters more than most people realise. Money can sometimes be traced or recalled quickly, and every hour you wait makes that harder. Here is a calm, ordered plan for the first 24 hours, written for UK readers.

First, a Word About Shame

People who have been scammed often delay reporting because they feel embarrassed. That delay is exactly what fraudsters rely on. Scams are designed by professionals who study how people think under pressure, and they catch out lawyers, accountants and IT managers as readily as anyone else. Being caught does not mean you were careless. It means the approach was good. The only useful question now is what you do next.

The steps below are in rough order of urgency. If you are unsure which applies to you, start at the top and work down. Rules and phone numbers can change, so treat this as a guide and confirm details with your bank and the official sources named at the end.

The First Hour: Stop the Damage

Your priority in the first hour is to stop further loss, not to work out exactly what happened.

  1. Stop talking to the scammer. Do not reply, do not argue, and do not send any more money, even if they promise a refund or say a final fee will release your funds. Follow-up demands are a common second stage of the same fraud.
  2. Call your bank or card provider straight away. Use the number printed on the back of your card or on your bank's official website, not a number given in a message or by the caller. Many UK banks and card issuers can also be reached by dialling 159, a short code that connects you to your own bank. Check the official 159 information before relying on it, and be cautious of anyone who contacts you and asks you to ring it.
  3. Tell them exactly how you paid. A card payment, a bank transfer, a payment through an app, cash and cryptocurrency are all handled differently. Say plainly whether you made the payment yourself or whether someone else took money without your consent. That distinction affects which protections apply.
  4. Ask the bank to freeze or block what is at risk. That may mean cancelling a card, locking online banking, or putting a stop on a standing order or direct debit.

Hours Two to Six: Lock Down Your Accounts

Once money movement is dealt with, protect everything else. If you gave out a password, a one-time code, a card number or remote access to your device, assume the scammer still has it.

  • Change passwords starting with your email account, because email is how most other passwords are reset. Then change banking, shopping and social media logins. Use a different password for each, and turn on two-step verification wherever it is offered.
  • Remove remote access. If you installed any remote-control or screen-sharing software at someone else's request, uninstall it and run a security scan. If you are not confident doing that, ask a trusted person or a reputable repair service to check the device.
  • Check your phone number. Fraudsters sometimes try to move a number to a new SIM. If your phone suddenly loses signal for no reason, contact your mobile provider.
  • Review recent activity on your bank accounts, card statements and email sent folder for anything you do not recognise.

Hours Six to Twelve: Gather Your Evidence

Banks, police and the Financial Ombudsman Service all work from evidence, so collect it while your memory is fresh. Do not delete anything, even if it is unpleasant to look at.

  • Screenshots of messages, emails, websites, adverts and social media profiles, including the web address and any usernames.
  • Phone numbers, email addresses and call times.
  • Payment details: the date, amount, account details you paid to, and any reference number.
  • A short written timeline in your own words, with the order of events. Write it once and reuse it for every report.

Hours Twelve to Twenty-Four: Report It Properly

Reporting is not only about getting money back. It also helps police and banks spot patterns and shut down accounts used by fraudsters.

Report to the police fraud service. In England, Wales and Northern Ireland, fraud is reported through the national reporting service, which the police have rebranded from Action Fraud to Report Fraud. You can report online or by phone on 0300 123 2040, according to Age UK's current guidance. In Scotland, fraud is reported to Police Scotland, usually through 101. If someone is in immediate danger or a crime is in progress, call 999.

Report phishing messages. Suspicious texts can be forwarded free to 7726, and suspicious emails can be forwarded to the National Cyber Security Centre at [email protected]. These do not replace a police report, but they help block the sender.

Tell the platform. If the scam began on a marketplace, dating site, social network or messaging app, report the profile or listing to the platform too.

Consider support. Charities such as Victim Support, and Age UK for older people, offer practical and emotional help. Citizens Advice can help with consumer questions.

Will You Get Your Money Back?

It depends on how you paid and what happened, so be wary of anyone who promises a certain answer. As of October 2026, the Payment Systems Regulator describes mandatory reimbursement rules for authorised push payment (APP) fraud, where you were tricked into sending a bank transfer yourself. In summary, the rules:

  • cover individuals, microenterprises and charities making UK bank transfers through participating firms;
  • set a standard cap of £85,000 per claim;
  • expect you to report within 13 months of the payment;
  • allow the firm up to 35 business days to reach a decision, and longer if it needs more information from you;
  • allow an optional excess of up to £100, which cannot be applied to vulnerable consumers; and
  • do not apply where the customer was complicit or grossly negligent, an exception that does not apply to vulnerable consumers.

Card payments, unauthorised transactions and credit card purchases have their own, separate routes, such as chargeback or Section 75 protections in some cases. If you disagree with your bank's decision, you can escalate to the Financial Ombudsman Service. Check the Payment Systems Regulator and Financial Ombudsman Service websites for the latest position, because these rules are still evolving.

The Mistakes That Make Things Worse

  • Paying a "recovery agent". Anyone who contacts you offering to retrieve lost money for an upfront fee is very likely running a second scam on the same victim.
  • Waiting until you are sure. You do not need proof of fraud to call your bank. A suspicion is enough.
  • Using contact details from the scam. Always find the official number yourself.
  • Handling it alone. A second pair of eyes helps, particularly if you are anxious or the sums are large.

Frequently Asked Questions

Is it too late if the scam happened weeks ago?
No. Report it anyway. Some protections have time limits, such as the 13-month window for APP fraud claims, so earlier is better, but late reports still help police and may still be considered by your bank.

Do I need to report if I lost no money?
It is still worth doing, especially if you shared personal details. Reporting helps others, and you can take steps to guard against identity fraud.

Should I tell my family?
Usually yes. Scammers often reuse stolen details to target relatives, and support makes recovery easier.

What if I shared my National Insurance number or passport details?
Tell your bank and consider checking your credit report with the main credit reference agencies for any applications you did not make. Official guidance on identity fraud is on gov.uk.

Where to Go From Here

A reactive checklist helps once something has gone wrong, but the better outcome is to spot the approach before you act. The Fraud and Scam Prevention Blueprint is a PDF guide aimed at individuals and families, older adults and their carers, small business owners and online shoppers. According to its description, it is built around the idea that most victims are not careless but simply did not know what to look for.

The product page lists fraud recognition checklists, account security worksheets, scam-type breakdowns, country-specific reporting guides, an identity theft response protocol and family protection planning pages. It is a self-paced reference, not personal advice or a recovery service, and it cannot guarantee that you will never be targeted.

Get Fraud and Scam Prevention Blueprint →

This article is general information only and is not legal, tax, financial or medical advice. Fraud reporting routes, bank procedures and reimbursement rules change, so check current official guidance, such as the Payment Systems Regulator, the Financial Ombudsman Service, Report Fraud and gov.uk, and speak to your own bank before acting.