What to do now: checklist
You are not alone, and it is not your fault. Tick each step when it's done. Take your time.
Emergency: 911 · Crisis support: call or text 988 · Report fraud: reportfraud.ftc.gov · Report cyber crime: ic3.gov · Age 60+: 833-372-8311 (833-FRAUD-11)
The bank rule: never respond to a call or text claiming to be your bank. Hang up and call the number on the back of your card. Never share your PIN, password or one-time code.
Right now
- I am safe, or I called 911.
- I stopped all contact with the scammer. I did not pay and did not negotiate.
- I disconnected any affected device from the internet / Wi-Fi (power down only if I could not disconnect).
- I called my bank or card company using the number on the back of my card.
- I took screenshots of messages, the ransom note, transactions, usernames, numbers, dates and times.
Today
- I reported at reportfraud.ftc.gov.
- I reported at ic3.gov.
- I made a police report. Report number: ______________
- I changed passwords (email first) from a trusted device and turned on two-step verification.
- I signed out of all sessions and removed unknown linked or paired devices.
- If my identity was used: I started a plan at identitytheft.gov.
This week
- I froze my credit at Equifax, Experian and TransUnion.
- I checked my free credit reports at annualcreditreport.com.
- If a company would not help: I complained to the CFPB (consumerfinance.gov/complaint).
- Texas: I filed a complaint with the Texas Attorney General, if needed.
- If an older or disabled adult was harmed: I called the Texas Abuse Hotline 1-800-252-5400 or reported at txabusehotline.org.
Ongoing
- I check my statements regularly.
- I will never pay anyone who promises to recover my money.
- Updates are automatic; Bluetooth and Wi-Fi auto-join are off when not in use.
- I am being gentle with myself. If it gets heavy, I can call or text 988.
Checked against official sources on 2026-10-26. Full guide with links: What to do now.
