The First 72 Hours: What to Do the Moment You Realize It’s a Scam

The moment of realization is a body blow — grief, shame, and panic arriving together. This page is the checklist for exactly that moment, in the exact order that protects the most: money first, evidence second, reporting third, heart fourth. Work the list; feel the feelings between the steps.

Hour zero: stop all money movement

Do not send another dollar — including “release fees,” “taxes,” or “refund processing” payments. Whatever story is mid-flight, it ends now, unanswered. Then call your bank and any payment apps used, say the words “I am the victim of fraud,” and ask for: recall/reversal attempts on recent wires and transfers, disputes on card payments, and a fraud flag on the account. Speed is everything — wires recall in hours sometimes, never in weeks. Crypto payments: report to the exchange used anyway (freezes happen at on-ramps), and document the wallet addresses — they matter for law enforcement even when recovery is unlikely. Gift cards: call the issuer with card numbers and receipts; partial freezes occasionally succeed same-day.

Hours 1–24: preserve everything, then cut contact

Before blocking, screenshot the entire relationship: profiles, chat history, payment requests, phone numbers, email addresses, the photos they used, and every payment confirmation with dates and amounts. Export chats where the app allows. This feels backwards — every instinct says delete the whole nightmare — but the file IS the case: banks, police, and the platforms all move on evidence. THEN block, everywhere at once (they escalate when they feel the hook slipping — expect guilt bombs, fake emergencies, even threats; silence is the only reply that wins). Change your passwords — email first — and enable two-factor everywhere, because anyone romanced by a professional shared more access than they remember.

Days 1–3: file the reports that actually matter

In order: 1) IC3.gov — the FBI’s internet crime portal, the report that feeds real investigations and, in bulk cases, occasional restitution lists. 2) ReportFraud.ftc.gov — the FTC’s consumer file. 3) Local police — ask for a report NUMBER; banks and insurers often require it. 4) The platform where they found you — the profile dies and its victims-in-progress get a chance. 5) If identity details were shared (SSN, ID photos): freeze your credit at all three bureaus — it’s free and fast. None of these calls is pleasant; all of them are armor.

The second wave: recovery scammers are already hunting you

Here is the cruelest mechanic in this industry: reporting and support groups get scraped, and “fund recovery” services will find you — polished websites, “blockchain investigators,” fake law firms, sometimes claiming to BE the FBI — all promising your money back for an upfront fee. It is the same scam wearing a rescue uniform, frequently run by the same networks selling victim lists to each other. The law: no legitimate recovery service charges upfront, guarantees results, or DMs you first. Real recovery flows only through your bank’s fraud process and law enforcement — the calls you already made. We’ve dissected the whole genre in the recovery-scam exposé.

The heart part (it belongs on the checklist)

You were not stupid. You were targeted by professionals running scripts refined on thousands of people — intelligence has nothing to do with it; loneliness plus kindness plus a manufactured emergency beats intelligence every time. Tell ONE trusted person today — shame is the scammer’s last unpaid employee, and it dies in daylight. If the loss is severe, AARP’s fraud victim support line and local victim-services programs exist for exactly this, and using them is strength. The directory’s guides are here when you’re ready to armor up — for you, and for the next person you’ll quietly protect by knowing the playbook.