Start with
the right call.

I paid or shared payment details

Call your bank, card issuer or payment provider immediately using the number on your card, statement or established app. Explain the suspected scam and ask about stopping or recalling the payment and securing affected access.

No one here can promise a recovery outcome or time window.

I shared a password or code

Contact your established IT provider for a work account, or use the account provider’s official recovery process from a trusted device. Secure the account, change exposed or reused passwords, and review sessions with appropriate support. If bank access was involved, call the bank too.

Never send passwords or authentication codes to this desk.

I granted access or downloaded something

Stop sensitive work on the affected device. Contact established IT or device support promptly and follow your organization’s incident procedure. If safe and consistent with that procedure, disconnect only the affected device’s Wi-Fi or Ethernet. Leave shared network equipment running.

Do not wipe the device, reopen the suspicious link or run your own investigation.

I clicked, but I’m not sure what happened

Stop interacting. Record what you remember without reopening the link. If a work account or device may be involved, tell your established IT contact promptly, including whether you entered anything or downloaded a file. No symptoms does not prove that everything is safe.

I shared identity information

Use IdentityTheft.gov for steps suited to the information exposed, and contact affected institutions. Keep Social Security numbers and identity documents out of this site and desk messages.