If you gave your bank or card details
- Call your bank now, using the number on the back of your card or their official app. In the UK you can also call 159.
- Tell them what happened. If you paid by card or bank transfer, the FTC suggests asking them to reverse the payment and refund your money.
If you typed in a password
- Change that password straight away. Make it strong and new.
- Change the password on any other account that used the same one. The NCSC says criminals try a stolen password on other accounts.
- Turn on two-step verification for that account.
If you’re locked out, or your account is sending odd messages
The NCSC says these are signs your account has been hacked:
- You can’t log in.
- Your security settings have changed.
- Messages have been sent from your account that you don’t recognise.
- There are purchases or money transfers you didn’t make.
- Go to the company’s official website and search its help pages for how to recover your account.
- For email, check for forwarding rules you didn’t set up. Criminals use them to get copies of your emails.
- Change your passwords, then log out of all devices from the account’s settings.
- Tell your friends and contacts you were hacked, so they ignore odd messages from you.
If you installed something or let someone control your computer
- Open your antivirus or security software and run a full scan. Let it remove anything it finds.
- Make sure the security software is up to date first.
- Change your passwords and turn on two-step verification.
Only clicked, didn’t type anything? On a computer, the NCSC advises running a full antivirus scan. Then keep an eye on your accounts and bank statements for anything unusual.
If you lost money, report it
- In the UK: if you’ve lost money, tell your bank, then report it to Report Fraud (England, Wales and Northern Ireland) on 0300 123 2040, or to Police Scotland on 101.
- In the US: report it to the FTC at ReportFraud.ftc.gov.
- If it happened on a work phone or laptop, tell your IT department.
Next: learn how to spot a scam text next time.
Sources
- National Cyber Security Centre (UK), Phishing scams: If you've shared sensitive information, checked 11 Oct 2026.
- National Cyber Security Centre (UK), Recovering a hacked account, checked 11 Oct 2026.
- Federal Trade Commission (US), What To Do if You Were Scammed, checked 11 Oct 2026.
- National Cyber Security Centre (UK), Report a scam phone call, checked 11 Oct 2026.