Member guide · Read a preview, full guide with Personal

Gave a scammer your personal information? What to do next

Step-by-step help if you gave a scammer your Social Security number, bank details, password or access to your computer, based on FTC and IdentityTheft.gov guidance.

Check yourself or someone else

See what’s online about a photo, phone number or email. Check your own to see what others can find, or check someone you’re talking to.

See what’s online about an email address: yours, or one that’s contacting you.

We check this address against known data leaks. We don’t save what you enter. Up to 10 checks a day.

Got a suspicious email? Check where it really came from →

Got a suspicious email? See where it really came from

Paste the email’s headers to see the real sending server, country and sender checks.

✉️ Check email headers

It happens to careful people every day. What matters now is working out what was shared and closing each door in turn. These steps follow guidance from the FTC and IdentityTheft.gov.

Step 1: Work out what you shared

  • A username and password.
  • Card or bank account numbers.
  • A Social Security number, passport, licence or other ID.
  • Remote access to your computer or phone.
  • A one-time code sent to your phone.

Unlock the full guide with ImposterWatch Personal, US$9/mo

Members read every guide in full, plus get breach and dark web alerts for up to three email addresses, an AI-powered romance scam check every month, and account recovery help.

Get Personal, US$9/mo Already a member? Log in

Not ready? Get scam alerts

Signing up doesn’t unlock this guide. See our privacy policy.

If you shared a password

If you can still sign in, create a new strong password and change it anywhere else you used the same one, then turn on two-step sign-in. If you’re locked out, use the account’s official recovery process (FTC, FTC hacked account guide).

If you shared card or bank details

Call your bank or card issuer on the number on the back of your card, or through its app, and ask them to block the card and reverse any payments (FTC).

If you shared an ID number

In the US, if your Social Security number was used, report it at IdentityTheft.gov for a recovery plan. If you’re not sure it was used, follow the steps at IdentityTheft.gov/databreach (FTC). A credit freeze with each bureau stops new accounts being opened in your name.

If you gave access to your computer

Update your security software, run a full scan, remove anything it flags, then change your passwords and turn on two-step sign-in (FTC).

If you shared a one-time code

That code usually lets someone into an account or approve a payment. Sign in to that account, change the password, sign out other devices and contact the provider. See our guide to the “code sent by mistake” scam.

Watch for follow-up scams

People who’ve been scammed are often contacted again by someone offering to recover money for a fee. Don’t pay. Check our guide on what to do if you sent money and how to check if your email was in a breach.

Where to report

Questions

I gave my Social Security number. What now?

If it was used, the FTC says to report it at IdentityTheft.gov and follow the recovery plan. If you’re not sure it was used, follow the protective steps at IdentityTheft.gov/databreach.

I gave a scammer remote access to my computer. What should I do?

The FTC suggests updating your security software, running a scan and removing anything it flags, then changing your passwords and turning on two-step sign-in.

Should I freeze my credit?

In the US a credit freeze is offered by each of the three credit bureaus at no cost, and it stops new credit being opened in your name while it’s on.

Someone is calling to help me recover my money for a fee. Is that real?

Be very careful. Recovery offers that ask for an upfront fee are a known follow-up scam.

Want to know where your email has leaked?

Run your email through the breach check above. ImposterWatch Personal (US$9/month, cancel anytime) adds AI-powered checks, breach alerts for up to three email addresses and account recovery help.

Run the email checkGet Personal, US$9/mo

More guides

General information only, not legal or financial advice. ImposterWatch is operated by Cloud Investments FZE (UAE) and is not a background check or private investigator service.