River Watch · first steps
Breathe. Then take these steps, one at a time.
You don’t need to do everything at once or perfectly. Work down the list in order — each step makes the next one easier.
You did the right thing by stopping. The moment you doubt a message, a call, or a transfer is the moment the scam starts to fail. From here, it’s just a checklist.
Stop all contact and don’t send anything more
Hang up, stop replying, and send no further money, gift cards, crypto, or codes — even to “release” or “recover” funds. That promise is part of the scam.
Call your bank or card company now
Use the number on the back of your card or your official app — not one anyone gave you. Say you’ve been scammed; ask them to stop/recall transfers, freeze the card, and open a fraud dispute. If you sent a wire, gift cards, or crypto, tell them anyway — speed matters.
Change passwords and turn on two-factor
Start with email, then your bank and anything sharing that password. Turn on two-factor authentication. If someone had remote access to your device, sign out of all sessions.
Freeze your credit (US)
A freeze is free and stops new accounts opening in your name. Do it at all three bureaus — links on the Resources page.
Report it
File with the FTC at reportfraud.ftc.gov and, for online crime, the FBI at ic3.gov. If your identity was used, start a plan at IdentityTheft.gov.
Write down what happened, while it’s fresh
Dates, the names/numbers used, amounts, and any reference numbers from your bank. Keep screenshots.
Tell one person you trust
Saying it out loud once breaks the isolation the scam depends on — a friend, family member, or a calm ear at Your Story.