Quick response guides for common digital emergencies
1 Contain
Stop the damage immediately
- Stop all communication with the scammer immediately. Do not respond to threats, promises, or follow-up messages.
- Document everything before it disappears. Save all emails, text messages, chat logs, receipts, and transaction records. Take screenshots of profiles, websites, and conversations.
- Determine what was compromised and follow the specific guide:
- Money stolen from your bank or credit card: Banking Fraud
- Online accounts compromised: Account Hacked
- Computer infected or files locked: Malware
- Personal information shared (SSN, driver’s license, ID): Identity Theft
- Phone or device lost/stolen: Lost Phone or Lost Wallet
- Important files deleted or encrypted: Data Loss
2 Recover
Get back to normal
- Report to the FTC at reportfraud.ftc.gov. This helps law enforcement track scam patterns and build cases.
- Report internet crimes to the FBI’s IC3 at ic3.gov. This is especially important for online fraud, business email compromise, and romance scams.
- File a police report for significant financial losses. You may need this for insurance claims and bank dispute processes.
- Warn friends and family who may be targeted next. Scammers often use stolen contact lists to impersonate victims. Be especially alert for “recovery scams” where someone contacts you promising to get your money back for a fee.
3 Prevent
Stop it from happening again
Red flags that signal a scam:
- Urgency and pressure to act immediately
- Requests for unusual payment methods (gift cards, wire transfers, cryptocurrency)
- Too-good-to-be-true offers or unexpected prizes
- Unsolicited contact claiming to be from your bank, the government, or tech support
- AI-generated voices or video impersonating people you know
Protect yourself:
- Verify identities independently. Call back using official numbers from the company’s website, not numbers provided by the caller.
- Never share verification codes, passwords, or PINs with anyone who contacts you.
- If something feels wrong, hang up and verify through official channels. Legitimate organizations will not pressure you for an immediate decision.
Related Digital Chores: Practice Vigilant Email Hygiene, Protect Against AI Scams, Practice Mindful Information Sharing
Key Contacts
- FTC: reportfraud.ftc.gov
- FBI IC3: ic3.gov (internet crimes)
- Anti-Phishing Working Group: Forward phishing emails to reportphishing@apwg.org
- Spam Texts: Forward to 7726 (SPAM) to report to your carrier
- BBB Scam Tracker: bbb.org/scamtracker
Outside the United States? View international reporting resources
(If you are a victim of fraud or cybercrime outside the U.S., or the incident involves international parties, here are some resources in other countries/regions.)
Canada
The central agency for fraud and scam reporting in Canada is the Canadian Anti-Fraud Centre (CAFC) – website: antifraudcentre.ca. You can report scams, identity theft, fraud attempts, etc., through their online system or by phone (1-888-495-8501). The CAFC is jointly operated by the RCMP, Ontario Provincial Police, and Competition Bureau, and they collect intelligence on fraud schemes.
If you are a victim of identity theft or have lost money, you should also report it to your local police in Canada (bring any evidence, like bank statements or emails). The police might give you an occurrence number, which can help with bank investigations or credit bureau communications.
Canada has a national cybercrime reporting system under development – currently, the advice is to use CAFC for cyber-fraud, and if it’s a cyber incident like hacking without fraud, to report to local police or RCMP.
Canadian credit bureaus (Equifax Canada, TransUnion Canada) also offer fraud alerts and credit freezes (credit freezes are often called “credit report consumer declarations” in Canada and function a bit differently than in the US, sometimes with fees – check their sites for the latest process).
United Kingdom
The UK’s national reporting center for fraud and cybercrime is Action Fraud – website: actionfraud.police.uk. If you’re in England, Wales, or Northern Ireland and you’ve been scammed, defrauded, or hit by cybercrime, report it to Action Fraud. You can do so via their online tool 24/7, or by phone at 0300 123 2040 (available Mon–Fri 8am-8pm).
When you report online, you can create an account to get updates or report as a guest. If you’re in Scotland, Action Fraud does not cover you – instead, report directly to Police Scotland (call the non-emergency line 101 or go to a local station). In an immediate emergency or if a crime is in progress, always dial 999 in the UK.
Action Fraud will give you a crime reference number and your report feeds into the National Fraud Intelligence Bureau. For cybersecurity incidents affecting organizations, the UK has the National Cyber Security Centre (NCSC).
European Union
There isn’t a single EU-wide consumer cybercrime hotline, as law enforcement is handled by individual countries. If you’re in an EU country and fall victim to cybercrime or fraud, report it to your national police or relevant authority.
Many EU countries have online fraud/cybercrime reporting platforms or centralized offices: for example, France has a platform called “PHAROS” for reporting online illicit content; Germany has local police portals in each state; the Netherlands has a centralized reporting site (politie.nl) for internet fraud; etc. You can usually find this info on your country’s police or interior ministry website.
Europol (the EU’s law enforcement cooperation agency) does not take direct citizen reports – they advise victims to go through national authorities. However, Europol’s European Cybercrime Centre (EC3) website provides general guidance and resources on cybercrime and how to report in each EU country.
The EU also has OLAF (European Anti-Fraud Office), but OLAF deals with fraud involving EU funds or EU institutional staff – not personal identity theft or scams.
One EU-wide resource: econsumer.gov – an initiative by the International Consumer Protection Enforcement Network (ICPEN) – allows consumers in many countries (including EU members) to report international scams.
Australia
Australia has a national cybercrime reporting portal called ReportCyber, which replaced the older ACORN system. To report cybercrime (such as hacking, ransomware, online fraud) go to the Australian Cyber Security Centre’s ReportCyber page at cyber.gov.au/report and submit a report.
If it’s an immediate threat to life or safety (including something like an active extortion threat), call 000 (Australia’s emergency number) right away.
For other scams, particularly those targeting consumers (like dating scams, investment scams, etc.), you can also report to the Australian Competition & Consumer Commission (ACCC) Scamwatch at scamwatch.gov.au.
Additionally, if you experience identity theft in Australia, you can get support from IDCARE (idcare.org), a national identity & cyber support service that helps individuals navigate the recovery process. They’re not a government agency but are endorsed by the government as a helpful resource.
International Resources Summary
No matter where you are, if you’re a victim of cybercrime or fraud, report it to your local authorities – police, consumer protection agencies, or specialized cybercrime units. Many countries have similar setups to the U.S.: a consumer fraud reporting center, credit bureaus for credit issues, and emergency services for urgent situations.
If you’re traveling or a scam crosses borders, you can also file reports in multiple jurisdictions (e.g., report to your home country authorities and the country where the scammer is based if known). Agencies like Interpol and Europol facilitate info-sharing between countries.
For example, Interpol has an initiative called the International Consumer Protection and Enforcement Network and will coordinate if you report through econsumer.gov or through your national police who then reach out internationally.
The key is to use official channels – many of the same tips (don’t pay scammers, preserve evidence, alert banks, etc.) apply globally. Laws and processes vary, but the goal is to document the incident and get help. And always remember to follow up on protecting yourself (freezes, alerts, changing passwords) in addition to making reports.