Take a breath.
Make the right call.
Do not wait for the Scam Desk. Use a bank, IT or account-support route you already had before the suspicious message. More than one may apply.
More than one route may apply. Act promptly through your established contacts.
I paid or shared payment details
Call your bank, card issuer or payment provider now, using the number on your card, statement or established app. Explain the suspected scam and ask about stopping or recalling the payment and securing affected access.
No one here can promise a recovery outcome or time window.
I shared a password or code
Contact your established IT provider for a work account, or use the account provider's official recovery process from a trusted device. Secure the account, change exposed or reused passwords, and review sessions with appropriate support. If bank access was involved, call the bank too.
Never send passwords or authentication codes to this desk.
I granted access or downloaded something
Stop sensitive work on the affected device. Contact established IT or device support promptly and follow your organization's incident procedure. If safe and consistent with that procedure, disconnect only the affected device's Wi-Fi or Ethernet. Leave shared network equipment running.
Do not wipe the device, reopen the suspicious link or run your own investigation.
I clicked, but I'm not sure what happened
Stop interacting. Record what you remember without reopening the link. If a work account or device may be involved, tell your established IT contact promptly, including whether you entered anything or downloaded a file. No symptoms does not prove everything is safe.
I shared identity information
Use IdentityTheft.gov for steps suited to the information exposed, and contact affected institutions. Keep Social Security numbers and identity documents out of this site and desk messages.
Reporting and support
Report internet-enabled fraud to FBI IC3 and scams to the FTC. Florida residents can use the Florida Attorney General's consumer resources. Immediate physical danger requires emergency services. Reporting does not replace the immediate bank or IT response; see the FTC's recovery guidance.