Map every account whose codes or passwords you shared
An OTP code shared with a scammer is being typed into your account within seconds. The faster you list every account exposed, the faster you can lock each one.
Why banking and email first
Email is the master key for password resets. Banking is where the money lives. Anything else can wait — these two come first.