Recovery windows are short — hours for cards, sometimes a day or two for transfers, often nothing for crypto. Open every dispute simultaneously.
If they also took remote access or codes
Treat this as a stacked compromise — also follow the remote-access or shared-codes paths in parallel.
Was this guide helpful?
Know someone who needs this? Send them the guide.
JD
Written by
Jordan DicksonFounder, CyberSecurityGuides
Founder of CyberSecurityGuides, writing practical, jargon-free guides that help everyday people recover from and protect against online attacks.
Reviewed by CSG Security Engineers