Get every reused password and exposed account out of the scammer's hands within the hour.
What to do
- Reset the bank password and any account that shares it — start with email and phone-carrier accounts
- Revoke active sessions on the bank app, email, and any accounts you logged into recently
- Cancel and reissue any card whose full number or CVV you spoke aloud or typed
- Tell the bank explicitly that this was an Authorised Push Payment (APP) / scam-induced loss so it is logged correctly
Was this guide helpful?
Know someone who needs this? Send them the guide.
JD
Written by
Jordan DicksonFounder, CyberSecurityGuides
Founder of CyberSecurityGuides, writing practical, jargon-free guides that help everyday people recover from and protect against online attacks.
Reviewed by CSG Security Engineers