Help now

What’s happening?

Pick the closest match. You’ll get short steps in the order that matters. Take a breath. You can fix most of this.

No ads. No partner links. No sign-up. Every step prints on one page.

You chose

Someone has my password

Lock the account down first, starting with your email. Email can reset everything else.

First 15 minutes

  1. Change the password on that account.

    Use a new password you have never used anywhere else.

  2. Sign out of all other sessions.

    Look for “Sign out everywhere” or “Devices” in the security settings.

  3. If you used it elsewhere, change it there too.

    Start with email, then banking, then everything else.

First hour

  1. Turn on two-step sign-in.

    An authenticator app is best. A text code is better than nothing.

  2. Check recovery email and phone number.

    Attackers often change these so they can get back in.

  3. Look for email forwarding rules you did not set.

    Delete any that send your mail to an unknown address.

Today

  1. Set up a password manager.

    It makes a unique password for every account.

  2. Warn your contacts if messages were sent as you.

    Tell them not to click links or send money.

You chose

Money was taken

Speed matters most in the first hour. Banks can often stop or reverse a payment if you call fast.

First 15 minutes

  1. Call your bank’s fraud line.

    Use the number on the back of your card or in your banking app. Not a number from an email or text.

  2. Ask them to freeze or recall the payment.

    Say “I want to report an unauthorized transaction and ask for a recall.” Use the script on this page.

  3. Stop talking to the person who contacted you.

    Don’t reply, don’t send more money, don’t install anything they ask for.

First hour

  1. Change your banking and email passwords.

    Start with email. It can reset your bank password.

  2. Turn on two-step sign-in.

    Use an app or text code. Do it for bank and email first.

  3. Write down what happened.

    Times, amounts, names, phone numbers, screenshots. You’ll need them for reports.

Today

  1. Report it to the FTC.

    Go to reportfraud.ftc.gov. It takes about 10 minutes.

  2. If it happened online, report to the FBI.

    File at ic3.gov. Include the payment details.

  3. If they got your personal details, make a recovery plan.

    identitytheft.gov gives you a step-by-step plan and letters to send.

  4. Tell someone you trust.

    Scammers often come back. A second person helps you spot the next call.

You chose

I clicked a bad link or opened a file

Clicking alone usually does little harm. What matters is whether you typed a password, paid, or installed something.

First 15 minutes

  1. Close the page. Don’t enter anything else.

    If a download started, cancel and delete it.

  2. If you typed a password, change it now.

    Change it on the real site, which you open yourself, not from the link.

  3. If you entered card details, call your bank.

    Ask them to block the card and send a new one.

First hour

  1. Update your device and run its built-in security scan.

    Windows Security, or the latest iOS/Android/macOS update.

  2. If you installed an app someone asked you to, remove it.

    Remote-access apps let scammers control your device.

Today

  1. Report the message.

    Use “Report phishing” in your email app, or forward scam texts to 7726 (SPAM).

  2. Watch your accounts for a few weeks.

    Look for sign-ins or payments you don’t recognize.

You chose

Someone is threatening or blackmailing me

You are not in trouble, and you don’t have to deal with this alone. Don’t pay. Paying usually leads to more demands.

First 15 minutes

  1. Stop replying. Don’t pay.

    Don’t send money, gift cards, crypto or more images.

  2. Save evidence.

    Screenshot the messages, the profile and any payment details before you block.

  3. If you are in danger, call 911.

    Threats of violence are a police matter.

First hour

  1. Block and report the account on the platform.

    Platforms remove sextortion accounts quickly when reported.

  2. Talk to someone you trust.

    A friend or family member can help you through the next steps.

Today

  1. Report to the FBI.

    File at ic3.gov with your screenshots.

  2. Ask for intimate images to be blocked.

    Adults: StopNCII.org. Under 18: NCMEC’s Take It Down.

You chose

My business systems are locked

Contain first, then recover. Don’t pay a ransom before you have talked to professionals and law enforcement.

First 15 minutes

  1. Disconnect affected computers from the network.

    Unplug the cable or turn off Wi-Fi. Don’t switch them off. Evidence lives in memory.

  2. Call your IT provider or cyber-insurance hotline.

    Many policies require you to call them first.

First hour

  1. Change admin and email passwords from a clean device.

    Start with email and anything that can reset other accounts.

  2. Check whether your backups are safe.

    Don’t connect backup drives to infected machines.

  3. Write down a timeline.

    What you saw, when, and who did what.

Today

  1. Report to the FBI and CISA.

    ic3.gov and cisa.gov/report. They may have a decryptor or intelligence.

  2. Tell staff what to do and not do.

    One short message: don’t power on affected machines, don’t talk to the attackers.

You chose

My child is in danger online

Stay calm with your child. They need to know they are not in trouble for telling you.

First 15 minutes

  1. If your child is in immediate danger, call 911.

    Including any plan to meet someone in person.

  2. Don’t delete anything.

    Screenshot the messages and the profile, then stop replying.

First hour

  1. Report to the NCMEC CyberTipline.

    report.cybertip.org, or call 1-800-843-5678.

  2. Report and block the account on the app or game.

    Do this after you have saved evidence.

Today

  1. If images were shared, use Take It Down.

    NCMEC’s free tool helps remove images of minors.

  2. Review privacy settings together.

    Who can message them, and who can see their profile.

In danger right now? Call 911. If a child is at risk, also report to the NCMEC CyberTipline at report.cybertip.org.

SearchHelp now