The first 10 minutes after a parent gets scammed: what to actually do

If you're reading this because it just happened, start here: the response matters more than the reaction. Blame, panic, and "how did you fall for that" all cost time you don't have — and time is the one thing that can still be recovered here, if you move fast. Read the five steps below, then start step one.

The five-step drill

1. Cut contact

Hang up the phone. Block the number. Do not respond to any follow-up call, text, or email from the same source — including one claiming to be "the bank confirming the reversal" or "the police following up." Scammers frequently call back posing as a recovery service; this is a well-documented second-stage scam that targets people who were already victimized once.

2. Call the money — immediately

Every minute matters here more than anywhere else in this list. Call the bank, card issuer, or payment app's fraud line directly (not a number given by the scammer) and say the words "unauthorized transaction" or "fraud" clearly — that phrasing routes you to the right team faster than describing the story first.

• Wire transfer: banks can sometimes recall a wire within a narrow window — call immediately, ask specifically about a recall or reversal request.
• Zelle or similar P2P app: some providers reimburse certain qualifying imposter-scam cases beyond what's legally required, though the exact criteria aren't published and reimbursement isn't guaranteed — report it anyway, immediately, through the app's fraud channel and the linked bank.
• Gift cards: call the retailer's fraud line with the card numbers and receipt — a small number are frozen before the balance is drained if reported within hours.
• Credit card: dispute the charge immediately; cardholder protections here are generally stronger than for bank transfers or gift cards.

Note: if a payment was authorized under deception (the person willingly sent it, even though they were deceived), federal law generally does not require a bank to reimburse it — which is exactly why speed and the fraud-line call matter so much; recovery isn't guaranteed, but delay makes it far less likely.

3. Lock the doors

If any account numbers, passwords, Social Security number, or Medicare ID were shared: change the passwords immediately, and place a credit freeze at all three bureaus — freezes are free by federal law and must be requested separately at each one. If a scammer has physical access history (an in-person visit, a "tech support" remote session on a computer) also check for unfamiliar software or remote-access tools still installed, and disconnect that device from the internet until it's checked.

4. Keep everything

Screenshot texts and call logs before blocking. Save emails without opening links inside them. Write down the phone number that called, the time, and everything said, while it's still fresh — this becomes the evidence log that banks, police, and the FTC will ask for, and memory fades fast under stress.

5. Report it

Report to all three, even if it feels redundant — each channel does something different:

• ReportFraud.ftc.gov or 1-877-382-4357 — feeds federal fraud-pattern tracking
• IC3.gov (FBI Internet Crime Complaint Center) — especially for anything involving wires, crypto, or online contact
• IdentityTheft.gov — if any personal information was shared, not just money

If the person affected is 60 or older, the DOJ National Elder Fraud Hotline (833-372-8311) is free and specifically set up to help navigate next steps, and the AARP Fraud Watch Helpline (877-908-3360) is free to anyone, not just members, weekdays 8am–8pm ET.

What happens after the first 10 minutes

The drill above is about the window where speed still matters. After that, the path shifts to a realistic 48-hour, 2-week, and 90-day process — following up with banks, watching for follow-up "recovery" scams, and monitoring credit reports. Be honest with your family member that recovery isn't guaranteed. What is fully in your control is not letting shame stop the next report — including a second one, if it happens again.