I Just Got a Scam Call in the US — What Now?
You just hung up. Your hands are still a bit shaky. Maybe you gave away something, maybe you didn’t — you’re not sure. This guide is the calm, sequential checklist for the next sixty minutes, written specifically for the United States.
In the first 5 minutes
Stop interacting. Don’t call back. Don’t text. Don’t open any links they sent. Don’t install any software they pointed you to (especially AnyDesk, TeamViewer, LogMeIn — these are the favored remote-access tools).
Write down what they said. Open a notes app and capture:
- The number that called (caller-ID).
- What they claimed to be (IRS, Social Security, Amazon, your bank, your “grandson”).
- Anything specific they knew about you (address, last 4 of your SSN, name of your bank).
- Anything you gave them (name, address, card numbers, codes you read out, links you clicked).
You’ll need this list for the calls below.
If you gave them banking information
Call your bank immediately. Use the number on the back of your card — not any number the caller provided.
For each card or account you may have exposed:
- Ask them to flag the account for fraud monitoring.
- Ask them to issue a new card with a new number.
- Ask them to reverse any pending transactions you didn’t authorize.
If you sent money via Zelle, Venmo, Cash App, or wire transfer, time is the enemy — these are designed to be irreversible. Call the bank within minutes and dispute it as fraud. Some banks (Bank of America, Wells Fargo, Chase) now have specific Zelle-fraud claim processes.
If you gave them remote access to your computer
- Disconnect from the internet — unplug ethernet, turn off Wi-Fi.
- Restart in safe mode (Windows: hold Shift and click Restart; Mac: hold Shift on boot).
- Uninstall the remote-access tool they installed (AnyDesk, TeamViewer, etc.).
- Change your bank and email passwords from a different device — phone, tablet, or a trusted friend’s computer.
- Run a full antivirus scan before going back online.
- If you used the affected computer to log into your bank, assume those credentials are compromised and change them.
If you gave away your SSN
- Place a free fraud alert with one of the three credit bureaus — the alert is shared with the other two:
- Equifax: 1-800-525-6285 or equifax.com
- Experian: 1-888-397-3742 or experian.com
- TransUnion: 1-800-680-7289 or transunion.com
- Consider a credit freeze — stronger than a fraud alert. Free, takes effect immediately, can be lifted temporarily when you need credit.
- Visit identitytheft.gov — the FTC’s one-stop identity-theft recovery hub. It generates a personalized recovery plan and pre-fills letters.
- File a police report if you’ve had actual financial loss. Keep a copy.
If they impersonated a federal agency
Different agencies have different report channels:
- IRS impersonation: TIGTA at 1-800-366-4484 or tigta.gov.
- Social Security impersonation: oig.ssa.gov.
- Medicare impersonation: 1-800-MEDICARE (1-800-633-4227).
- USCIS / immigration: uscis.gov/report-fraud.
For any of these — and any scam call in general — also file at:
- FTC: reportfraud.ftc.gov or 1-877-FTC-HELP.
- FBI IC3 (Internet Crime Complaint Center): ic3.gov. Especially if any money was sent online.
- Your state attorney general’s office. Most state AGs have a consumer-protection complaint form.
Add the number to GhostCallers
Once you’re safe and reports are filed, add the number to GhostCallers. Your description helps the next person — who might be your parent, your kid, or your neighbor — recognize the same script and hang up faster.
Watch your accounts for the next 30 days
- Check your bank and credit card statements daily for a week, then weekly for a month.
- Check your credit report weekly at annualcreditreport.com — free weekly reports from all three bureaus are permanent now.
- Watch for unexpected mail: new accounts you didn’t open, denial letters, debt collectors.
A word on shame
There is none. Phone scammers in 2026 use AI voices, spoofed caller-IDs, and scripts refined over millions of calls. They prey on stress (tax season, holidays, grandparent panic). Getting caught out isn’t a character flaw — it’s the predictable outcome of a hostile ecosystem. The only response is to report, protect your accounts, and warn the next person.