What to Do After Giving Details on a Phishing Call
You realise the caller was a scammer and you shared a code, card number, password or access. What to do right away, depending on what you gave, and how to avoid a follow-up scam.
The call ended, and something feels wrong. Maybe you read out a code, confirmed your card number, or moved money. Act now: speed makes a real difference. What to do depends on what you shared.
Act on what you shared
| You shared | Do this now |
|---|---|
| A one-time code | Call the provider on its official number; change the password; remove unknown devices; check transactions. |
| Card details | Call your card issuer to block the card and dispute charges. |
| Banking login or PIN | Call your bank; change credentials from the official app; check payees. |
| Moved money | Call your bank immediately to try to recall the transfer. See what to tell your bank. |
| Remote access | Disconnect, remove the software, call your bank. See after giving remote access. |
| Email or account password | Change it, turn on two-step verification, sign out of other sessions. |
| ID details | Consider a credit freeze or fraud alert. See leaked ID numbers. |
Call from a different phone if you can. Some scammers keep the line open, so dialling your bank connects you back to them.
Then
- Write down what happened: time, number, what was said and shared.
- Report to your national fraud service. See how to report a scam.
- Expect follow-up calls, including fake "recovery" offers. See recovery scams.
Got a follow-up message? Paste it into CyberWatch AI Scan for a free check.
For more, read the complete guide to phishing.
Frequently asked questions
I gave a one-time code. What now?
Assume the scammer used it. Contact the provider on the official number, change your password, remove unknown devices and check for transactions.
Should I call the number back that called me?
No. Call the organization on its official number, from a different phone if possible.
Will I get my money back?
It depends on how quickly you report and how the money was moved. Contact your bank immediately.
Sources
- What To Do if You Were Scammed, US Federal Trade Commission
- Phone Scams, US Federal Trade Commission
- Recovering a hacked account, UK National Cyber Security Centre
