5 steps to take after being scammed. Action Fraud received over 400,000 reports in 2023, proving that even the most cautious individuals can find themselves caught in a digital snare.

UK online fraud increased by 25% last year, leaving many to discover that the average victim loses roughly £750 to these clever schemes. Much like a detective arriving at a crime scene after the culprit has vanished, the reader must act with cold, clinical precision to preserve the evidence and secure the perimeter.

The first 24 hours after a scam are a frantic race against the clock. Swift, decisive action and meticulous documentation are the only ways to mitigate financial damage. Speed is the best weapon for increasing the likelihood of recovery under UK regulations. This guide explains how to contact bank fraud lines, report to the proper authorities, and lock down compromised accounts before the trail goes cold.

Pro tip: Fraudsters often rely on the “shock factor” to keep a person from thinking clearly, so following a set checklist is the best way to stay calm.

A victim needs to understand the exact sequence of steps required to respond effectively. This includes checking credit files for suspicious activity and gathering every scrap of digital paper for a refund claim. It is a methodical process, but it is the only way to turn the tables on a fraudster. Success depends on acting before the sun sets on the first day.

Stop the Bleeding by Contacting Your Bank

The “Golden Hour” of fraud recovery begins with a phone call to the financial institution holding the victim’s funds.

In the world of digital crime, a bank account is like a crime scene; the longer it remains open, the more evidence-and cash-vanishes into the ether. While the Faster Payments Scheme allows for near-instant transfers across the UK, it also means money can be shifted through a chain of “mule” accounts before a victim even finishes reading a scam email.

Immediate Actions to Secure Your Assets

A victim must treat this call with the urgency of a 999 emergency. Most major UK banks operate 24/7 fraud departments specifically to handle these crises. The goal is to “lock the doors” before the fraudster can drain the remaining balance or use saved card details for a shopping spree.

1. Find the Verified Number – Look at the physical plastic of the debit or credit card for the official fraud line. Alternatively, use the Banking Protocol by dialling 159, a secure hotline that connects callers directly to their bank’s fraud department.
2. State the Scam Type – Clearly explain if it was Authorised Push Payment (APP) fraud, where the victim was tricked into sending money, or if a card has been “skimmed” for unauthorised transactions.
3. Request a Recall – Ask the agent to initiate a “payment recall” immediately. While not always successful, banks can sometimes claw back funds if they catch the receiving bank before the cash is withdrawn.

Pro Tip: Always ask the bank representative for a “case reference number” during this first call; this unique ID is the master key for all future insurance claims and police reports.

The stakes are incredibly high, as UK Finance reported £1.2 billion was lost to fraud in 2023. Currently, only about 40% of these losses are reimbursed to victims. However, the Payment Systems Regulator (PSR) has introduced mandatory reimbursement rules for APP fraud, making it vital to prove that the bank was notified the moment the crime was discovered.

Freezing the account is just the defensive opening move. Once the bank has secured the perimeter, the focus must shift to providing a formal statement to the authorities to ensure the incident is logged in the national crime database.

Reporting the Crime to Action Fraud UK

Failing to file an official police report often leaves victims without the essential paperwork needed to force a bank’s hand during the reimbursement process. While the bank secures the money, Action Fraud-the UK’s national reporting centre for fraud and cybercafe-secures the evidence. This service is operated by the City of London Police and acts as a central hub for gathering intelligence on digital criminals.

Why an Official Report is Essential

Many people hesitate to report because they believe the chances of a conviction are slim. It is true that only 5% to 10% of reported fraud cases currently lead to formal charges. However, filing a report is not just about catching the individual thief; it is about obtaining a crime reference number (CRN).

Insurance companies and financial institutions often view the CRN as the “gold standard” of proof that a crime occurred. Without it, the reader may find it difficult to prove they were a victim of a genuine scam rather than simply making a poor financial decision. These reports feed into national intelligence, helping authorities map out larger criminal networks.

What to Include in the Report

The online reporting tool typically takes 20 to 30 minutes to complete. It is a slow, methodical process that requires the reader to have all their facts ready. Before starting, people should gather every scrap of evidence they have collected, including communication logs and specific dates of contact.

• The exact dates and times of every interaction with the scammer.
• The specific method of contact, such as WhatsApp, email, or a phone call.
• The exact amount of money transferred and the destination account details.
• Any website addresses or social media profiles the fraudster used.
• Copies of any documents or “contracts” the scammer provided.

Completing the Process

If the reader is not comfortable using the internet, they can report by calling 0300 123 2040. Regardless of the method, the goal is the same: getting that CRN into a secure folder. This document will be a cornerstone when it comes time to secure passwords for other accounts or consolidate evidence for a final refund claim.

Action Fraud does not investigate every individual case personally. Instead, they pass the data to the National Fraud Intelligence Bureau (NFIB) to look for patterns. I have seen many victims skip this step because they feel embarrassed, but in the eyes of the law, silence only helps the fraudster stay anonymous.

Locking the Digital Windows After a Breach

Securing your digital perimeter prevents a single compromised account from turning into a total identity takeover.

While the immediate threat to your bank account is being handled, the intruder may still have a spare key to your wider life. Since over 60% of people reuse passwords across multiple websites, a thief who cracks one door can often walk through every other one you own.

Think of it like a detective discovering a suspect has a master key to an entire street; the investigation doesn’t stop at the first house. Scammers frequently use the initial breach to pivot into email, social media, or online shopping accounts to harvest more data. This makes identity theft risks skyrocket in the hours following the initial incident.

1. Map Your Digital Footprint – Identify every service linked to the compromised account, including utilities, Amazon, and especially your primary email. If they have your email, they can trigger password resets for almost anything else.
2. Deploy Unique Passwords – Change credentials for all high-value accounts immediately. Use long, random strings of characters that share nothing with your previous, leaked password.
3. Activate Two-Factor Authentication (2FA) – Turn this on for every critical service to require a secondary code from your phone. This simple step is remarkably effective, as 2FA blocks 99.9% of automated attacks.
4. Contact Credit Reference Agencies – Reach out to firms like Experian, Equifax, or TransUnion to request a protective registration or a temporary credit freeze. These agencies can add an alert to your file, making it much harder for scammers to take out loans in your name.

Securing these secondary vulnerabilities is a proactive way to mitigate damage before it spreads. It also prepares the ground for more detailed credit monitoring and the gathering of evidence for future reimbursement claims. Taking these steps ensures the intruder is truly locked out for good.

Fraudulent credit applications average £2,500 per incident, making a victim’s financial history the next primary target for a digital intruder. While the immediate loss of cash is a visible wound, identity theft is a slow-acting poison that often remains hidden until a lender rejects a mortgage or car loan application months later.

How Credit Monitoring Protects Your Future

Scammers who harvest personal details rarely stop at a single bank transfer. They often attempt to open new credit cards, take out “buy now, pay later” loans, or even redirect utility bills to a fresh address. Checking a statutory credit report allows a person to see exactly what the financial world sees about them.

Every UK resident has a legal right to access these files for free. It is best practice to review them every 3 to 6 months, but doing so within 24 hours of a scam is a non-negotiable defensive move. This check acts like a digital roll call, ensuring no uninvited “ghost” accounts have joined a person’s financial life.

Accessing Your Free Reports

The UK relies on three main agencies to track financial behaviour. To get a complete picture, a user must check all three, as some lenders only report to one or two:

Spotting Red Flags on Your File

When the reports arrive, the reader should scan for hard searches they did not authorise. These occur when a company looks at a file because someone applied for credit in their name. Any address changes or linked names that look unfamiliar are equally dangerous.

If a fraudulent entry appears, it must be reported to the specific agency’s dispute department and added to the existing file with Action Fraud. This ensures the credit reference agencies can investigate and remove the stain from the victim’s record. However, cleaning a credit file is only half the battle; the path to getting stolen money back requires a different level of forensic detail.

Securing Your Refund Through Meticulous Evidence

A detective is only as good as their notebook, and the same holds true for victims seeking their money back. Once the initial panic subsides, the reader must transform into a methodical investigator to navigate the Authorised Push Payment (APP) fraud landscape. Under mandatory reimbursement rules introduced by the Payment Systems Regulator (PSR) in October 2024, banks are now generally required to refund victims of APP scams.

This protection typically applies to claims over £100, with the sending and receiving banks often splitting the liability 50:50. However, the burden of proof remains with the claimant. Banks may deny a refund if they determine the customer acted with gross negligence, making a detailed paper trail the only way to prove due diligence was followed.

Pro tip: Export your entire WhatsApp or SMS chat history with the scammer before they have a chance to “delete for everyone,” as these timestamps often prove the high-pressure tactics used.

The Essential Evidence Folder

The reader should compile a digital or physical folder containing every scrap of interaction. This isn’t just about the money leaving the account; it’s about the narrative of the deception. If the bank refuses to budge, this folder becomes the primary evidence for the Financial Ombudsman Service (FOS), which handles unresolved disputes.

• Communication Logs: Full-page screenshots of emails, texts, and social media messages, including the scammer’s profile details.
• Transaction Records: Exact dates, times, and Transaction IDs from bank statements showing where the funds were sent.
• Official Reports: A copy of the statement provided to Action Fraud and any subsequent correspondence from the police.
• Call Records: A log of phone calls, noting the duration and the specific number that appeared on the caller ID.
• Bank Responses: Copies of all letters or emails from the bank’s fraud department regarding the initial claim.

A formal claim should be submitted in writing to the bank, clearly referencing the PSR’s reimbursement framework. If the bank fails to provide a final response within fifteen business days, or if the claim is rejected, the reader has the right to escalate the matter to the Ombudsman. Thorough documentation turns a “he-said, she-said” argument into an undeniable case for recovery.

Swift action and precise records are the only reliable weapons against modern digital bandits.

The first twenty-four hours after a scam represent a critical window where the trail is still warm and financial gates can be bolted shut. UK Finance figures indicate that a staggering amount of fraud goes unreported, yet those who move quickly significantly increase their chances of seeing their money again. Decisive movement is the difference between a total loss and a successful recovery under Payment Systems Regulator (PSR) rules.

Key Takeaways for Recovery

• Immediate notification: Contacting the bank’s fraud department within minutes of the event allows them to attempt a “clawback” of the funds before the criminal moves them abroad.
• Official reporting: Filing a report with Action Fraud provides the crime reference number required for any formal insurance or bank reimbursement claim.
• Digital hygiene: Changing passwords and checking credit files prevents a single scam from spiralling into long-term identity theft.
• Evidence gathering: Saving every screenshot and receipt creates a paper trail that is difficult for banks or authorities to ignore.

How to Secure the Situation Today

People should immediately log into their banking app to find the “report fraud” feature or call 159, which is a secure hotline connecting callers directly to most UK banks. After the bank is notified, the reader should visit the Action Fraud website to submit a digital report and receive a reference number. These two steps form the foundation of any future legal or financial protection.

A victim who acts like a meticulous detective rather than a passive bystander stands the best chance of outmanoeuvring the fraudster.

If you need more help and support, please check the links below

👉🏽Free & Paid Online Courses:  https://www.wonconnect.org.uk/courses/

👉🏽Our Digital Products:  https://www.wonconnect.org.uk/shop/

👉🏽 Website design and maintenance: Website Design for Charities & CICs | Won Connect

👉🏽Visit our website for more https://www.wonconnect.org.uk/