Match the response to the event
Protect the affected account or payment first.
If you shared a password, change it through the real service. Change it on other accounts where you reused it. Use the service’s account-protection steps, including two-step sign-in if offered. If you cannot sign in, use its recovery route.
If you shared a sign-in code, contact the affected service promptly. If you paid, contact the bank or payment service used and ask about stopping or reversing the payment. A refund is not assured.
If you opened a suspect page, stop typing details or getting files from it. If you installed software or let someone control the device, use trusted tech help and current security guidance. Say what happened so the help fits.
No interactionAvoid the message’s link and reply route. Plan reporting and cleanup.
Information or money sharedContact the affected bank, account or payment service now.
Device accessUse trusted tech support, not a helper named in the suspect message.
Keep needed records in a secure place for the real service’s report. Reporting does not guarantee a sender is blocked or money is returned.
Do not include real passwords, codes or card numbers in a request to AI. Use a short description of the event.