After a suspected scam, speed and documentation matter. The goal is not to solve the entire case yourself. It is to reduce additional loss, preserve evidence and give banks, platforms or authorities something useful to work with. This guide focuses on one question: i think i just paid a scammer. what should i do first?. The goal is not to label a site from one clue. It is to identify warning lights, test the story the site is telling, and decide whether you have enough confidence to continue.
Start with the identity claim. Ask who is supposedly operating the site, what legal or public-facing name they use, where they say they are located, and how they expect to be contacted. Then step outside the website. Search for the organization or person independently instead of clicking only the links they provide. A convincing page can repeat its own story perfectly; independent sources are useful because they can contradict it.
Warning lights to check
- Contact the bank, card issuer or payment provider immediately.
- Do not send more money to unlock or recover the first payment.
- Change compromised credentials.
- Preserve transaction IDs, messages, URLs and screenshots.
- Report through appropriate official channels.
The useful signals are usually ordinary ones. Contact the bank, card issuer or payment provider immediately. Do not send more money to unlock or recover the first payment. Change compromised credentials. Preserve transaction IDs, messages, URLs and screenshots. Report through appropriate official channels.