What to do right after a scam

Why the first hour matters most

The chances of stopping or reversing a transfer fall sharply with every hour that passes. Once money reaches the receiving account and is moved on again, most channels can no longer help.

This is not the moment to research every option in detail or wait until you feel calmer. A few direct actions, in the right order, matter far more than a perfect understanding of what happened.

You do not need to know exactly how the scam worked to start. You only need to know that money left your account without your real consent.

Stop paying and cut contact

If you are still in contact with the scammer, whether through a fake investment platform, a chat app, or a phone call, stop responding and stop paying immediately. Any promise that one more payment will unlock a refund is part of the same scam.

Save the conversation instead of deleting it, since every message, username, and account number is useful evidence. If the contact came through a specific scam type such as a fake supplier or director, that detail also helps whoever you report to next.

Call your bank, then call 997

Contact your bank’s fraud line as soon as you can and ask about a transfer recall or a hold on the receiving account. Read how a bank recall works so you understand what your bank can and cannot promise.

At the same time, or right after, call the National Scam Response Centre on 997, especially if the transfer happened recently. It exists to coordinate quickly between banks and the police when speed matters most.

Make a police report

A police report is not just paperwork. It gives the Commercial Crime Investigation Department (CCID) the basis to investigate, and it is usually required before a bank dispute or legal step can move forward.

Read how to make a police report for what to bring and what happens next. Make the report even if you believe the amount is small or the money is already gone.

Keep the evidence that helps later

Before you delete anything, save the chat history, the transfer receipts, the account numbers, and any names or usernames the scammer used. You can also check whether a receiving account has been flagged before through Semak Mule, PDRM’s public mule account database.

Once the immediate steps are done, you can look at the fuller picture of recovery routes that may apply to your situation, from bank complaints to civil claims.