I have spent seventeen years inside bank fraud investigations, and I have spent the last several months writing to you.
I have written about the first sixty minutes after a scam. I have written about the words banks use and why they matter. I have written about SIM swaps, account takeovers, fraudulent accounts, recovery scammers, evidence folders, and the appeal process that most victims never reach.
If you have read even a few of those articles, you know the mechanics. You know the sequence. You know what to do when the money leaves, when the account is compromised, when the denial letter arrives.
But there is one thing I have not written about yet — not directly. It is the rule that sits underneath every other rule. The one I keep in my kitchen, on a sticky note inside a physical incident folder, because I have watched too many victims skip it in the first hour and pay for it for months.
Slow down. Write it down. Make the next call count.
That is my rule. It is not a slogan. It is a sequence. And it is the difference between a victim who spends six months fighting and a victim who spends six months recovering.
Slow Down: The Hardest Instruction After a Scam
The first instinct after you realize you have been scammed is to move fast. To call everyone at once. To change every password. To send angry messages to the scammer. To fix it now.
That instinct is exactly what the scammer is counting on. They know that if they can get you to act fast — click a link, send money, read a code, transfer funds — you are much less likely to pause and question what is happening.
The FTC has tracked this for years. In 2025, the commission received 3 million fraud reports from consumers, who reported $15.9 billion in losses — a substantial increase from the prior year, when consumers submitted 2.6 million reports and reported losses of over $12 billion. Imposter scams alone generated more than 1 million reports and $3.5 billion in losses**. Investment scams took the most money overall, at **$7.9 billion.
Those numbers are not abstractions. They are people who were moving fast, under pressure, trying to solve a problem that felt urgent.
Here is what I want you to understand, and what I have tried to teach in every article I have written for this site: there is no real urgency to a scam. You can postpone reacting to a scam for the rest of your life, and you will be better off. Take a pause. Sleep on it. Come back. Reread the message with fresh eyes. With time, it will not be as emotionally provocative, and you can make a better decision.
“Slow down” does not mean “do nothing.” It means do not let the scammer set the pace. It means take the phone call from your bank instead of the phone call from the person who claims to be your bank. It means hang up, look up the real number, and call back. It means give yourself thirty minutes before you send anything, share anything, or pay anything.
In fraud investigations, the cases that moved fastest were not the ones where the victim acted in five minutes. They were the ones where the victim acted in the right order.
Write It Down: The One Habit That Changes Everything
I keep a physical incident folder in my kitchen. It sounds old-fashioned. But when you are on the phone with a bank investigator who needs a reference number, having it in one place matters.
Here is what I mean by “write it down.”
Every phone call gets a date, a time, a name, and a reference number. Every transaction gets an amount, a method, and a confirmation number. Every report gets a confirmation page, a submission ID, a case number.
The FBI’s Internet Crime Complaint Center has said this in plain language: the two types of information most important for an IC3 report are transaction information and scammer contact information. Not the emotional narrative. Not the long story about how you felt. The transaction details. The phone numbers. The wallet addresses. The dates.
The FTC’s reporting guide asks for the business or person involved, what was promised, the dates and amounts, how payment was made, and the communication method used. The FTC recommends writing a short timeline so the report remains clear.
That is the habit. Not a diary. Not a journal. A timeline. A table. A folder.
When you write it down, you accomplish three things at once. You create the record your bank needs to process your dispute. You create the record the FTC needs to connect your case to broader patterns. And you create the record you need when you are on your fourth phone call in three weeks and a representative asks you for the date of the first contact.
I have written an entire article on how to build this timeline in twenty minutes. The structure is simple. The first contact. The buildup. Each payment. The discovery. The actions taken. If you do nothing else after reading this, open a document and start that timeline. Everything else follows from there.
Make the Next Call Count: The Right Number, In the Right Order
“Make the next call count” is not about making more calls. It is about making the right call.
After a scam, the most common mistake is calling the wrong number in the wrong order. Victims call the FTC before their bank. They call the police before their payment provider. They call a number the scammer provided instead of the number on the back of their card.
Here is the order that works.
First, call your payment provider. Your bank, your credit card issuer, or your payment app. The payment rail determines your recovery path, and the clock starts when you report. Under Regulation E, your liability for unauthorized electronic fund transfers is capped at $50 if you report within 2 business days**, or **$500 if you report within 60 days of the statement showing the error. After 60 days, your liability may be unlimited.
Second, call the FTC. Report at ReportFraud.ftc.gov or call 1-877-382-4357. The FTC report takes about ten minutes, gives you a report number, and adds your case to the Consumer Sentinel Network — a database accessible to law enforcement nationwide. The FTC does not recover individual losses. It builds cases, identifies patterns, and creates the record that supports your bank dispute.
Third, call the FBI’s IC3 if the scam happened online. Go to ic3.gov. The IC3 collects reports and may coordinate fund freezes in certain cases, particularly large wire transfers.
Fourth, call IdentityTheft.gov if your personal information was exposed. The FTC’s system generates a personalized recovery plan and an FTC Identity Theft Report — a legally recognized document you can use to dispute fraudulent accounts with credit bureaus, ask businesses to close accounts opened in your name, and file a police report.
Fifth, call your local police. The police report number has value even if local police cannot investigate directly. Many banks and insurers require it before processing certain fraud claims.
Each of these calls serves a different purpose. Skipping one weakens the others. Making them in the wrong order wastes time you do not have.
The “next call” is not just the next phone call. It is the next correct call. The call to the bank’s fraud department, not the general customer service line. The call to the gift card issuer, not the store where you bought the card. The call to the CFPB, not another appeal to the same analyst who already denied your claim.
Why This Rule Matters More Now Than Ever
The numbers from 2025 are not encouraging.
The FTC received 3 million fraud reports and $15.9 billion in reported losses — the highest on record. Imposter scams led the list for the fifth straight year. Social media scams produced $2.1 billion in losses, an eightfold increase since 2020. Older adults reported losing more than $3 billion to fraud in 2025, a fourfold increase from 2020.
And the second scam is thriving. Nearly one in five scams reported in 2025 involved a recovery room scam — where the criminal falsely promised to recover money lost in a prior scam in exchange for an upfront fee. As many as 70% of those recovery room scams were associated with cryptocurrencies.
A TransUnion executive put it plainly: “Once you’ve been a victim, fraudsters can seize the opportunity to target you a second time, and in a lot of cases, this can be effective because they hold verified information on the individual from the original scam”.
This is the landscape. More reports, more losses, more repeat targeting. And the same three rules still work.
No comments yet.