Secure the account
Change compromised passwords from the official app or website, sign out unknown sessions, and contact your bank quickly if money or card details were exposed.
Global reporting guide
Reporting works best when it preserves evidence and limits further exposure. Use official channels, not the contact details supplied by the suspicious message.
A safer reporting order
Change compromised passwords from the official app or website, sign out unknown sessions, and contact your bank quickly if money or card details were exposed.
Keep the sender, username, URL, timestamps, payment instructions, and transaction references. Redact passwords, codes, identity documents, and private addresses.
Open the organization’s official support or reporting page independently. Never use a callback number, link, or email address provided by the suspicious message.
Depending on where you live, this may include your bank, the platform, a national consumer-protection body, a cybercrime reporting service, or local law enforcement.
Do not forward the scam widely. Share a redacted description or official report link so other people are warned without exposing private data.
Unsure what happened?