Already clicked, paid or told them something?

First: Call your bank or card company now, on the number on the back of your card. Ask them to stop or pull back the payment.

• Gift cards: call the number on the back of the card, and keep the card and the receipt.
• A Bitcoin machine: keep every receipt. Report it to the police and ic3.gov with the receipt, the machine's location and the time.
• Cash or gold handed to a courier: call the police. Write down what the person and the car looked like.
• Then report it at ic3.gov and ReportFraud.ftc.gov.

First: Go to IdentityTheft.gov. It walks you through a plan, step by step.

• Freeze your credit at Equifax, Experian and TransUnion. It costs nothing and stops new accounts in your name.
• Medicare number: call 1-800-MEDICARE (1-800-633-4227) and watch your statements.
• Bank number: call your bank and ask about a new account number.

First: Change that password now, from a different phone or computer if you can.

• If you use that password anywhere else, change it there too.
• Turn on two-step sign-in, so a code is needed to get in.
• If it was your bank or email, call them and tell them what happened.

First: Unplug it from the internet, or turn off the Wi-Fi. Then turn it off.

• Don't use it for banking until it's been checked.
• From a different device, change your email and bank passwords.
• Call your bank if you signed in to it while they were connected.
• Not sure what to do next? Send it to me and I'll walk you through the steps.

First: Close it. If you didn't type anything in, you're most likely fine.

• If you typed a card number or a password, follow the steps above for that.
• Run your phone or computer's updates.
• Delete the message and forward texts to 7726.