What to Do If You Have Been Scammed Online

Stop further exposure before solving everything

If you think an online transaction or message has harmed you, focus on the next avoidable loss. Do not send another payment because someone says it will release the first one. Pause communication that is pressuring you, but preserve useful messages if it is safe to do so. Ask a trusted person to help organise the steps if you feel overwhelmed. You do not need to prove a crime before asking a provider about account security or a payment problem. This guide is general preparation, not a finding that a particular person is guilty.

Contact the payment provider promptly

Use an independently obtained official contact route and explain the transaction, amount, date and what went wrong. Ask what options are available and what information the provider needs; do not assume a reversal, refund or dispute process applies to every payment. The FTC's recovery guidance recommends contacting the payment provider promptly. Ask your provider which options apply to your payment in Jamaica; do not assume US protections apply. Keep any reference actually issued and make a note of instructions. Do not provide your password, PIN or one-time code to a new caller merely because they claim to be helping with the case.

Secure accounts if information was exposed

If you entered a password into a suspicious page, change the affected password through the official service. Address any other accounts that reused it. Enable MFA where available and review active sessions or connected devices through the provider's settings. If you cannot sign in, use its official recovery route rather than a person offering paid access recovery. Prioritise accounts that can reset other accounts, such as your email. These steps reduce further exposure but do not establish that every device is clean or that stolen information can be recalled. Seek appropriate provider guidance for your actual situation.

Preserve a usable account of events

Save receipts, transaction references, relevant profile links and messages, including what was promised and any later changes. Keep original files and write a separate timeline explaining them. Distinguish non-delivery, a disputed item and an unauthorised account action instead of forcing every event into one label. Redact unrelated personal information from copies you share when appropriate, but retain originals privately. Do not post banking details, identification documents or private conversations publicly to rally support. A clear record helps you explain the problem consistently, though it cannot guarantee investigation or recovery.

Choose reporting routes for the actual incident

Use the JCF's official reporting information for suspected crime and JaCIRT's incident guidance for relevant cybersecurity issues; neither substitutes for contacting the financial institution. Their current applicability and response are matters for those organisations, not promises this article can make. A consumer dispute may call for a different channel from an account intrusion. CyberShield also accepts free community reports from verified accounts, with private evidence for moderation. It does not forward those reports automatically to police or publish every allegation. Use official channels independently and keep track of where you supplied information.

Watch for a second attempt and follow up carefully

Someone may approach you claiming they can recover funds, remove a report or trace an account for an upfront fee. Do not give them credentials or send more money merely because they know details of the original incident. Contact organisations through independently verified routes and keep later developments with your original timeline. If the seller eventually delivers or corrects the issue, describe that development accurately to the relevant recipient of your report. Recovery is uncertain, and a delayed reply does not justify exposing someone else's private information. Focus on account safety, reliable documentation and appropriate follow-up rather than promises of a guaranteed outcome.

Warning signs

• A further transfer supposedly needed to unlock recovery.
• An unsolicited helper asks for account access.
• Someone guarantees recovery or removal of a finding.

What to do next

1. Contact the payment provider and secure exposed accounts.
2. Prepare a private timeline and evidence folder.
3. Use appropriate official routes and a separate CyberShield community report.