I Answered a Scam Call — What Should I Do Now?

If You Just Answered (No Info Shared)

If you answered a call, realized it was a scam, and hung up without providing any information or taking any action the caller requested, you have nothing to worry about from a financial or identity theft standpoint. Simply answering a phone call — even a robocall — does not expose your personal information, does not allow access to your accounts, and does not trigger any charges. There is no mechanism by which a scammer gains access to your device, accounts, or identity just because you answered their call.

There are specific myths worth dispelling. Saying "yes" on a scam call does not allow scammers to record your voice and authorize charges in your name — this viral internet claim has no documented real-world mechanism. Similarly, answering a robocall does not "confirm" your number as active in any way that meaningfully endangers you: scammers dial numbers from purchased lists and have no mechanism to charge you, access your device, or compromise your accounts through the act of answering alone.

What to do after answering a scam call where you shared no information: block the number, report it to the FTC at ReportFraud.ftc.gov, and optionally forward any related text to 7726 (SPAM). Leave a record at 800notes.com or WhoCallsMe.com so others can see the number flagged. If your carrier offers a feature to report spam calls from your recent calls list, use it — this data improves carrier-level filtering for all customers. Then move on; no further action is required and nothing actionable happened to your accounts or identity.

If You Shared Personal Information

If you provided personal information during a scam call — your full name, address, date of birth, Social Security number, Medicare ID, driver's license number, or answers to common security questions — act immediately. The risk is identity theft: scammers use this information to open credit accounts, file fraudulent tax returns, claim government benefits, or sell your data to other criminals. The speed of your response determines the extent of the damage.

Within 24 hours: Place a fraud alert with any one of the three major credit bureaus — Equifax (equifax.com/personal/credit-report-services), Experian (experian.com/help), or TransUnion (transunion.com/credit-help). You only need to contact one; they notify the other two. A fraud alert lasts one year and requires creditors to take extra verification steps before opening new accounts in your name. For stronger protection, initiate a credit freeze at all three bureaus — this prevents any new credit from being opened using your information. Freezes are free under federal law (P.L. 115-174) and can be placed online: Equifax (freeze.equifax.com), Experian (experian.com/freeze/center.html), TransUnion (transunion.com/credit-freeze). Also freeze Innovis (innovis.com/freeze) and ChexSystems (chexsystems.com) for banking-specific protection.

If you provided your Social Security number specifically: file a report at IdentityTheft.gov immediately — the site generates a personalized recovery plan and creates official documentation. File with your local police department for the official incident number. Check your Social Security statement at ssa.gov/myaccount to verify no one has claimed benefits using your SSN. Consider placing an E-Verify Self Lock at E-Verify.uscis.gov to prevent fraudulent employment verification. Report to the IRS at 1-800-908-4490 if you suspect SSN use for tax fraud — the IRS can issue an Identity Protection PIN (IP PIN) that must accompany any tax return filed in your name.

If You Shared Financial Information

If you provided credit card numbers, debit card numbers, bank account numbers, routing numbers, or banking login credentials, time is critical. For credit cards: call the number on the back of your card immediately and report the card as compromised. The issuer will cancel the card and issue a new number — federal law limits your liability on unauthorized credit card charges to $50, and most issuers provide $0 liability as a policy. For debit cards and bank accounts: the Electronic Fund Transfer Act (Regulation E) limits your liability based on how quickly you report: up to $50 if reported within 2 business days, up to $500 if reported within 60 days, and potentially unlimited liability after 60 days. Call immediately.

Call your bank's fraud line using the number on the back of your card — not a number from the internet and not a number the caller gave you. Ask the bank to: (1) freeze the compromised account temporarily, (2) reverse any unauthorized transactions already processed, (3) issue a new account number, and (4) investigate the fraud. Get a reference number for the fraud report. Follow up in writing within 10 days to protect your rights under Regulation E. The CFPB (consumerfinance.gov/complaint) is your escalation option if your bank is unresponsive — banks take CFPB complaints seriously because they trigger regulatory review.

If you provided banking login credentials (username and password) rather than account numbers: go to a trusted device (not the one you used during the call) and change your banking password immediately. Check your online banking transaction history for unauthorized activity going back 30 days. Revoke any recently added payees, external transfer accounts, or bill payment methods you don't recognize. Enable login notifications if your bank supports them — you'll receive an alert when anyone logs in from any device. If a scammer has already accessed your account, the bank's fraud team needs documentation of every unauthorized action, including account information changes, new payees added, or transfers initiated — screenshot and save everything.

If You Gave Remote Access to Your Device

Tech support scams frequently convince victims to install remote access software — AnyDesk (anydesk.com), TeamViewer (teamviewer.com), or UltraViewer — under the pretense of "fixing" a virus or error. Once remote access is granted, the attacker can browse all files on your device, install malware or keyloggers that persist after the session, steal saved passwords from your browser, and view banking websites if you have saved credentials. The most financially damaging version: the attacker remotely opens your bank's website and initiates transfers while covering the screen with a "diagnostic" overlay to prevent you from seeing what they're doing.

Immediately disconnect from the internet: unplug your ethernet cable, or go to Settings → WiFi and toggle it off. This stops an active remote session and prevents malware from communicating with the attacker's servers. Then uninstall any remote access software: Windows (Settings → Apps → find AnyDesk/TeamViewer → Uninstall) or Mac (Applications folder → right-click → Move to Trash). Change all passwords — particularly banking, email, and any accounts you were logged into during the remote session — from a different, clean device.

The safest course after a remote access compromise is a factory reset: Windows (Settings → System → Recovery → Reset this PC → Remove everything), Mac (Apple menu → Erase All Content and Settings on macOS 12+). Factory reset removes any malware or keyloggers the attacker installed. Before resetting, back up photos and documents to an external drive — but do not restore any applications from the backup, only your personal files. After the reset, reinstall applications fresh from official sources. If you're unsure whether your device is still compromised, take it to a reputable computer repair shop or Best Buy Geek Squad for a professional assessment before using it for any sensitive task.

If You Sent Money

If you sent money to a scammer, your recovery options depend on the payment method. Wire transfers: contact your bank immediately — within hours if possible — and ask to initiate a wire recall. Banks have limited ability to reverse wires once settled (international wires settle quickly), but rapid recall requests succeed in some cases. File a complaint with the Internet Crime Complaint Center (IC3.gov), which has a financial fraud kill chain program that has recovered funds in some cases. Gift cards: contact the gift card issuer immediately: Google Play (1-855-466-4438), Apple/iTunes (reportascam.apple.com), Amazon (1-888-280-4331), Target (1-800-544-2943), eBay Gift Cards (1-888-255-5400). Report that you were scammed into purchasing the cards and provide the card numbers and PINs if you have them — issuers sometimes can freeze unused card balances. Cryptocurrency: transactions are irreversible by design. Report to the FBI's IC3 and the CFTC at cftc.gov/complaint — these agencies track crypto fraud and occasionally coordinate with exchanges to freeze funds, but individual recovery is rare. Zelle/Venmo/Cash App: contact the platform immediately. Zelle (1-844-428-8542), Cash App (in-app support), and Venmo (venmo.com/u/help) all have processes for reporting scam transactions — success rates are low but not zero if the recipient account is still active.

Report money losses to the FTC at ReportFraud.ftc.gov and your state Attorney General — many state AGs have consumer protection divisions that actively pursue recovery in certain categories, particularly elder financial abuse. The AARP Fraud Helpline at 1-877-908-3360 provides free counseling and can help you navigate the reporting and recovery process. Contact your local police and file a report for the police report number — this documentation is required for some bank claims and insurance claims.

Long-Term Monitoring Steps

Whether you lost money, shared personal information, or simply want to ensure no ongoing harm, maintain these monitoring steps for at least 12-24 months after a scam call incident. Credit monitoring: check your credit reports weekly at AnnualCreditReport.com (all three bureaus are free weekly as of 2021, under policy extended indefinitely). Set up free credit monitoring at Credit Karma (creditkarma.com) for TransUnion and Equifax monitoring with new account alerts, and Experian's free tier (experian.com) for Experian monitoring. Any new account or hard inquiry you didn't initiate requires immediate investigation.

Social Security monitoring: check your Social Security earnings record annually at ssa.gov/myaccount — fraudulent employment using your SSN will appear as earnings from employers you don't recognize. Tax monitoring: file your taxes as early as possible each year — fraudulent tax returns using your SSN are filed early in the season to beat the real taxpayer's return. If you've experienced tax fraud or suspect SSN compromise, proactively request an Identity Protection PIN from the IRS at irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin. Dark web monitoring: services like Experian's Dark Web Scan, Aura (aura.com), and Have I Been Pwned Pro (haveibeenpwned.com) alert you when your personal information appears in dark web markets or breach databases.

If you have reason to believe your identity is being actively used — new accounts you didn't open, debt collector calls about debts you don't recognize, missing expected mail, or IRS notices about income you didn't earn — escalate beyond monitoring to active recovery. IdentityTheft.gov's recovery plan walks you through specific steps for each type of identity fraud. FTC identity theft specialists are available at 1-877-438-4338. For complex cases involving large losses or ongoing criminal use of your identity, consider consulting with a consumer law attorney — many work on contingency for identity theft cases and can pursue creditors and scammers directly on your behalf.