On this page
Stay safe · page S01
The six questions to ask first
An unexpected call, text, email or pop-up? Before you do anything it asks, answer these six questions.
Did it come out of the blue?
Even if it seems to be from your bank, a government office, Apple, Microsoft or a relative — names and numbers can be faked.
Is there a problem — or a prize?
Your account is locked, a package is held, a payment failed, you owe a toll or tax — or you’ve won something.
Are you being rushed?
Act now, a countdown, “don’t hang up,” “don’t tell anyone.”
Does it ask you to pay in a particular way?
Gift cards, a wire transfer, cryptocurrency, a payment app, or cash.
Does it ask for a code, password or personal details?
A verification code, passcode, PIN, bank details or Social Security number.
Does it want you to click, call or install something?
A link, a phone number in the message, or an app so someone can “fix” your device.
Stop. Don’t click, call back, pay or share anything. Hang up or close it. Then contact the company yourself using a number you already trust — the back of your card, a statement, or a website you type in yourself. And talk it over with someone you trust.
Worth knowing
Honest organizations give you time to decide. Apple and Google never ask for your verification code, and Microsoft won’t call to offer support unless you asked it to.
Stay safe · page S04
What should I do if I already paid or shared a code?
Act quickly, and don’t be embarrassed — scammers are professionals and fool careful people every day. Do whatever applies to you, starting now.
| If you… | Do this now |
|---|---|
| Paid by credit or debit card | Call your card company or bank on the number on the back of the card. Ask them to reverse the charge. |
| Sent a bank transfer (or Zelle) | Call your bank immediately and ask them to reverse the payment. |
| Paid with a payment app | Report it to the app company straight away and ask for a reversal. |
| Bought gift cards | Call the gift card company on the number on the back of the card. Keep the card and the receipt. |
| Sent a wire transfer | Call the company and say a scammer tricked you: MoneyGram 1-800-926-9400 · Western Union 1-800-448-1492. |
| Paid with cryptocurrency | Contact the exchange or crypto ATM company straight away. |
| Let someone onto your computer | Uninstall anything they had you install. Install updates and run a full scan (W24 Check for viruses with Windows Security). Change your passwords and turn on two-factor. |
| Gave a password or code | Change that password now, from a device you trust, and turn on two-factor (P25 Check your Apple Account is well protected for iPhone). |
| Gave your Social Security number (US) | Go to IdentityTheft.gov for a step-by-step recovery plan. |
Beware the second scam
Anyone who contacts you offering to get your money back — for a fee — is another scammer.
Then report it (S06 Where to report a scam), and note what happened on R12 Suspicious message record (in the kit). Outside the US, call your bank first, then use the reporting service for your country on S06 Where to report a scam.
Stay safe · page S06
Where do I report a scam?
Reporting helps stop scammers and warn others — even if you didn’t lose money. If anyone is in danger right now, call your emergency number.
| Where you live | Report to |
|---|---|
| United States | Scams and fraud: ReportFraud.ftc.gov. Just an unwanted call: DoNotCall.gov. Internet crime: ic3.gov (FBI). Aged 60+: National Elder Fraud Hotline 833-FRAUD-11 (833-372-8311), Mon–Fri 10am–6pm ET. Support and guidance: AARP Fraud Watch Network Helpline 877-908-3360, Mon–Fri 8am–8pm ET. |
| Canada | Canadian Anti-Fraud Centre: 1-888-495-8501 (Mon–Fri 10am–4:45pm ET) or reportcyberandfraud.canada.ca. Also tell your local police. |
| United Kingdom | Report Fraud (it replaced Action Fraud in December 2025): reportfraud.police.uk or 0300 123 2040 — England, Wales and Northern Ireland. In Scotland: Police Scotland on 101. Worried about a call about your money? Dial 159 to reach your bank. |
| Australia | Scamwatch: scamwatch.gov.au. Cybercrime: cyber.gov.au (Submit a report), or 1300 CYBER1 (1300 292 371). Identity help: IDCARE 1800 595 160 (Mon–Fri 7am–7pm AEST). In danger: 000. |
Spam texts and phishing emails
| Spam texts (US, Canada, UK) | Forward the message to 7726 (it spells SPAM), then delete it. |
|---|---|
| Phishing emails | US: forward to [email protected]. UK: [email protected]. Fake Apple emails: [email protected]. |
| Fake Microsoft support | microsoft.com/reportascam |
Numbers checked October 8, 2026
If one has changed, look it up on the organization’s own website — never from a message or a search ad. Scammers sometimes pretend to be these hotlines, too: real ones won’t threaten you or ask for money.
Keep the steps on paper
These steps come from Plain Steps: 67 one-page fixes like these for everyday iPhone and Windows 11 jobs, to read on screen or print. Every card has the same shape: the path, numbered steps, how to tell it worked, and when to stop.
One payment, no subscription · 30-day refund, no reason needed · Buying opens Gumroad’s secure checkout. See everything in the kit.
Related free guides
Fake virus warning pop-up?
A web page says your computer is infected, with a phone number and a countdown. Don’t call. How to close it, and what to do if you already did.
Read the guideHelping a parent with tech
What to set up together on an iPhone and a Windows computer, how to agree on scams, and what to write down, so they can manage on their own.
Read the guideWhy is my iPhone talking?
It talks when you touch the screen, and one tap no longer opens anything. How to turn VoiceOver off, and what Speak Screen is.
Read the guideFind a downloaded file
Where Windows 11 puts the files you download, how to search for one, and how to save the next one where you’ll find it.
Read the guide