Scam Guide and Help for Victims

On this page you will find helpful information on the various types of scams so many folks have already become victim to. Get familiar with the information on this page so you will recognize a scam when you see one. Knowledge is power, arm yourself!

If you are already victim of a scam we have put together a pretty comprehensive step by step guide of what to do. View the guide below or
you can download the guide HERE

If you are a victim and an iPad/iPhone user we have a how-to guide for you as well. View the guide below or you can download the iOS Guide HERE

BEST PRACTICES TO STAY SAFE ONLINE

 

Passwords: Do not use the same password on more than one website. Use a Password manager app or your web browsers built in password manager. 

Use 2FA: Using 2 factor authentication makes your accounts more secure. Even better use Passkeys where available.

Don’t fall prey to ‘click bait’ or ‘phishing’ scams: Never click links in emails, messages & on Facebook. Phishing links pretend to be secure websites and it may very difficult to determine they are not. Take the attitude that everything is a scam until proven otherwise. 

Verify ‘from’ email addresses: You may get an email that looks just like emails you have received in the past from lets say your bank, the way to tell if it is legit is to either hover over the ‘from’ email address or click the little down arrow beside it see the entire address of the sender. The only part of the address that matters is the name before the .com at the end of the address. Even if you think the email is legit the safest thing is to open your web browser and navigate to your bank and log in, as opposed to clicking the link in the email.

Setup ‘Safe Words’ with family members to protect against voice cloning scams.

Never ever give anyone remote access to your computer unless you fully trust them

Use Apple Pay or Android Pay: Your actual credit card number is never transmitted to the vendor. Paying with your phone or watch prevents “card skimming” and cuts out an astonishing 60-90% of fraud!

Set up text notifications for any charges on your credit cards, you will receive them the instant a charge is made so you will know when a fraudulent charge goes on your card.

Prevent having your cell phone number stolen by turning on ‘Line Lock’  (Verizon), ‘Wireless Account Lock’ (ATT) or ‘SIM Protection’ (T-Mobile) so your number cannot be ported out.

STEP BY STEP PROCEDURE TO FOLLOW IF YOU BECOME A VICTIM OF A SCAM

A PDF version of the following is available for download HERE

Here is the safest step‑by‑step response when someone’s computer, passwords, or bank accounts may be compromised. The first priority is to stop the theft from spreading, then lock down money and identity, then clean the computer, and finally recover accounts and credit.

• This document primarily discusses computer scams. If you are an iPad/iPhone user see our specific How-To section for iOS.

 

IMMEDIATE ACTIONS TO TAKE



1.        Stop using the compromised computer for banking, shopping, or logging into important accounts. The FTC advises stopping all online shopping, banking, and password entry until the computer is cleaned and restored.

2.        Disconnect the computer from the internet by turning off Wi‑Fi or unplugging the ethernet cable. Remote‑access software may have been installed if someone clicked a malicious link or granted access to the computer.

3.        From a different, trusted device, call your bank, credit union, and credit card issuers immediately. Ask them to freeze or lock accounts, cancel cards, block online access, and reverse any fraudulent transfers or charges.

4.        FREEZE YOUR CREDIT FILES. Use the links below to freeze each of your three credit files and your ChexSystems file. This prevents scammers from opening credit or accounts in your name. Do not call these companies — they will try to sell services and pressure people into buying them.

·      Equifax: https://www.equifax.com/personal/credit-report-services/credit-freeze

·      TransUnion: https://www.transunion.com/credit-freeze

·      Experian: https://www.experian.com/help/credit-freeze

·      ChexSystems: https://www.chexsystems.com/security-freeze/place-freeze

5.        CHANGE PASSWORDS — start with email, then banking, then any account that uses the same password. Use a password manager and make every password unique. Minimum password length: 16 characters, with upper and lower case letters, numbers, and special characters. You will never be able to think of strong passwords on your own — use a password manager.

6.        A safer option: Create a brand‑new email address and password, because scammers often change passwords and lock victims out. You will need the new email when updating AutoPay accounts (Gmail recommended).

7.        Turn on multifactor authentication everywhere you can — but do it from a clean device. Email is especially important because it can be used to reset other passwords.

 

SAME‑DAY ACTIONS TO TAKE

 

1.        Contact your bank’s fraud department and ask for written confirmation of the fraud case. For wire transfers or account takeovers, the FBI’s IC3 recommends contacting the financial institution immediately to request a recall or reversal.

2.        The bank should create new accounts and transfer your funds before closing the old ones. AutoPay accounts will need to wait until everything is stable again. You may want to get some additional checks or cash to hold you over.

3.        File a report at IdentityTheft.gov to create a recovery plan. The FTC and many banks use this report as part of the recovery process.

4.        File a complaint with IC3 if money was moved, wires were sent, or the scam involved online account takeover. IC3 specifically recommends reporting account‑takeover fraud there. https://www.ic3.gov

COMPUTER CLEANUP

1.        Keep the computer disconnected from the internet until it is checked.

2.        Run reputable antivirus or anti‑malware software, updated from a clean source. The FTC advises using trusted security software and reinstalling or restoring if needed.

3.        If the scammer had remote access, strongly consider backing up important files and then doing a full restore or erase‑and‑reinstall of the operating system. This is often safer than trying to guess what was installed.

4.        After cleanup, update the operating system and browser, then change passwords again from the cleaned machine.

5.        A safer option: Purchase a new computer. There is currently no way to prove that all malware or remote‑access software has been removed once someone has gained access.

 

IDENTITY PROTECTION

 

1.        Check your credit reports for new accounts or hard inquiries you do not recognize.

2.        Contact any company where an account was opened or changed in your name.

3.        If your Social Security number may have been exposed, follow IRS identity‑theft guidance, lock your SSN, and consider an IP PIN for tax protection (links below).

4.        Keep a log of dates, names, phone numbers, case numbers, and what each institution told you. This makes disputes much easier later.

5.        Social Security Number Lock: https://myeverify.uscis.gov/  (Prevents employment verification but not online access. Call the SSA at (800) 772‑1213 to request a block on electronic access if you lost your card or know your number was stolen.)

6.         IRS IP PIN: https://www.irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin

 

WHAT NOT TO DO

 

·      Do not keep chatting with the scammer.

·      Do NOT purchase gift cards — scammers only want your money.

·      Do not pay “recovery” companies that claim they can get your money back quickly.

·      Do not reuse old passwords.

·      Do not assume the problem is over once the bank card is replaced — email and cloud accounts can still be used to take over more services.

 

BEST ORDER TO FOLLOW

 

1. Email and passwords
2. Bank and cards
3. Credit freeze and fraud alert
4. Computer cleanup
5. IdentityTheft.gov
6. IC3 report (www.ic3.gov)

 

 

 

 

iPad and iPhone SCAM VICTIM'S GUIDE

The information below is also available as a PDF download by clicking HERE

Apple's mobile ecosystem is highly sandboxed, meaning it is incredibly rare for a website to install actual "malware" or a virus on an iPhone or iPad. However, scammers use clever tricks to make it look like you are infected.

 

30-Minute iPhone/iPad Security Audit

 

This checklist is designed for a thorough review after a suspected scam, suspicious popup, strange behavior, or accidental interaction with a scammer.

You’ll move from highest-risk items first to lower-risk checks.

 

Phase 1 — Immediate Risk Check (5 minutes)

 

1. Turn Off Active Remote Access

 

Look for these apps immediately:

• AnyDesk
• TeamViewer
• Zoho Assist
• Chrome Remote Desktop

 

If installed:

• Open the app
• End any session
• Delete the app

2. Disconnect Unknown VPNs

 

Go to: Settings → General → VPN & Device Management

Check:

• VPN status
• Installed VPN profiles
• Unknown configuration profiles

 

Remove anything unfamiliar.

 

Major red flags:

• “Device Management”
• “Remote Management”
• Unknown business/company names

 

3. Airplane Mode (Optional)

 

If you believe someone currently has access to your device:

Turn on Airplane Mode temporarily while auditing

 

Phase 2 — Apple Account Security (7 minutes)

 

4. Check Signed-In Devices

 

Go to: Settings → [Your Name]

• Scroll down through devices.
• Remove unfamiliar devices:
• Tap device: “Remove from Account”

 

5. Change Apple Account Password

 

Go to: Settings → [Your Name] → Password & Security → Change Password

 

Use:

• Long password
• Unique password
• Not reused anywhere else
• If you use a password manager allow it to create the password

6. Verify Trusted Phone Numbers

 

Still under: Password & Security

Check:

• Trusted numbers
• Recovery contacts
• Recovery key/security keys if enabled

Remove anything unknown.

 

7. Ensure Two-Factor Authentication Is ON

 

Should show: “Two-Factor Authentication: On”

If not: Turn it on immediately.

 

Phase 3 — Financial & Password Risk (5 minutes)

 

8. Review Saved Passwords

 

Go to: Settings → Apps → Passwords

Check for:

• Security recommendations
• Reused passwords
• Breached passwords

Prioritize changing:

• Email
• Banking
• Apple Account
• Shopping accounts
• Password manager

Especially if you:

• Typed passwords while someone watched
• Entered credentials into a suspicious site

 

9. Check Banking & Payment Apps

 

Review:

• Recent transactions
• Linked email addresses
• Phone numbers
• Notification settings

Examples:

• Venmo
• Cash App
• PayPal

If suspicious:

• Freeze cards
• Call banks directly using official numbers

 

Phase 4 — Messaging & Phone Hijacking (4 minutes)

 

10. Check Text Message Forwarding

 

Go to: Settings → Apps → Messages → Text Message Forwarding

Only your own devices should appear.

 

11. Check Call Forwarding

 

Go to: Settings → Apps → Phone → Call Forwarding

Normally OFF unless intentionally used.

 

12. Check Unknown Contacts in Shared Features

 

Review:

• Shared calendars
• Shared notes
• Shared photo albums

Unexpected sharing can indicate account compromise.

 

Phase 5 — Scam Profiles & Browser Issues (4 minutes)

 

13. Remove Spam Calendars

 

Go to: Settings → Apps → Calendar → Accounts

 

Delete unknown:

• Subscribed calendars
• Spam alerts
• Crypto calendars
• “Virus warning” calendars

 

14. Check Safari Extensions

 

Go to: Settings → Apps → Safari → Extensions

Disable/remove unknown extensions.

 

Then clear:

• History
• Website data

15. Check Notification Permissions

 

Go to: Settings → Notifications

 

Look for apps sending:

• Fake virus alerts
• Crypto scams
• “Security” warnings

 

Phase 6 — Privacy Permissions (3 minutes)

 

16. Review Privacy Access

 

Go to: Settings → Privacy & Security

Check:

• Microphone
• Camera
• Photos
• Bluetooth
• Local Network
• Screen Recording
• Location Services

 

Remove permissions from apps you don’t trust.

 

17. Check Background Activity

 

Go to: Settings → Battery

 

Look for:

• Unknown apps using heavy background activity
• Apps you don’t recognize

 

Phase 7 — Final Hardening (2 minutes)

 

18. Update iOS/iPadOS

 

Go to: Settings → General → Software Update

Install updates.

 

19. Restart Device

 

A simple reboot can terminate lingering sessions or glitches.

 

20. Decide Whether You Need a Full Reset

 

A full erase/reset is recommended if:

 

• Remote access was granted
• Banking info exposed
• Unknown profiles existed
• Apple Account compromised
• Device behaves strangely afterward

 

Path: Settings → General → Transfer or Reset → Erase All Content and Settings

 

If doing this after a scam:

• Consider setting up as NEW initially
• Reinstall apps manually

 

Highest Danger Signs

 

These deserve immediate action:

• Unknown device in Apple Account
• Unknown profile/device management entry
• Remote access app installed
• Verification codes arriving unexpectedly
• Banking changes you didn’t make
• Call forwarding enabled unexpectedly
• Someone asked for Apple verification codes
• Someone watched you enter password

 

Usually NOT a Sign of Hacking

 

These are commonly mistaken for compromise:

• Safari popup saying “iPhone infected”
• Calendar spam
• Battery drain
• Storage full
• Random ads on websites
• Overheating during updates
• One-time app crash