Scam Guide and Help for Victims

On this page you will find helpful information on the various types of scams so many folks have already become victim to. Get familiar with the information on this page so you will recognize a scam when you see one. Knowledge is power, arm yourself!

If you are already victim of a scam we have put together a pretty comprehensive step by step guide of what to do. View the guide below or
you can Download our Step by Step Guide

If you are a victim and an iPad/iPhone user we have a how-to guide for you as well. View the guide below or you can:Download Our Step by Step iPhone/iPad Scam Guide 

If you are a victim and an Android (Phone or Tablet) user we have a how-to guide for you as well. View the guide below or you can:Download Our Step by Step Android Scam Guide 

BEST PRACTICES TO STAY SAFE ONLINE

 

Passwords: Do not use the same password on more than one website. Use a Password manager app or your web browsers built in password manager. 

Use 2FA: Using 2 factor authentication makes your accounts more secure. Even better use Passkeys where available.

Don’t fall prey to ‘click bait’ or ‘phishing’ scams: Never click links in emails, messages & on Facebook. Phishing links pretend to be secure websites and it may very difficult to determine they are not. Take the attitude that everything is a scam until proven otherwise. 

Verify ‘from’ email addresses: You may get an email that looks just like emails you have received in the past from lets say your bank, the way to tell if it is legit is to either hover over the ‘from’ email address or click the little down arrow beside it see the entire address of the sender. The only part of the address that matters is the name before the .com at the end of the address. Even if you think the email is legit the safest thing is to open your web browser and navigate to your bank and log in, as opposed to clicking the link in the email.

Setup ‘Safe Words’ with family members to protect against voice cloning scams.

Never ever give anyone remote access to your computer unless you fully trust them

Use Apple Pay or Android Pay: Your actual credit card number is never transmitted to the vendor. Paying with your phone or watch prevents “card skimming” and cuts out an astonishing 60-90% of fraud!

Set up text notifications for any charges on your credit cards, you will receive them the instant a charge is made so you will know when a fraudulent charge goes on your card.

Prevent having your cell phone number stolen by turning on ‘Line Lock’  (Verizon), ‘Wireless Account Lock’ (ATT) or ‘SIM Protection’ (T-Mobile) so your number cannot be ported out.

STEP BY STEP PROCEDURE TO FOLLOW IF YOU BECOME A VICTIM OF A SCAM

A PDF version of the following is available for download here: Download Our Step by Step Guide

Here is the safest step-by-step response when someone’s computer, passwords, and bank accounts may be compromised. The first priorities are:

• lock down money and identity
• clean the computer
• recover accounts and credit

IMMEDIATE ACTIONS TO TAKE



1.        Stop using the compromised computer for banking, shopping, or logging into important accounts. The FTC advises stopping all online shopping, banking, and password entry until the computer is cleaned and restored.

2.        Disconnect the computer from the internet by turning off Wi‑Fi or unplugging the ethernet cable. Remote‑access software may have been installed if someone clicked a malicious link or granted access to the computer.

3.        From a different, trusted device, call your bank, credit union, and credit card issuers immediately. Ask them to freeze or lock accounts, cancel cards, block online access, and reverse any fraudulent transfers or charges.

4.        FREEZE YOUR CREDIT FILES. Use the links below to freeze each of your three credit files and your ChexSystems file. This prevents scammers from opening credit or accounts in your name. Do not call these companies — they will try to sell services and pressure people into buying them.

·      Equifax: https://www.equifax.com/personal/credit-report-services/credit-freeze

·      TransUnion: https://www.transunion.com/credit-freeze

·      Experian: https://www.experian.com/help/credit-freeze

·      ChexSystems: https://www.chexsystems.com/security-freeze/place-freeze

5.        CHANGE PASSWORDS — start with email, then banking, then any account that uses the same password. Use a password manager and make every password unique. Minimum password length: 16 characters, with upper and lower case letters, numbers, and special characters. You will never be able to think of strong passwords on your own — use a password manager.

6.        A safer option: Create a brand‑new email address and password, because scammers often change passwords and lock victims out. You will need the new email when updating AutoPay accounts (Gmail recommended).

7.        Turn on multifactor authentication everywhere you can — but do it from a clean device. Email is especially important because it can be used to reset other passwords.

 

SAME‑DAY ACTIONS TO TAKE

 

1.        Contact your bank’s fraud department and ask for written confirmation of the fraud case. For wire transfers or account takeovers, the FBI’s IC3 recommends contacting the financial institution immediately to request a recall or reversal.

2.        The bank should create new accounts and transfer your funds before closing the old ones. AutoPay accounts will need to wait until everything is stable again. You may want to get some additional checks or cash to hold you over.

3.        File a report at IdentityTheft.gov to create a recovery plan. The FTC and many banks use this report as part of the recovery process.

4.        File a complaint with IC3 if money was moved, wires were sent, or the scam involved online account takeover. IC3 specifically recommends reporting account‑takeover fraud there. https://www.ic3.gov

COMPUTER CLEANUP

1.        Keep the computer disconnected from the internet until it is checked.

2.        Run reputable antivirus or anti‑malware software, updated from a clean source. The FTC advises using trusted security software and reinstalling or restoring if needed.

3.        If the scammer had remote access, strongly consider backing up important files and then doing a full restore or erase‑and‑reinstall of the operating system. This is often safer than trying to guess what was installed.

4.        After cleanup, update the operating system and browser, then change passwords again from the cleaned machine.

5.        A safer option: Purchase a new computer. There is currently no way to prove that all malware or remote‑access software has been removed once someone has gained access.

 

IDENTITY PROTECTION

 

1.        Check your credit reports for new accounts or hard inquiries you do not recognize.

2.        Contact any company where an account was opened or changed in your name.

3.        If your Social Security number may have been exposed, follow IRS identity‑theft guidance, lock your SSN, and consider an IP PIN for tax protection (links below).

4.        Keep a log of dates, names, phone numbers, case numbers, and what each institution told you. This makes disputes much easier later.

5.        Social Security Number Lock: https://myeverify.uscis.gov/  (Prevents employment verification but not online access. Call the SSA at (800) 772‑1213 to request a block on electronic access if you lost your card or know your number was stolen.)

6.         IRS IP PIN: https://www.irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin

 

WHAT NOT TO DO

 

·      Do not keep chatting with the scammer.

·      Do NOT purchase gift cards — scammers only want your money.

·      Do not pay “recovery” companies that claim they can get your money back quickly.

·      Do not reuse old passwords.

·      Do not assume the problem is over once the bank card is replaced — email and cloud accounts can still be used to take over more services.

 

BEST ORDER TO FOLLOW

 

1. Email and passwords
2. Bank and cards
3. Credit freeze and fraud alert
4. Computer cleanup
5. IdentityTheft.gov
6. IC3 report (www.ic3.gov)

 

 

 

 

iPad and iPhone SCAM VICTIM'S GUIDE

The information below is also available as a PDF Download Our Step by Step iPhone/iPad Scam Guide

Apple's mobile ecosystem is highly sandboxed, meaning it is incredibly rare for a website to install actual "malware" or a virus on an iPhone or iPad. However, scammers use clever tricks to make it look like you are infected.

 

30-Minute iPhone/iPad Security Audit

 

This checklist is designed for a thorough review after a suspected scam, suspicious popup, strange behavior, or accidental interaction with a scammer.

You’ll move from highest-risk items first to lower-risk checks.

 

Phase 1 — Immediate Risk Check (5 minutes)

 

1. Turn Off Active Remote Access

 

Look for these apps immediately:

• AnyDesk
• TeamViewer
• Zoho Assist
• Chrome Remote Desktop

If installed:

• Open the app
• End any session
• Delete the app

2. Disconnect Unknown VPNs

 

Go to: Settings → General → VPN & Device Management

Check:

• VPN status
• Installed VPN profiles
• Unknown configuration profiles

Remove anything unfamiliar.

 

Major red flags:

• “Device Management”
• “Remote Management”
• Unknown business/company names

 

3. Airplane Mode (Optional)

 

If you believe someone currently has access to your device:

Turn on Airplane Mode temporarily while auditing

 

Phase 2 — Apple Account Security (7 minutes)

 

4. Check Signed-In Devices

 

Go to: Settings → [Your Name]

• Scroll down through devices.
• Remove unfamiliar devices:
• Tap device: “Remove from Account”

 

5. Change Apple Account Password

 

Go to: Settings → [Your Name] → Password & Security → Change Password

 

Use:

• Long password
• Unique password
• Not reused anywhere else
• If you use a password manager allow it to create the password

6. Verify Trusted Phone Numbers

 

Still under: Password & Security

Check:

• Trusted numbers
• Recovery contacts
• Recovery key/security keys if enabled

Remove anything unknown.

 

7. Ensure Two-Factor Authentication Is ON

 

Should show: “Two-Factor Authentication: On”

If not: Turn it on immediately.

 

Phase 3 — Financial & Password Risk (5 minutes)

 

8. Review Saved Passwords

 

Go to: Settings → Apps → Passwords

Check for:

• Security recommendations
• Reused passwords
• Breached passwords

Prioritize changing:

• Email
• Banking
• Apple Account
• Shopping accounts
• Password manager

Especially if you:

• Typed passwords while someone watched
• Entered credentials into a suspicious site

 

9. Check Banking & Payment Apps

 

Review:

• Recent transactions
• Linked email addresses
• Phone numbers
• Notification settings

Examples:

• Venmo
• Cash App
• PayPal

If suspicious:

• Freeze cards
• Call banks directly using official numbers

 

Phase 4 — Messaging & Phone Hijacking (4 minutes)

 

10. Check Text Message Forwarding

 

Go to: Settings → Apps → Messages → Text Message Forwarding

Only your own devices should appear.

 

11. Check Call Forwarding

 

Go to: Settings → Apps → Phone → Call Forwarding

Normally OFF unless intentionally used.


11a. Check for Universal Network Forwarding (MMI Codes)

Sometimes, text forwarding happens at the carrier level, not on the phone itself. You can audit this instantly by opening your Phone app (the dialer) and typing this code:

    Dial *#61# or *#21# and press the call button. (The codes may vary by carrier)

    A screen will pop up showing the status of your Voice, Data, and SMS forwarding. It should say "Not forwarded." If you see a phone number listed there that you don't own, call your cellular carrier immediately to have them reset your conditional call/text forwarding.

12. Check Unknown Contacts in Shared Features

 

Review:

• Shared calendars
• Shared notes
• Shared photo albums

Unexpected sharing can indicate account compromise.

 

Phase 5 — Scam Profiles & Browser Issues (4 minutes)

 

13. Remove Spam Calendars

 

Go to: Settings → Apps → Calendar → Accounts

 

Delete unknown:

• Subscribed calendars
• Spam alerts
• Crypto calendars
• “Virus warning” calendars

 

14. Check Safari Extensions

 

Go to: Settings → Apps → Safari → Extensions

Disable/remove unknown extensions.

 

Then clear:

• History
• Website data

15. Check Notification Permissions

 

Go to: Settings → Notifications

 

Look for apps sending:

• Fake virus alerts
• Crypto scams
• “Security” warnings

 

Phase 6 — Privacy Permissions (3 minutes)

 

16. Review Privacy Access

 

Go to: Settings → Privacy & Security

Check:

• Microphone
• Camera
• Photos
• Bluetooth
• Local Network
• Screen Recording
• Location Services

 

Remove permissions from apps you don’t trust.

 

17. Check Background Activity

 

Go to: Settings → Battery

 

Look for:

• Unknown apps using heavy background activity
• Apps you don’t recognize

 

Phase 7 — Final Hardening (2 minutes)

 

18. Update iOS/iPadOS

 

Go to: Settings → General → Software Update

Install updates.

 

19. Restart Device

 

A simple reboot can terminate lingering sessions or glitches.

 

20. Decide Whether You Need a Full Reset

 

A full erase/reset is recommended if:

 

• Remote access was granted
• Banking info exposed
• Unknown profiles existed
• Apple Account compromised
• Device behaves strangely afterward

 

Path: Settings → General → Transfer or Reset → Erase All Content and Settings

 

If doing this after a scam:

• Consider setting up as NEW initially
• Reinstall apps manually

 

Highest Danger Signs

 

These deserve immediate action:

• Unknown device in Apple Account
• Unknown profile/device management entry
• Remote access app installed
• Verification codes arriving unexpectedly
• Banking changes you didn’t make
• Call forwarding enabled unexpectedly
• Mail forwarding enabled unexpectedly
• Someone asked for Apple verification codes
• Someone watched you enter password

 

Usually NOT a Sign of Hacking

 

These are commonly mistaken for compromise:

• Safari popup saying “iPhone infected”
• Calendar spam
• Battery drain
• Storage full
• Random ads on websites
• Overheating during updates
• One-time app crash

 

ANDROID SCAM VICTIMS GUIDE

Download Our Step by Step Android Scam Guide Download Our Step by Step Android Scam Guide

Android Scam Victim’s Guide 

Android devices (tablets & smartphones) are more open than iPhones, which means real malware is possible, but still uncommon unless apps were installed from outside the Play Store or remote‑access was granted.

Most “virus warnings” on Android are fake pop‑ups, not infections.

NOTE: These are generic items to look for, and the settings will probably be different for manufacturers and models.Example: the iPhone, one manufacturer “Apple” and 42 iPhone models ever released, while with Android,1,300+ manufacturers and 24,000+ distinct Android phone models have been released with 300–600 new models every year.

This guide walks you through a 30‑minute, high‑risk‑to‑low‑risk audit after a scam, suspicious popup, or accidental interaction.

 

30‑Minute Android Security Audit

 

Phase 1 — Immediate Risk Check (5 minutes)

These are the highest‑danger items on Android.

 

1. Remove Remote‑Access Apps

Look for these apps immediately (Samsung: Settings → Apps; Pixel: Settings → Apps → See all apps):

·        AnyDesk

·        TeamViewer / TeamViewer QuickSupport

·         Zoho Assist

·         AirDroid / AirDroid Remote Support

·         RustDesk

·         Splashtop

·         Scrcpy (Screen Copy)

·         VNC Viewer

·         LogMeIn Rescue (used by support scammers)

• “Device Help” apps you didn’t install

 

 If installed:

• Open the app
• End any active session
• Uninstall the app

 

2. Remove Unknown Device Admin Apps

Go to: Settings → Security → Device admin apps

(Names vary: “Security & privacy,” “More security settings,” “Device admin apps”)

Note: You may have to ask your favorite AI where these settings are located on your tablet or smartphone, always include the make and model number. (free AI URLs at bottom)

Disable anything unfamiliar.

Major red flags:

• Unknown “Security Service”
• “Device Manager” from unknown vendor
• “Work Profile” you didn’t create

 

3. Remove Unknown VPNs

Go to: Settings → Network & Internet → VPN

Delete any VPN you don’t recognize.

Red flags:

• “Security VPN”
• “Protect VPN”
• “MobileGuard”
• Anything installed during a scam call

 

4. Airplane Mode (Optional without remote access software)

If you believe someone is actively connected or you find remote access software on your device then turn on Airplane mode as scammers may be able to see everything you are doing.

Turn on Airplane Mode while auditing.

 

Phase 2 — Google Account Security (7 minutes)

 

5. Check Signed‑In Devices

Go to: Settings → Google → Manage your Google Account → Security → Your devices

Remove unfamiliar devices:

• Tap device → Sign out

 

6. Change Google Password

Go to:

Google Account → Security → Password

Use:

• Long, unique password (16 characters, numbers, special characters, upper & lower case).
• Password manager‑generated. We recommend KeePassDX for Android: https://play.google.com/store/apps/details?id=com.kunzisoft.keepass.free&hl=en_US

 

7. Verify Recovery Info

Still under Security:

Check:

• Recovery phone
• Recovery email
• 2‑Step (2FA) Verification devices
• Security keys (if used)

Remove anything unknown.

 

8. Ensure 2‑Step Verification (2FA) Is ON

Should show: 2‑Step Verification: On

If not, turn it on immediately.

 

Phase 3 — Financial & Password Risk (5 minutes)

 

9. Review Saved Passwords

Go to:

Settings → Google → Password Manager (In a Samsung it’s Settings>General Management> Passwords, passkeys, and autofill) then set your preferred service.

Check for:

• Breached passwords
• Reused passwords
• Weak passwords (less than 16 characters)

Prioritize changing:

• Email
• Banking
• Google account
• Shopping accounts
• Password manager

Especially if:

• Someone watched you type (remotely or over your shoulder).
• You entered credentials on a suspicious site

 

10. Check Banking & Payment Apps

Open each app (Venmo, Cash App, PayPal, Zelle, bank apps):

Review:

• Recent transactions
• Linked emails
• Linked phone numbers
• Notification settings

If suspicious:

• Freeze cards
• Call banks using official numbers

 

Phase 4 — Messaging & Phone Hijacking (4 minutes)

11. Check Call Forwarding

Go to:

Phone app → Settings → Calls → Call forwarding

Should normally be OFF.

  

Red flags:

• Forwarding to unknown numbers
• Forwarding to international numbers

 

12a. Check SMS (messaging) is NOT forwarded, if forwarded your 2FA for standard messaging will allow the scammer to read your incoming text messages.

Check App Permissions for SMS 

See exactly which apps have the right to read your text messages:

 

    Go to Settings > Apps.

    Tap the three dots in the top right corner and select Permission manager.

    Tap SMS.

 

    Look through the list under "Allowed." If there is any app listed there that isn't your default messaging app (like Google Messages or Samsung Messages) or a trusted system app, tap it and change the permission to Don't allow.

 

Check for Universal Network Forwarding (MMI Codes)

Sometimes, text forwarding happens at the carrier level, not on the phone itself. You can audit this instantly by opening your Phone app (the dialer) and typing this code:

 

    Dial *#61# or *#21# and press the call button. (These may vary by carrier)

 

    A screen will pop up showing the status of your Voice, Data, and SMS forwarding. It should say "Not forwarded." If you see a phone number listed there that you don't own, call your cellular carrier immediately to have them reset your conditional call/text forwarding.

 

12b. Check SMS (Messaging) Access

Go to:

Settings → Apps → Special app access → SMS access

Only your messaging app should have access.

 

13. Check Default Phone & SMS (Messaging) Apps

Go to:

Settings → Apps → Default apps

Ensure defaults are:

• Google Messages (or your chosen app)
• Phone by Google/Samsung
• 
  

Phase 5 — Scam Profiles & Browser Issues (4 minutes)

 

14. Remove Spam Calendars

Google Calendar spam is common.

Go to:

Google Calendar → Menu → Settings → Events from Gmail / Add-ons / Accounts

Delete unknown:

• Subscribed calendars
• Crypto calendars
• “Virus alert” calendars

 

15. Check Browser Settings

For Google Chrome (default browser):

Chrome → Menu → Settings → Notifications

Disable unknown sites.

Then:

Chrome → Settings → Privacy → Clear browsing data (History)

Also check:

Chrome → Settings → Site settings → Pop-ups & redirects

Block pop-ups.

NOTE: Google Chrome is not considered secure, we recommend Brave, Mozilla Firefox, or Microsoft Edge and the extension UBlock Origin that can remove pop-ups.

 

16. Remove unknown Browser Extensions that you did not add. (Samsung Internet) this is the default browser on Samsung devices.

Samsung Internet:

Menu → Add-ons → Extensions

Remove anything unfamiliar.

 

Phase 6 — Privacy Permissions (3 minutes)

 

17. Review App Permissions

Go to:

Settings → Privacy → Permission Manager

Check:

• Microphone
• Camera
• Location
• Files & media
• Notifications
• Accessibility
• Screen capture / screen recording

Remove permissions from apps you don’t trust.

 

18. Check Accessibility Services

This is a MAJOR scam vector.

Go to:

Settings → Accessibility → Installed services

Red flags:

• “Enhanced Service”
• “Smart Control”
• “Security Service”
• Any unknown app with Accessibility ON

Turn off and uninstall suspicious apps.

 

19. Check Background Activity

Go to:

Settings → Battery → Battery usage

Look for:

• Unknown apps using heavy background activity
• Apps you don’t recognize

 

Phase 7 — Final Hardening (2 minutes)

 

20. Update Android

Go to:

Settings → System → System update 

(Samsung: Settings>Software update)

Install updates.

 

21. Restart Device

A reboot can terminate lingering sessions or malicious processes.

 

22. Decide Whether You Need a Full Reset

A full reset is recommended if:

• Remote access was granted
• Unknown device admin apps existed
• Unknown VPNs installed
• Google account compromised
• Banking info exposed
• Device behaves strangely afterward

Path:

Settings → System → Reset options → Erase all data (factory reset)

If doing this after a scam:

• Set up as new initially
• Reinstall apps manually
• Avoid restoring unknown backups

 

Highest Danger Signs on Android

Immediate action required if you see:

• Unknown Device Admin apps
• Unknown Accessibility Services enabled
• Remote‑access apps installed
• Unknown VPN installed
• Verification codes arriving unexpectedly
• Google account shows unfamiliar devices
• Call forwarding enabled unexpectedly
• SMS (Messaging) access granted to unknown apps
• Someone asked for Google verification codes
• You typed passwords while someone watched

 

Usually NOT a Sign of Hacking

These are common false alarms:

• Chrome pop-up saying “Android infected”
• Calendar spam
• Battery drain
• Storage full
• Random ads on websites
• Overheating during updates
• One-time app crash

 

Useful URLs:

 

KeePassDX Passkey Vault (Password manager): https://play.google.com/store/apps/details?id=com.kunzisoft.keepass.free&hl=en_US

 

UBlock Origin (AdBlocker) extension for browsers: https://ublockorigin.com/

 

Free Online Browser AI apps:

https://gemini.google.com/app

https://copilot.microsoft.com/