After You Entered a Password on a Fake Page
Work from what you actually shared, then use the service’s official recovery process without returning to the suspicious page for reassurance.
Organize what happened, what is known and what still needs doing, without delaying a bank call or turning private evidence into a public post.

After an online scam, the same story may need to be told to a payment provider, a platform and a reporting service. Each conversation can leave another reference number and another unfinished step. I would keep one short working record so the next call does not depend entirely on memory under stress.
The record comes after, or alongside, urgent protective action. If money or account access is at risk, contact the actual provider promptly. Do not wait to collect every screenshot, reconstruct every minute or find the perfect template. A useful note can begin with three lines and grow only where a later conversation needs more detail.
The example here is a hypothetical purchase involving two payments and a subsequent bank call. Its amounts and sequence are invented to demonstrate organization. The method is intended for continuity across conversations, not to establish guilt, calculate a legal entitlement or promise that a complaint will lead to recovery.
A compact first note can identify the service or transaction, the approximate date, the contact route, what was requested, what you did and what is currently at risk. Use ordinary language. If you cannot supply one of those facts, write unknown rather than leaving a blank that someone may later fill with an assumption.
For the imaginary purchase, the note might say that a marketplace conversation led to two payments for an item that was not delivered. One payment was made on Monday and another on Tuesday. The seller then stopped responding. That establishes a starting sequence without claiming to know the seller's real identity or where the money ultimately went.
The purpose is to reduce the effort of the next conversation. A call handler can ask for a missing transaction reference after hearing the short account. A detailed life history, an accusation against a similarly named person or a long explanation of why the offer seemed convincing can wait unless it is relevant to the provider's process.
Suppose the example contains a payment of 80 dollars followed by a requested delivery fee of 15 dollars. Record two entries, each with its date, currency, method, displayed recipient and available reference. The sum is 95 dollars, but the total should not replace the individual transactions that the provider needs to locate.
Add any actual status separately: pending, completed, disputed or refunded, using the provider's own record where available. Do not infer that a payment was reversed because a message says it will be. Likewise, distinguish a requested amount from an amount actually sent. A screenshot from the other party is not a substitute for your own provider's transaction record.
If fees or different currencies are involved, leave the original amounts visible. A rough conversion may be useful for personal context, but it should not overwrite the currency and amount processed. This is an organizational choice, not a calculation of recoverable loss. The relevant provider or reporting service may ask for its own fields and definitions.
Use short labels such as observed, reported by the sender, and not yet checked. A displayed recipient name is an observed label in a record; it is not necessarily the legal identity of the person directing the conversation. Keeping that distinction avoids turning a useful note into an unsupported allegation.
Time deserves similar care. If you remember that a call happened after dinner but cannot establish the exact minute, say approximately. Retain the time zone where a service supplies one. You do not need to manufacture precision to sound credible. If a later record resolves the uncertainty, add the information with its source.
I would keep the original short account and append corrections rather than silently rewriting the story each time. For example, note that the second payment was found to be Tuesday rather than Monday. The aim is a transparent working history that can be explained, not a flawless narrative assembled after every detail is known.
After a provider conversation, record whom you contacted, through which independently verified route, the date, the case reference and the next step they gave you. If you were asked to supply a document or check a particular account setting, identify who will do that and when the provider said it was needed. Do not invent a deadline when none was supplied.
For the example, the bank call can have a separate entry from the marketplace report. Each organization may have a different reference and a different role. Filing a platform complaint does not mean the bank received a request, and calling the bank does not automatically report the seller to every relevant service.
The FTC's after-scam guidance prioritizes prompt contact with the service used to move money and distinguishes payment, personal-information and device issues. Use that separation in the note. A payment dispute can be underway while an exposed password still needs attention. Marking both tasks prevents the existence of a case number from feeling like the whole response is complete.
Keep the main record private. Before sending it, identify what the legitimate recipient needs and use its official submission method. An institution may need transaction details that should never appear in a public social-media warning. A relative helping with organization may need only the task list, not account identifiers or original attachments.
The FBI's IC3 describes the types of information its US complaint process requests, including transaction details, identifiers and what happened; it also accepts complaints from people outside the United States. That availability does not replace the relevant local reporting route or urgent provider contact. Follow the actual form and distinguish your own details from those of a person you are helping.
Do not publish private records to encourage strangers to investigate. Do not continue a conversation with the suspected scammer to collect extra proof. If recording a call raises a question, a written note is a simpler starting point than assuming covert recording is lawful everywhere. This guide does not give a universal rule on recording or evidence retention.
When returning to the note the next day, start with the unfinished items. Perhaps the provider requested a transaction reference, the platform needs the listing URL, or a recovery setting still needs checking. Choose the relevant next step rather than rereading the entire conversation and becoming stuck at the beginning again.
Mark completed actions without converting them into promised outcomes. Complaint submitted is different from investigation confirmed, and refund requested is different from money returned. A confirmation number is valuable for follow-up, but it does not guarantee either investigation or recovery. Use the organization's own status information and ask for clarification when it is unclear.
A household helper can make this easier by taking a defined role with permission: finding an official form, reading a response or helping update the task list. The account owner should remain accurately identified. The record should reduce the number of times a distressed person has to retell the story, while keeping enough detail for an honest and useful conversation.
No. Do not delay urgent contact with the actual payment or account provider to assemble evidence. Begin with the facts you know and gather additional details while waiting or afterward, where safe. A short initial note is useful even when several fields remain uncertain.
Record what you can accurately remember, identify the uncertainty and preserve existing messages or provider records where available. Do not return to a suspicious page or continue engaging with a scammer to obtain a more complete set. The relevant organization can explain what information it needs.
Keep each transaction separately identified and add a total only as a summary where appropriate. Dates, currencies, recipients and references help providers locate the actual records. Requested money, fees and money actually sent should not be mixed into an unexplained figure.
No. IC3 is a US federal reporting route that also accepts complaints from outside the US. A filing is not a substitute for prompt provider contact or the relevant local process, and it does not guarantee investigation or recovery. Follow the instructions of the organizations involved.
A trusted person can assist with permission, using only the information needed for that role. Keep the record private and distinguish the helper from the account owner when communicating with providers. Passwords and live verification codes do not belong in a shared incident note.
Keep the record small enough to use: the essential facts, individual transactions, uncertainties, completed actions and the next step. Add detail when a legitimate process needs it, while protecting the private information inside the note. Its value is continuity. You should be able to resume the response tomorrow without recreating the whole story or mistaking an unfinished request for a completed outcome.
Have a correction? Contact the editors.