After a suspected scam: contain, secure, document

Address the exposure that matters first

If funds were sent, immediately contact the relevant bank or payment provider using verified details. If passwords were entered on a false site, secure the legitimate accounts.

These actions have different priorities and should not be delayed while trying to identify the person behind a message.

Make a factual timeline

Write down what arrived, what was opened, which transactions occurred and when organisations were contacted. Preserve originals where possible.

Avoid altering a suspicious attachment in order to investigate it. Use a controlled environment and appropriate professional assistance when required.

Choose official support channels

Report the facts through the appropriate authorities and relevant provider support mechanisms. In France, public cyber-assistance services can help route a case.

Recovery offers that demand another up-front payment deserve particular caution. Vigifraude does not act as an emergency response line or promise reimbursement.

Explore relevant guidance