Think you've been scammed? Take these steps first.

It happens to careful people every day, and it isn't your fault. Take it one step at a time. The first two matter most if money or card details were involved.

  1. Right now

    1. Call your bank

    Use the number on the back of your card or on the bank's official website, never a number from the message. Tell them what happened and ask them to stop or recall the payment and to protect your cards and accounts.

  2. Today

    2. Report it to the Canadian Anti-Fraud Centre

    Call 1-888-495-8501 or report it online. You can also file a report with your local police if your bank asks for one.

    1-888-495-8501

  3. From now on

    3. Stop replying, and keep the evidence

    Don't answer the scammer again, and don't pay anyone who offers to get your money back for a fee, which is a common second scam. Save messages, receipts and dates.

Then, a post-scam cyber cleanup

Once your bank and the CAFC know, the next worry is whether the scammer still has a way in. My post-scam cyber cleanup deals with that. It's a flat C$179, and takes 90 minutes to 2 hours. I offer a slot within 48 hours, and remote works for most cases.

Book a cleanup, C$179

Tell me what happened, and roughly when. I'll reply within one business day. If it's urgent, call or email and say so.

What I do

  • Remove remote access apps and unknown profiles.
  • Change passwords and sign out other sessions on affected accounts, starting with email.
  • Turn on two-step verification and check recovery settings.
  • Check for forwarding rules, new devices and unfamiliar sign-ins.

What you get

I send a written notification list: your bank, the Canadian Anti-Fraud Centre, a police report if needed, and Equifax and TransUnion for a fraud alert. I'll also offer you the scam check plan.

Before I start

You fill in a short intake: what happened, when, what was shared, and which devices and accounts are involved.

What I don't do

I don't recover money, contact scammers or investigate who did it. If a bank or police investigation is underway, I secure devices only. No honest provider can promise to get money back.

You type your own passwords and I never store them. The full details and the terms are on their own pages.