Guide

If It Already Happened

First steps after someone clicked, shared, or paid.

One sheet of Letter paper, with a space at the bottom for your organization. The full wording is below, so you can copy any part of it.

It is not your fault. Act quickly, but do not panic.

If you clicked a link

Close the page. Enter nothing else. If you typed a password, change it from a device you trust and turn on two-step verification.

Change the password now, in the official app. Then tell the company what happened.

Call your bank on a trusted number now. Say you have been scammed.

Contact your country's identity-fraud service and follow their steps.

Contact emergency or safeguarding services. Ask us and we will help you find the right local number.

Stop talking to the scammer. Never pay anyone who promises to get your money back.

Organization, local service, contact: [PARTNER NAME / LOCAL SERVICE / CONTACT]

This is general safety information. Replace the local placeholders and check the advice against the partner's country before distributing it.

Use it: Add your local support details before printing.
Replace every bracketed placeholder with your organization's own details.
Check the recovery and reporting advice against your own country and services. Do not hand out advice written for somewhere else.
Open every web address yourself before printing it.
Current warnings live at watchout.report. Check the date on anything time-sensitive.

Use your browser's print dialog to save this as a PDF.

Cybersecurity Reach Foundation · cybersecurityreach.org · Current warnings: watchout.report

General safety information. CSRF is not a crisis, legal, banking, safeguarding, or law-enforcement service.