Discovering that you've fallen victim to an online scam can be stressful and even embarrassing. But, you aren’t alone! In fact, the FTC received over 51 million reports of fraud in 2022. If you’ve been scammed, assess the extent of the damage, then take steps to protect yourself going forward.

This article explains next steps if you think you’ve been scammed and how to report fraud to ID.me.

I received a password reset email that I didn’t request

If you received a password reset email that you didn’t request, it may be due to fraudsters using stolen login details from other websites to try and access your account. This doesn’t mean that your account has been hacked. Here’s what to do next:

• Update your password. As a precaution, change your password to a strong, unique password that you don’t use anywhere else. Learn more about strong passwords.
• Enable or add a second multi‑factor authentication (MFA) method: MFA adds a powerful layer of protection to your account. For the strongest security, use a passkey or NFC-enabled security key.

Stop all communication

If you’ve been communicating with a scammer, immediately stop all communication:

• If they contacted you by email, block their email address.
• If they reached out in a text message, block the number.
• If it's through a social media platform, use the platform's blocking or reporting features.

Cutting off communication helps prevent further manipulation or attempts to get more information from you.

Secure your ID.me account

To help keep your account secure, we recommend resetting your password and multi-factor authentication (MFA) method on your ID.me account. This makes it more difficult for scammers to access your accounts, even if they get your login credentials.

Report fraud to ID.me

If you suspect that someone tried to create an ID.me account or verify using your information, or if you believe someone else signed in to your account, report it to ID.me immediately. Our specialized team will conduct an investigation. After we complete our investigation, we will email you with next steps. To report suspected fraud:

1. Go to the Report Suspicious Activity form.

2. Enter the email address where we should contact you, then enter the email you use for your ID.me account.

   Tip: If you have more than one account, list all of the email addresses associated with your accounts.
3. In the last field, include as much information as you can about the suspected fraud you're reporting. In addition, you can attach any screenshots of any communication you have with the potential scammer. Do not submit any government identification documents or anything else containing sensitive personal information.
4. Select Submit.

Learn more about online scams

Even if you fall victim to a scam, use this opportunity to educate yourself about online scams, social engineering techniques, and general online security practices. Familiarize yourself with common red flags and tactics scammers use to deceive their victims. The more informed you are, the better equipped you'll be to protect yourself in the future. Visit these sites for more information:

• Cybercrime Support Network: Online Reporting Tool
• National Cybersecurity Alliance: Stay Safe Online
• Identity Theft Resource Center

How to protect other accounts you own

Make sure to set strong, unique passwords and enable multi-factor authentication (MFA) for any account you own that contains sensitive information or financial details:

• Set strong passwords: Regularly update your passwords, using strong, unique passwords that include a combination of letters, numbers, and symbols. Avoid reusing the same password across various accounts.
• Enable multi-factor authentication (MFA): Enable multi-factor authentication (MFA) on all of your accounts that offer this additional security measure. MFA provides an extra layer of protection by requiring a second form of verification, such as a unique code sent to your phone, in addition to your password.