What to do immediately (security)
- Stop any further payment or contact that asks you for more funds.
- Change passwords and enable 2FA (app, not SMS) on email and exchange accounts.
- If you can, move any remaining funds to a new wallet created from a clean device.
Evidence to collect
- TXID/transaction hash, addresses, amounts, network, and timestamps.
- Chats/emails, URLs, usernames, numbers, receipts, and platform screenshots.
- Any login logs and security notifications, if available.
Tracing and possible choke points
Recovery is more likely when funds reach exchanges or services with KYC. An organized file (timeline + TXID + evidence) helps with reports and investigations.
What to avoid
- Pay 'unlock fees,' taxes, or deposits requested by the scammer.
- Install remote-control software at the request of strangers.
- Share seed phrases, OTPs, or 2FA codes.