The first 24 hours after a family member is scammed

When my Mum was scammed by someone using my voice, the scam itself took about four minutes. What came after took weeks, and almost none of it was covered by the articles we found at the time. Plenty of advice exists on how to avoid a scam. Very little exists on what to do at 7pm on a Saturday when it has already happened.

So this is that article. It’s the one I wish I’d been able to hand my family that evening. I’ve written it for the UK, because that’s where we went through it, and I’ve kept it in the order you should actually do things.

Hour zero: call the bank before anything else

Not the police, not the family group chat. The bank, immediately.

Money moved by bank transfer is not gone the instant it leaves. Banks can sometimes freeze or recall funds if they move quickly, and “quickly” is measured in minutes and hours, not days. This call outranks everything else you are feeling and everything else on this list.

Two ways to do it:

Call 159. It’s the UK’s safe hotline that routes you to your own bank’s fraud team, and it exists precisely so you never have to trust a number given to you by a caller. It works for most major UK banks.
Or call the fraud number printed on the back of the bank card. Never a number from a text, an email, or the person who just called.

Say the words “I have been the victim of a scam and I need to report a fraudulent payment”. You’ll be taken seriously, and you’ll be routed past the general queue. Have the payment details ready: amount, time, and the account details it went to, if they’re still visible in the banking app.

While you’re on that call, ask the bank to check for anything else: new payees, pending payments, or changes to the account. Scammers who succeed once sometimes go back for more.

Preserve everything

It’s tempting to delete the conversation in disgust. Don’t. Before the day is out, screenshot everything: the “new number” message, the call log, the payment confirmation, the account details the money went to. If it happened on WhatsApp, screenshot before you report the number: ticking “block and delete” while reporting removes the whole conversation.

You’ll need this evidence twice: once for the bank’s fraud investigation and once for the police report. Five minutes of screenshots now saves days of “we have no record of that” later.

Report it properly

Report Fraud (reportfraud.police.uk, or 0300 123 2040) is the UK’s reporting centre for fraud in England, Wales and Northern Ireland. If you knew it as Action Fraud, this is the same service under its new name, relaunched in January 2026. In Scotland, report to Police Scotland on 101. You’ll get a crime reference number; the bank may ask for it.
Forward scam texts to 7726, the free spam-reporting service, and report and block the number in WhatsApp if that’s where it started.

Reporting can feel pointless in the moment, because no squad car is coming. Do it anyway. These reports are how patterns get spotted, and the banker who helped my Mum told us plainly that they were seeing more and more of exactly this scam. Every report makes that picture sharper.

The rules are more on your side than you think

This is the part most families don’t know, and it changes the whole mood of the first 24 hours.

Since October 2024, UK banks are required to reimburse victims of authorised push payment fraud, the official name for being tricked into sending money yourself, in most cases. That word “authorised” matters: it covers exactly the situation where your Mum pressed the button herself because she believed she was helping her son. Claims can be made up to 13 months after the payment, and banks are expected to reimburse within five working days.

It is not unconditional. Banks can decline if they believe the customer ignored clear warnings, and reimbursement is capped at £85,000. But the days of “you authorised it, so it’s your loss” are largely over, and you should walk into the conversation knowing that.

My Mum got her money back. When it happened to us, we didn’t know whether that was even possible, and the not-knowing was its own kind of weight. Knowing the rules exist won’t undo the day, but it takes the “we’ve lost it all and there’s nothing anyone can do” edge off it, and that edge is what does the most damage at 7pm on day one.

The conversation that matters more than the money

Here’s the thing nobody warns you about: the money is often recoverable. The confidence is harder.

Whoever was scammed is almost certainly feeling embarrassed, and possibly frightened in a new way: if I fell for that, what else might I fall for? Left alone, that feeling curdles into a capable person quietly doubting themselves, and in some families it becomes the reason someone stops answering the phone altogether.

So in the first 24 hours, say the true thing, and say it early: they were not foolish. The scam was engineered by professionals to make a good person do exactly what they did. It used their love for their family as the getaway car. The shame belongs entirely to the scammer.

I’ve written before about what this looked like in our family. The anger arrived on schedule. The embarrassment my Mum felt, which she had no business feeling, is the part I wasn’t prepared for, and it’s the part your reassurance actually fixes.

Watch for the second wave

A cruel postscript: people who have just been scammed get targeted again, sometimes within days, by “recovery” scammers claiming to be the bank, the police, or a firm that can get the money back for a fee.

Agree as a family, on day one, that any follow-up call about the scam gets the same treatment as the scam itself: hang up, and call back on 159 or the number on the card. Your bank will never mind you double-checking. The scammers are counting on you being too tired to.

Day two: close the door it came through

Once the calls are made and the dust is settling, fix the thing the scam exploited. The scam that got my family needed only two ingredients: a “new number” story and no quick way to check it was really me.

Agree your family rules now, while the memory is fresh:

Any urgent request for money gets verified before anything moves, every time, no matter how good the voice sounds.
“New number” plus “needs money” equals a full stop, always.

You can run those rules manually with a call-back, or with a family safe phrase. We built SafePhrase to make that check take five seconds, because we learned the hard way that the moment of doubt is exactly when a manual system is hardest to use.

The first 24 hours, on one screen

Call the bank on 159 (or the number on the card). Report the payment, ask them to check the account.
Screenshot everything before deleting or reporting anything.
Report to Report Fraud (101 in Scotland). Forward texts to 7726.
Know your rights: authorised push payment fraud is reimbursable in most cases, and you have 13 months to claim.
Tell the person who was scammed, clearly, that they were not foolish.
Expect follow-up “recovery” scams and agree to verify every call about the incident.
Set up your family’s verification rule, so there is no next time.

I hope you never need this list. But if you’re reading it with a knot in your stomach because it’s already happened, know this: the odds of getting the money back are better than they’ve ever been, and the person it happened to needs to hear one thing more than any of it. It wasn’t their fault. Say that first. Then pick up the phone and dial 159.