One Step Ahead: You’ve Been Scammed: Now What?

Another tip in a series provided by the Offices of Information Security, Information Systems & Computing and Audit, Compliance & Privacy.

Uh-oh, you just got scammed: You clicked on a phishing link and submitted your personal information by accident. You ordered something that isn’t at all what was described. Somebody just got you to disclose your password. What do you do next to protect yourself and repair the damage?

First, don’t panic and don’t feel ashamed. Scammers specialize in compromising people: it’s their job. Now move ahead to contain the damage and protect yourself and your information.

• Immediately scan your computer or devices for viruses or malware. 
• After scanning, change all your passwords and ensure you are not reusing the same password across multiple accounts. The University makes LastPass, a password manager that makes using complex and unique passwords easier, available free of charge to eligible active Penn affiliates. 
• Use two-factor verification wherever possible (such as on your PennKey). 
• For social media accounts, restrict access to friends and family only and always be mindful of what information you are sharing and who you are sharing it with. 
• If the scam involves finances: 
• Check your credit reports to ensure that new…