Secure the email first
Change the email password from the provider’s official site, sign out other sessions, and turn on multi-factor authentication. Check recovery email and phone settings.
Free public guidance · United States
If something feels wrong, start with one safe action. Choose what is closest, then open a deeper free plan with checklists, scripts, and follow-up steps—no account required.
Start here
Pick the situation that feels closest. We will give you a first step here, then a full plan you can follow, print, or save on this device.
From first step to full plan
Every situation has a free deeper guide with immediate actions, a call script, evidence reminders, and what to do over the next few days.
No login required
Start with the quick questions below. If you need more help, open the matching response plan for a step-by-step checklist and a script you can take to the real institution.
If money was involved
Call your bank or provider only through a trusted official channel. If you create an account and log in, GuardianLight can show reviewed, currently verified contact methods from its directory. We never guess or invent a phone number; ask the institution what protective options are available, and remember that results are never guaranteed.
If an account was taken over
Use a device you trust. Do not use a link or phone number from the suspicious message, and do not share a recovery code with anyone who contacts you.
Change the email password from the provider’s official site, sign out other sessions, and turn on multi-factor authentication. Check recovery email and phone settings.
Use its official recovery or support path for social media, banking, shopping, email, or another account. Tell the provider the account may be compromised.
Save unusual messages, login alerts, profile changes, and transaction records. Warn contacts through another channel and check linked payment methods for unfamiliar activity.
Protect the record
Save what you already have. Do not reply, click more links, confront the sender, or delete the original before saving a copy.
Keep screenshots, emails, numbers, usernames, receipts, transaction IDs, dates, and the exact words used.
From a safe device, change reused passwords and turn on multi-factor authentication. Never share a code or recovery phrase.
Use the official services on the Training page and your financial institution’s trusted channel. GuardianLight does not submit reports automatically.
Optional account tools
The public guidance above stays free and available without an account. Sign in or create an account only when you want private tools and saved work.