If you have given out your credit card or check card or ATM card information:
- Report the theft of this information to the card issuer as quickly as possible. Many companies have toll-free numbers and 24-hour service to deal with such emergencies.
- Cancel your account and open a new one.
- Review your billing statements carefully after the loss. If they show any unauthorized charges, it's best to send a letter to the card issuer describing each questionable charge.
- Credit Card Loss or Fraudulent Charges (FCBA) - Your maximum liability under federal law for unauthorized use of your credit card is $50. If the loss involves your credit card number, but not the card itself, you have no liability for unauthorized use.
- ATM or Debit Card Loss or Fraudulent Transfers (EFTA) - Your liability under federal law for unauthorized use of your ATM or debit card depends on how quickly you report the loss. You risk unlimited loss if you fail to report an unauthorized transfer within 60 days after your bank statement containing unauthorized use is mailed to you.
If you have given out your bank account information:
- Report the theft of this information to the bank as quickly as possible at 301-987-BANK or 1-800-987-BANK (out of area).
- Close your account and open a new one.
If you have given out your eBay account:
If someone else is using your account to bid, leave feedback, or list auctions without your permission:
- Contact eBay - eBay has set up a link for hijacked accounts. If someone is currently listing auctions on your account, you may also use the hotline options, including Member Problems, Law Enforcement, and Please Investigate a Current Listing for Possible Fraudulent Activity. Please only use this option if there are current fraudulent auctions.
- Attempt to sign in and change your password. If you are able to sign in, change your password and hint immediately, and begin to undo any damage done by the hackers. Remove any bogus auctions, contact bidders and sellers, etc. If you were unable to regain control of your own account, eBay will likely suspend it for a while until they complete their investigation.
Some phishing attacks use viruses and/or Trojans to install programs called "key loggers" on your computer. These programs capture and send out any information that you type to the phisher, including credit card numbers, usernames and passwords, Social Security Numbers, etc. In this case, you should:
- Install and/or update anti-virus and personal firewall software.
- Update all virus definitions and run a full scan.
- Confirm every connection your firewall allows.
- If your system appears to have been compromised, fix it, and then change your password again, since you may well have transmitted the new one to the hacker.
- Check your other accounts! The hackers may have helped themselves to many different accounts: Check your eBay account, PayPal, your email ISP, online bank accounts, online trading accounts, Amazon.com and other e-commerce accounts, and everything else for which you use online passwords.