Incident Desk
What to do if you have been scammed
Keep a clear record of what happened, track the steps you take, and have the details ready when you report it. The Incident Desk is a free space to do exactly that.
Free to create. You can download or delete everything you record at any time.
Why a record helps if you have been scammed
The details fade fast. A few days later, the exact date and wording are the first things anyone will ask you for.
When something goes wrong, the small facts slip away quickly. The exact date, the sender's number, the amount, the link you clicked. Those are the first things a bank or a platform will ask you to confirm.
A clear record gives you one place to write what happened, in order. You can then repeat it accurately when you report it, instead of trying to remember under pressure.
Reporting goes to different places depending on the incident. Your bank or card provider for money, the platform where an account was taken over, and your national privacy regulator or cyber security agency for a breach. In Australia that includes the Office of the Australian Information Commissioner, the Australian Cyber Security Centre, Scamwatch and IDCARE.
A written record also helps you track what you have already done, so you do not repeat a step or miss one. You can add replies and reference numbers as they come in.
Set up a record for your kind of incident
The desk covers seven incident kinds. Pick the one that fits, and note the details that matter for it.
Data breach
Record the company or service, the date you were told, and what was exposed, such as your email, password or address. Note each step you take, like changing a reused password and turning on multi-factor sign-in.
Scam message
Save the exact wording, the sender number or address, and the date it arrived. Note whether you replied, clicked, or sent money, and any report you lodged with your bank or a scam reporting service.
Phishing link
Write down the link you were sent and where it came from. Note if you opened it or entered any details, and the passwords you changed afterwards.
QR code
Record where the code was, what it claimed to be, and the page it opened. Note any details you entered and the accounts you then secured.
Hacked account
Record which account, when you noticed, and what changed, such as a new login or a reset password. Track the recovery steps you took and any messages sent in your name.
What to do if you have been scammed: keep one record
Three parts to one record: what happened, what you did about it, and your notes over time.
Record what happened
Write down the date, what you saw, any sender number or address, the links, and any amount involved. The more exact the detail, the easier it is to report later.
Track the steps you took
Note each action as you go, such as changing a reused password, turning on multi-factor sign-in, calling your bank, or reporting a hacked account to the platform.
Keep your notes in one place
Add updates as replies arrive: reference numbers, outcomes, and anything still open. Everything for one incident stays together in a single record.
The free account and your records
Honest answers about the account, your notes, and how the site is funded.
Frequently Asked Questions
- Do I need an account to use the Incident Desk?
- Yes. The Incident Desk is part of a free account, which is what saves your records so you can come back and add to them. You can create one from the contact page while sign-up links are being added.
- Is it really free?
- Yes. Everything on Data Exposed is free to use, and we do not sell a paid plan of our own. Some outbound links on other pages are affiliate links, and those are always disclosed where they appear.
- Can I get my records out, or remove them?
- Yes. You can download everything we hold about you, or delete your account and its data, at any time. Your records belong to you.
- Does the Incident Desk report the scam for me?
- No. It keeps your record ready so reporting is easier, but you still report to your bank, the platform where it happened, or an authority. Our recovery plan walks through who to contact and in what order.
- What if I am not sure which kind my incident is?
- Pick the closest one and use the notes to explain the rest. You can record what happened first and sort out the label later.
Start a free record of what happened
Write it down while the details are fresh, then report it with everything in one place.
Free to create. Download or delete everything you record at any time.