What steps should I take after fraud in Belgium?

Immediate summary

• The right steps depend on what happened: clicking, sharing a code, handing over a card, transferring money, allowing remote access or sending a document. Limit harm first, then document the facts.

What this action may have triggered

• One message may affect an account, card, identity, device and money at the same time.
• Priority changes depending on whether information was viewed, entered, approved or used for payment.

Do this now

• Choose the path matching the action taken and contact the relevant official service.
• Secure accounts, cards and devices before writing a long account.
• Then build a timeline with times, amounts, channels and measures taken.

Emergency timeline

• Now, 0-5 min: stop the interaction, close the suspicious page and do not use any link, number or QR code from the message.
• Within 30 min: contact the bank, Card Stop or the relevant service through an official channel if money, a card, a code or an account is involved.
• Today: write a short timeline with what you saw, what you did, which amounts or accounts are involved and which measures were already taken.
• This week: monitor accounts, sessions, passwords and follow-up messages; stay alert for fake helpdesk or bank calls.

Do not do this

• Do not pay a fake recovery service.
• Do not delete original evidence after blocking the contact.
• Do not share more secrets to prove your identity.

What should be checked

• Ask which actions are pending or already completed.
• Request case references and the documents required for each process.

Useful evidence to keep

• Keep messages, original emails, numbers, neutralised URLs, transactions and relevant documents.
• Mask unrelated information in copies.

Prepare the next steps without false promises

• A clear file helps communication but does not guarantee reimbursement or investigation.
• Update the timeline after every call, block, dispute or report.

Start with what can still be stopped

• After fraud, the first question is not who is to blame, but which risk is still active: pending payment, usable card, open session, known password, remote device access or reusable document.
• Handle these points by urgency. Money and account access come before paperwork. A full file is useful, but it must not delay an immediate block.

Build a factual timeline

• Record the first contact, channels used, links, numbers, amounts, confirmations, phone calls and measures already taken. Keep facts separate from assumptions.
• This timeline helps with the bank, police, service provider and insurer. It also allows later corrections if a detail was misunderstood under stress.

Watch for the second scam

• Victims are often contacted again by fake helpers, fake banks, fake police or recovery services. They use the first fraud as proof that they can help.
• Do not pay extra fees to recover money and do not give new codes. Call official numbers you found outside the suspicious conversation.

Limits of this guidance

• This page helps organise the first steps after fraud. It does not replace the bank, police, insurer or relevant service and does not prove that all damage will be recognised.
• Start from what can still be protected: money, card, account, device, identity or document. For each item, use an official channel found outside the suspicious message.

What to do now

• If you have not acted, do not click further and open the named service's official channel yourself.
• If you clicked, close the page, enter nothing else and note what information was shown or requested.
• If you shared a code, card, password or payment, contact your bank or the relevant official service immediately.
• Keep the message, time, link used and any useful screenshots. Share them only with an official reporting channel or a trusted helper.

Limits of this page

• This page does not prove that a message is safe and does not replace your bank, the police, Safeonweb, a platform or a public service.
• A scam may be new, very well written or described with too little context. Use the result as decision support, not as absolute certainty.
• Before taking a final action, checking through the official channel matters more than the appearance of the received message.

Check through an official channel

• Type the service address yourself or open the official app. Do not use a phone number, link or QR code from the suspicious message to verify the situation.
• When money, card details, a code or account access are involved, the safety action comes first. The analysis can then help organise the evidence.

How to read the result

• A low number of signals does not mean that everything is safe. It only means that this page or analysis did not find decisive evidence with the information available.
• Focus on the requested action: paying, sharing a code, installing an app, approving a bank action or leaving an official platform. That action matters more than a logo, sender name or polished wording.
• If the situation feels urgent, step away from the received message first. Then check calmly through a channel you already trusted before the message arrived.

Belgian reading of this situation

• For this what steps should i take after fraud situation, focus on the relevant Belgian next step: open the official channel yourself, contact the bank, use Safeonweb or preserve evidence.
• The right decision for this what steps should i take after fraud situation depends on what has already happened. Reading a message is not the same as clicking, paying, sharing a code or granting remote access.

Frequently asked questions

Useful official sources

• Centre pour la Cybersécurité Belgique - Collaboration avec la Police Judiciaire Fédérale contre le phishing - link checked on 2026-09-17
• SPF Économie - Victime d'une arnaque ? Que faire ? - link checked on 2026-09-17
• Febelfin - Phishing - link checked on 2026-09-17
• Febelfin - Fraude au faux support technique bancaire - link checked on 2026-09-17
• Card Stop - Blocage officiel des cartes de paiement - link checked on 2026-09-17