Act quickly. Contact the bank, card provider, payment service or cryptocurrency exchange involved and ask about available fraud procedures. Preserve receipts, transaction references, wallet addresses, emails, messages, phone numbers, websites and screenshots. Change compromised account passwords through the official service and enable multi-factor authentication. Report the incident to the appropriate law-enforcement or fraud-reporting authority in your jurisdiction.