Sorting out what you gave away
Your next steps depend on what the fake page collected. If you typed a card number, the card can usually be canceled and the charges disputed with the issuer. If you entered a bank or email login, or a one-time code sent to your phone, treat the account as exposed and change the password from a device you trust. If you sent money yourself after being told it would fix a problem, that payment is usually treated differently from one a stranger made after breaking into your account. Note which link you tapped and what you entered while it is fresh, because the bank will ask.
Locking things down and reporting
Call your bank or card issuer using the number on your card or statement, not a number from the text. Ask them to block the card or account, review recent activity, and treat any transfer you did not make as unauthorized; reporting promptly can affect how much of that loss falls on you. Turn on multi-factor authentication, sign out other sessions, and check whether your email forwarding rules or recovery phone number were changed. Forward the message to 7726, the carriers' spam reporting number, and report it to the FTC and the FBI's Internet Crime Complaint Center. Keep screenshots of the text and the fake page before deleting anything.
Where a lawyer fits
Most smishing losses are settled, one way or the other, through the bank's dispute process rather than a lawsuit. A lawyer becomes useful when the bank denies a claim you believe involved unauthorized access, when the amount is significant, or when your identity is being used to open new accounts. Business accounts often carry weaker consumer protections, so a company that lost funds through a texted link should look at its bank agreement early. We review the timeline, what the bank has said in writing, and whether a written dispute or a regulatory complaint makes sense. We cannot promise recovery, but we can tell you where you stand.
