Maybe you were expecting a delivery, or the number looked familiar. You answered, heard a recording, and started wondering what you had just set in motion. There is no need to reconstruct every word before deciding what to do.
Start with a simpler question: did you only speak, or did you give the caller something they could use? The FTC’s advice for a suspicious robocall is to hang up. More involved recovery is for situations where money, sensitive information, or access changed hands.
What answering does—and does not—tell you
An answered call tells the caller someone or something picked up. It does not tell you whether they stored that response, sold a list, or will call again. A later increase in spam cannot establish that this particular call caused it.
A silent line is not a diagnosis of a hacked phone. You do not need to stay connected to work out why there is no one speaking. Hang up and decide whether you have an independent reason to contact anyone.
Avoid treating a brief ordinary conversation as proof of device compromise. Keep your phone and apps updated as routine protection: software updates fix security weaknesses whether or not you have recently received spam.
Sources: FTC
If you said “yes” or worry about your voice
Saying hello or yes is not, by itself, evidence that someone accessed an account or that you authorized a purchase. Focus on any account details you gave, payments you approved, or instructions you followed. Report an actual unfamiliar charge to the provider instead of assuming one must now exist.
Voice impersonation is a real concern. The FTC warns that scammers can use a short audio clip to imitate someone in a fake family emergency. That does not show that your particular call was recorded or that a clone was made.
A useful family habit is to verify urgent requests through a number you already know. If someone sounds like your relative but asks for money, end the call and reach that person or another trusted family member independently.
Sources: FTC
End the conversation before it asks more of you
You do not owe an unexpected caller an explanation. A local area code, a familiar company name, or a confident tone does not establish identity. Caller ID information can be faked.
If a recording offers a button to remove your number, skip it and hang up. The FTC cautions that pressing robocall menu options can bring more calls. You can also end a live conversation as soon as it becomes uncomfortable.
- Do not read out a login or password-reset code to an unexpected caller.
- Do not install an app or give remote access because the caller says your device has a problem.
- Do not move money to an account the caller says will keep it safe.
Match your next step to what you shared
Only a brief conversation
End the call and use your usual account alerts. Picking up alone does not call for replacing your phone, changing your number, or resetting every password.
A password or verification code
Open the affected service directly. Change the exposed password, check recent activity, and use its account-recovery process if you are locked out. Replace a reused password on other accounts too.
Payment details or money
Contact the bank, card issuer, or payment service promptly through a trusted channel. Explain what happened, ask how to secure the account, and request reversal of any fraudulent payment. Recovery is not guaranteed.
Your Social Security number
Use IdentityTheft.gov for guidance tailored to the information exposed, including whether a credit freeze or other identity-protection step fits your situation.
Treat installed software as a separate problem
If the caller persuaded you to install software or control your screen, end any remote-access session. If you cannot end it, disconnect the device from the network. Then seek help through the device maker’s official support or a technician you already trust. The caller’s support number is not an independent check.
Follow the FTC’s device-recovery guidance: update security software, scan where supported, remove identified threats, and secure affected accounts. Use another trusted device to change passwords if you are unsure whether the first device is safe.
Sources: FTC
Make the next call easier to handle
Try your carrier’s spam filters and your phone’s screening options. If you silence unknown callers, check missed calls and voicemail when you are expecting a doctor, school, or delivery. Real callers do not always leave a message.
For an unwanted call without a loss, use DoNotCall.gov. For a scam, lost money, or useful details about the caller, use ReportFraud.ftc.gov. Include the displayed number and callback number, even if either may have been spoofed.
Sources: FTC
Sources & further reading
- FTCRobocalls
- FTCWhat To Do if You Were Scammed
- FTCHow To Protect Your Phone From Hackers
- FTCScammers Use Fake Emergencies To Steal Your Money
- FTCWhat’s a verification code and why would someone ask me for it?
- FTCPhone Scams
This guide focuses on U.S. phone services. Features and reporting options can vary by device, provider, and country. Read our editorial standards and correction policy.
A little know-how goes a long way.
Share this guide with someone you look out for.