SHIELDSON · IF IT ALREADY HAPPENED — FIRST 24 HOURS
====================================================

Stay calm. The order matters more than the speed.

WITHIN 1 HOUR
[ ] Call the bank's fraud line (number on the back of the card)
[ ] Freeze the affected account
[ ] Change the password to that account from a DIFFERENT device
[ ] Write down everything you remember: numbers, names, exact words

WITHIN 24 HOURS
[ ] File at identitytheft.gov (free, official FTC site)
[ ] File a local police report — get the report number
[ ] Freeze all three credit bureaus: equifax.com, experian.com, transunion.com
[ ] Turn on two-factor authentication on email FIRST, then banking

WITHIN 7 DAYS
[ ] Review last 90 days of statements on every account
[ ] Replace the SIM card if a code was shared
[ ] Tell the Circle of Trust what happened — no shame, just facts

WITHIN 90 DAYS
[ ] Re-check credit reports (free at annualcreditreport.com)
[ ] Keep the police report number and FTC report ID in a safe place