Skip to content

Report and record. Simple incident log

Use this page to write down what happened.
It helps your bank, service provider, or Gardaí act faster.

Use this topic if you or someone you support:
  • Wants a simple way to record what happened before details are forgotten
  • Needs to contact a bank, a provider, or Gardaí and wants to be clear
  • Wants a print friendly log to bring to Citizens Information or a trusted person

If money is at risk right now, start with:
Money at risk. What to do right now

If you feel in immediate danger

Call 999 or 112.

The 60 second version

If you only do one thing, record these.

  • Date and time
  • What happened. Text, email, call, pop up, link, app install
  • Who it claimed to be
  • What you shared or did. Codes, passwords, card details, bank login, payment approval
  • Any money involved. Amount, bank, reference, payee
  • Any reference numbers. Transaction reference, order number, ticket number, case number

A helpful rule

Write facts, not guesses.
You can record what you saw and what you did, even if you are not sure what the scam was.

Simple incident log

Tip

You can print this page, or copy the log into Notes.

1. What happened

  • Date:
  • Time:
  • How you were contacted: (text, email, call, WhatsApp, social media, pop up)
  • What it claimed to be: (bank, delivery, Revenue, An Post, support, friend, other)
  • Device used: (phone, laptop, tablet)

2. Details you can screenshot or record

  • Phone number shown on screen:
  • Email address shown as sender:
  • Website link shown: (domain or site name if you prefer)
  • Where the link went: (domain or app name, if known)
  • Account name or profile: (social media username, marketplace seller, etc.)
  • Any reference numbers shown: (order number, tracking number, case number, chat ticket, etc.)

3. What you did

Tick any that apply.

  • [ ] I replied to a message
  • [ ] I clicked a link
  • [ ] I opened an attachment
  • [ ] I installed an app or allowed remote access
  • [ ] I entered card details
  • [ ] I entered a password or bank login
  • [ ] I shared a one time code or PIN
  • [ ] I shared personal details (address, date of birth, PPSN, etc.)
  • [ ] I was asked to buy gift cards
  • [ ] I approved a payment
  • [ ] I sent money

4. Money and transactions

  • Bank or card provider:
  • Amount:
  • Payment method: (card, bank transfer, Revolut, crypto, gift card)
  • Payee or recipient name shown:
  • Any new payee added: (yes or no, details if known)
  • Transaction reference:
  • Any bank alerts received: (yes or no, describe)

5. What you have done so far

  • Called the bank: (yes or no, when)
  • Bank actions taken: (freeze card, stop payment, new card, blocked payees, other)
  • Called the organisation that was impersonated: (yes or no, who)
  • Changed passwords: (which accounts)
  • Turned on two factor authentication: (which accounts)
  • Reported it somewhere: (bank case number, Garda station, platform report, other)

6. Attachments and evidence you have

  • [ ] Screenshot of message
  • [ ] Screenshot of sender details
  • [ ] Screenshot of the link or website
  • [ ] Screenshot of bank alerts
  • [ ] Screenshot of transactions
  • [ ] Photos of gift cards or receipts
  • [ ] Notes from a phone call (date, time, who you spoke to)

Important

  • Share screenshots, not live links.
  • Do not share screenshots that include one time codes, PINs, or passwords.

If you want to talk to someone

If you want to reduce the chance of this happening again, go to:
Prevention for next time