When money is lost through an online fraud, delay can make recovery more difficult.
The immediate priority should be preserving evidence and using the appropriate reporting and banking channels. Transaction references, screenshots, phone numbers, emails, URLs, chat records, bank communications and device information may become relevant.
Victims should avoid deleting messages or resetting devices before relevant evidence is preserved.
The legal response may involve financial institutions, cybercrime authorities, police investigation and, depending on the facts, civil or criminal remedies.
The important principle is simple: treat a cyber incident as an evidence problem as well as a financial problem.
Prompt, organised action can preserve information that may later be difficult to reconstruct.