When It Happens to You: What to Do If You Become a Victim of Cybercrime

I'd be willing to bet that you know someone who has been hit by cybercrime. Maybe it was a friend whose bank account was mysteriously drained overnight. Maybe it was a family member who woke up to frantic calls from contacts asking why they were being sent strange messages on WhatsApp. Maybe, if you're honest, it happened to you.

Cybercrime in Jamaica is not a distant, abstract threat. It is happening in our communities, to ordinary people going about their ordinary lives — checking their balance on lunch break, shopping online after work, or simply leaving their phone unlocked for a moment too long. Bank-related fraud and identity theft are alarmingly common. And the WhatsApp hijack? That one hits differently.

With bank fraud, as devastating as it is, the harm is largely financial. The road to getting your money back is long and frustrating, but it exists. The WhatsApp hijack is something else entirely. When a criminal takes over your account, they do not just take your chat history. They take your identity and your relationships. They slide into conversations with your mother, your coworker, your pastor, and they con them — using your name, your profile picture, your voice. You become, without ever agreeing to it, a participant in the crime against the very people you love. That violation is personal in a way that a bank fraud simply is not.

So what do you do when it happens?

Stay Calm and Move Quickly

I know that sounds contradictory, but both things are true. Panic makes you freeze or make poor decisions. Urgency makes you act. Take a breath, then move with purpose.

Deal With Your Device — But Be Smart About It

If you believe your phone or computer has been compromised, your instinct might be to disconnect it from the internet immediately — and that instinct is right. Turn off your Wi-Fi and mobile data to cut off the attacker's access.

Here is the part most people miss though: you will need a second, clean device to change your passwords. A family member's phone, a work computer, a tablet — anything that has not been exposed. Do not go back to the compromised device to update your credentials. You would essentially be handing the attacker a fresh set of keys.

If you only have one device and no immediate access to another, prioritise changing your passwords first, then deal with disconnecting.

Change Your Passwords — Starting With Your Email

Your email is the master key. Most of your other accounts — banking, social media, shopping — can be reset through it. Change that one first, then work your way through your banking apps and social media accounts. Make your new passwords strong and different for each account. If any of your accounts offer two-factor authentication, turn it on now.

Call Your Bank Without Delay

If money or financial information is involved, call your bank immediately. Do not wait to see whether anything goes missing. Report the suspicion early and ask them to flag your account. Banks have fraud processes in place, but they need you to trigger them.

Report It — In Two Places

This step is one that too many people skip, and it matters enormously. Reporting your experience is the first step toward justice, and it helps prevent the next person from going through the same thing.

First, report to the authorities. Contact the Jamaica Constabulary Force Cybercrime Unit. You can walk into any police station or submit a report through the JCF's online reporting portal. The more detail you can provide — what happened, when, how — the better.

Second, report on the platform where the crime occurred. If your WhatsApp was hijacked, report it directly within the app and to WhatsApp's support team. You can find guidance on how to do that through WhatsApp's official Help Centre. This step is not just about your case. Every report you make helps these platforms identify patterns, close loopholes, and build stronger protections for all users. Your report makes the system better.

Document Everything Before You Delete Anything

Screenshots are your evidence. Before you clear out suspicious messages or delete anything that looks threatening or strange, capture it. Save transaction records, scam messages, dates and times. Write down what you remember while it is fresh. If this matter ever goes before a court, that documentation is what authorities need to build a case.

Tell the People Around You

If your account was used to send scam messages to your contacts, warn them straight away. A simple message — even from a borrowed phone — telling people not to click anything they received from you can stop the scam from spreading further.

Tech makes life faster and more convenient, and that is genuinely a wonderful thing. But speed is also what criminals count on. They thrive in the moments when you are distracted, rushing, not fully paying attention. The best defence against cybercrime is not fear — it is intention.

Slow down with technology. Read before you click. Check before you share. And if something goes wrong, know that you have options, you have recourse, and you do not have to face it alone.