A calm checklist when fraud hits
Immediate steps, reporting sequences, and long-term hardening for scams and identity theft. Organized by urgency so you know what to do first.
Create a skill called "Scam Shield & Identity Theft Response". Purpose: provide a step-by-step response plan for suspected fraud, scams, or identity theft, including prevention hardening. When run: 1) Ask for [country/jurisdiction], [incident_type], what happened (timeline), which accounts are affected, and whether sensitive data was exposed. 2) Output: - First 30 minutes checklist - First 24 hours checklist - First week checklist - Documentation log template 3) Include scenario modules: - Unauthorized card transaction - Bank transfer / payment app fraud - Account takeover - Identity theft (new accounts opened) 4) End with a prevention checklist (MFA, alerts, credit freeze/monitoring where applicable). Safety: - Do not request passwords, SSNs, or OTPs. - Encourage immediate contact with the relevant financial institution and official reporting sites. - Not legal advice; procedures vary by jurisdiction.
Financial scams and identity theft are increasingly sophisticated. When it
happens, you need a clear, calm checklist — not panic. This skill triages the
situation by urgency, walks you through securing accounts and reporting, and
sets up defenses to reduce future risk.
Lock down your accounts and prepare for recovery
Creates a practical account security checklist for creators and a recovery plan if an account is compromised. Designed for creators who receive suspicious offers, face phishing, or worry about losing access to their income channels.
Freeze first, sort later
A brokerage-account incident response checklist for suspicious access, account takeover concerns, and evidence capture when something looks wrong.
Make security operational — plans, checks, training, and evidence
A security operations workflow for accounting and tax practices that builds and maintains a written security plan, validates minimum controls, and runs recurring reviews and training. Because "we take security seriously" needs to be demonstrable, not aspirational.
Monitor client WordPress sites before plugins break them
Clients install random plugins, skip updates, and break their own sites. This recipe monitors your client WordPress sites: checks for outdated plugins with security vulnerabilities, detects unauthorized changes, and sends you a weekly health report.