A calm, practical action plan for the hours and days after discovering you've been scammed online — how to stop the bleeding, preserve evidence, report to the right agencies, try to recover funds, and avoid the recovery-scam second wave.