First 24-hour review

The one idea

Twenty-four hours in, you stop reacting and take stock. The review is a thirty-minute sit-down with one question: is the emergency actually contained, and does a stranger-readable case file now exist? Panic did the first day; procedure runs everything after.

Compare:

Day two feels like day one: re-checking balances hourly, re-telling the story on calls with no references, evidence still scattered across a possibly compromised phone.

versus

Day two opens with a checklist review: blocked ✓ swept ✓ reported (refs) ✓ SAPS (CAS) ✓ evidence copied off-phone ✓ timeline current ✓ complaint logged ✓. Two gaps found — SAFPS registration, one missing screenshot — both scheduled. The file could be handed to a stranger.

The review checklist

Containment: cards/profile blocked; beneficiaries, limits, devices, contact details swept; passwords rotated (banking, then email). Records: fraud report reference; CAS number; complaint reference — all three written in the timeline. Evidence: full-thread captures with originals unedited, copies off the device. Timeline: current, time-stamped, unknowns labelled. Identity: SAFPS registration and credit-report pull scheduled. People: one trusted person knows; nobody else is retelling your story on social media (public venting contradicting your file is contamination).

The test for "done": could someone who has never met you pick up the file and understand what happened, when, what was lost, and what was done about it — from the documents alone?

Try it now

Run the checklist against the work of this course so far. Every ✗ becomes a scheduled task with a date, added to the bottom of your timeline. That short gap list IS your plan for week one.

Your win today

The emergency is formally over: contained, recorded, and filed. What remains is a managed dispute — which the rest of this pillar teaches you to win properly.