Although this is seen as the correct way to describe it, you did forget some other parts which play a huge factor,Depends.
If it's an IC scam, you deal with it ICly. (However I think $50 000 is the scam limit ICly, anything over that makes it an OOC issue as it's a rulebreak)
If it's an OOC scam, first step would be perhaps reaching out to a helper or an admin. Pretty sure they know what follows afterwards.