First the bank... stop further transactions..
Then the police... logging a complaint is a must...