Notify your e mail supplier on the phishing attempt by marking it as spam or phishing. Report it to your FTC (for USA) or maybe the eConsumer platform for Intercontinental treatment. however he doesn’t hold Upwork https://central.xero.com/s/question/0D58V00009LpYuJSAV/will-cash-app-refund-money-if-scammed