
Financial Fraud Recovery: Steps, Odds & Who to Call
Financial Guidance Disclaimer
This article provides educational information only and does not constitute financial advice. Financial decisions should be based on your personal circumstances.
“Financial fraud recovery” means two different things. The first is recovering money or assets. That is sometimes possible and often partial, and it depends on how the money moved, how fast it was reported, and whether you authorized the payment. The second is recovering your security, identity, credit, and stability. That is usually achievable through specific, documented steps. Speed matters, for reasons tied to real rules and windows explained below. No agency, bank, or company can guarantee that lost money comes back, and anyone who contacts you offering to recover it for an upfront fee is a major red flag. Reporting matters even when money is not returned. Rules, limits, and data change, so everything here is accurate only as of November 2026. This guide is educational, not legal, tax, or financial advice.
If this just happened: your first 72 hours
Step | What to do | Why | Where |
1 | Stop contact. Send nothing more, even to “unlock” or “release” funds. | Many scams end with a final demand for taxes or fees before the scammers vanish (FBI IC3, 2025 report). | — |
2 | Call every institution involved. Ask for a dispute, recall, freeze, or new account numbers. | Rules and windows run from when you report. Frozen funds are most likely early. | Number on your card, statement, or the institution’s official site |
3 | Secure your accounts from a device you trust: new passwords, multi-factor authentication, remove any remote-access software. | Scammers often keep access. | Your accounts; your mobile carrier if you suspect a SIM swap |
4 | Report to the FTC, and to the FBI’s IC3 if it happened online. | Reports feed law enforcement and can trigger fund-freezing efforts. The FBI asks for reports regardless of amount. | |
5 | Place a free credit freeze at all three bureaus. | Blocks new accounts opened in your name. | Equifax, Experian, TransUnion; links at IdentityTheft.gov |
6 | Save evidence: messages, receipts, wallet addresses, screenshots. | Banks, agencies, and courts rely on documentation. | A folder on a secure device |
7 | Report where it fits: SEC or FINRA for investments, police, USPIS for mail, SSA or IRS if your SSN is involved. | Different agencies handle different harms. | Official agency sites |
Scammers buy search ads, spoof caller ID, and build lookalike sites. The FBI warned in 2025 about scammers impersonating its own IC3 and about spoofed IC3 websites. Type official addresses yourself, and call the number printed on your card or statement.
Your rights come first. This guide is educational and does not replace advice from a licensed attorney, tax professional, or your financial institution. Recovery is never guaranteed. Scammers are professionals who exploit trust and urgency. Being targeted says nothing bad about you, and fraud is a crime.
Key takeaways
Recovery depends mostly on payment method, speed, and whether you authorized the payment.
Unauthorized fraud (someone else initiated it) has federal protections. Authorized scams (you were tricked into sending it) usually do not, though some banks and apps reimburse by policy.
Cards and some bank transfers are often disputable. Wires, gift cards, and crypto are hard to reverse, but quick reports sometimes freeze funds.
No legitimate service charges upfront to recover scam losses. Recovery scams target people who have already lost money.
A credit freeze is free by federal law and does not require you to be a confirmed victim.
Report even if the odds look low. Reports help investigators connect cases and can support refunds, restitution, and remission.
How this guide was prepared
Research covered official sources published through October 31, 2026, and the guide is current as of November 2026. It is based on regulator guidance, primary law, official data, and institutional research. We did not test any service, and no firm, product, lawyer, or recovery service is ranked or recommended. Sources were prioritized in this order: laws and agencies, official data, institutional research, then established journalism only where nothing else supports a fact. There are no affiliate or compensation relationships. Rules, deadlines, and contact details change, so confirm with official sources and, where appropriate, a licensed attorney or tax professional.
Support. If this has you feeling overwhelmed or in crisis, call or text 988 (the 988 Suicide & Crisis Lifeline). If you or someone you know is 60 or older, the Justice Department’s National Elder Fraud Hotline is 1-833-372-8311.
In this guide: What is financial fraud recovery? · Can you get your money back? · The first hour to six months · Who to report to · Playbooks by scam type · Identity theft and credit · Your rights · If your bank says no · Paths to getting money back · Recovery scams · Lawyers and other professionals · Taxes · Special situations · Coping and rebuilding · Mistakes and myths · Checklist · Glossary · FAQs · Sources
What Is Financial Fraud Recovery, and Does It Change With the Type of Fraud?
Yes. The most important question is whether someone else initiated the payment or you did.
Financial fraud is deception to take money or assets. A scam is fraud that tricks you into acting. An unauthorized transaction is one you did not initiate, such as a stolen card or an account takeover (a criminal gaining control of your account). An authorized push payment scam is one where you send the payment yourself because you were deceived, for example to a fake “fraud department.”
Type | What happened | Typical legal protection | Typical bank response | First move |
Unauthorized fraud | Someone else initiated the transfer or charge | Federal law caps your liability: Regulation E for debit, ACH, and most electronic transfers; Regulation Z and the Fair Credit Billing Act for credit cards | Investigates; often refunds when the claim meets the rules | Report at once; ask for the dispute in writing |
Authorized scam | You sent the money after being deceived | Regulation E’s liability limits are written around unauthorized transfers. Federal law generally does not require reimbursement. Some banks and apps reimburse under their own policies (firm policy, not law) | Often declines; sometimes partial reimbursement | Ask for a recall or freeze, report it, ask what policy applies |
There is a gray zone. The CFPB’s published FAQs say that if a third party fraudulently induces you to share account access and then uses it to initiate a transfer, that transfer can still count as unauthorized under Regulation E. Regulation E also says a bank cannot use your negligence, such as writing down a PIN, to raise your liability above the limits (12 CFR 1005.6, Official Interpretation). The CFPB withdrew dozens of guidance documents in 2025, so check its current pages. Congress has seen bills proposing reimbursement of scam payments (such as the Protecting Consumers from Payment Scams Act), but proposals are not law.
Can You Get Your Money Back? Recovery by Payment Method
Sometimes. Cards and some bank transfers are often disputable. Wires, gift cards, and cryptocurrency are hard to reverse, but a fast report can sometimes freeze funds.
Method | Reversibility | Governing rule | Time-sensitive window | Best first action |
Credit card | Often disputable | Law (Regulation Z, Fair Credit Billing Act); card-network rules also apply | Unauthorized use capped at $50 (CFPB); written billing-error notice within 60 days of the statement | Call issuer; dispute in writing |
Debit card | Sometimes | Law (Regulation E); network rules | $50 cap if reported within 2 business days of learning of loss or theft of the card; 60-day statement window | Call bank; ask for error investigation |
ACH or bank transfer | Unauthorized: often returnable. Authorized: hard | Regulation E (law); Nacha rules (network) | Nacha: receiving banks can return unauthorized consumer debits for up to 60 calendar days | Call bank; ask for return or recall |
Hard; sometimes recalled or frozen if fast | UCC Article 4A (state law) and bank policy | No fixed legal window; FBI says time is of the essence | Call bank for recall; file at ic3.gov | |
P2P payment app | Depends on authorized vs. unauthorized | Regulation E for unauthorized; firm policy for scams | 60-day statement window; act fast | Report to the app and the linked bank or card |
Check | Sometimes, for forged or altered checks | State law; bank agreement | Varies by state and agreement | Notify bank; ask about stop payment |
Cash or courier | Rarely | None | — | Report to police, FBI, IC3 |
Gift card | Sometimes, if unspent | Issuer policy | Immediately | Call issuer; keep card and receipt (FTC) |
Cryptocurrency | Typically not reversible | No legal reversal right | Exchange freezes possible only if funds remain | Contact the exchange; report to IC3 |
Remittance (money transfer service) | Cancellable for a short time | Regulation E, Subpart B (law) | Cancel within 30 minutes of payment if funds are not yet picked up; refund due within 3 business days | Contact provider immediately |
Brokerage or investment account | Depends | Firm policy; SEC and FINRA rules | Prompt notice | Contact the firm; complain to SEC or FINRA |
On wires: one federal court ruled in January 2025 that consumer-initiated wires can fall under the Electronic Fund Transfer Act, but the CFPB later withdrew its statement of interest in that case, so the point remains contested. Do not assume a wire is covered.
What do the numbers say? Three official data points help, each with limits.
The FTC said consumers reported $15.9 billion in fraud losses in 2025 across 3 million reports, up from just over $12 billion in 2024 (FTC testimony, March 25, 2026). Those reported losses are a fraction of actual losses, and the FTC has estimated that, counting underreporting, 2024 costs could be as high as $195.9 billion. For 2025, bank payments carried the highest aggregate losses, followed by cryptocurrency, while credit cards were the most frequently identified payment method.
The FBI’s IC3 Recovery Asset Team started its Financial Fraud Kill Chain (a process that asks banks to freeze funds) in about 3,900 incidents in 2025, involving roughly $1.16 billion in attempted theft, and reported freezing about $679 million, or 58% (IC3 2025 Internet Crime Report). That counts only incidents the FBI processed under its criteria. Frozen funds are not the same as funds returned to victims.
The sources reviewed for this guide include no official overall recovery rate for all scam victims. Treat any company quoting one as unreliable.
Illustrative example (not a typical outcome): you send a $20,000 wire and your bank recalls $6,000. You recover 30% ($6,000 ÷ $20,000) and lose $14,000, or 70%.
What Should You Do in the First Hour, 72 Hours, Two Weeks, and Six Months?
Act in this order: stop contact, contact your financial institutions, secure accounts, report, then document and follow up in writing.
The first hour
Stop contact and send nothing more. If you are being threatened or extorted, contact law enforcement.
Contact each financial institution using the official number. Ask for the specific action: dispute, recall, freeze, or new account numbers. For wires, the FBI advises asking for a recall along with any indemnification documents the bank requires, and notes that institutions have different policies.
Secure your accounts from a clean device. Change passwords, enable multi-factor authentication (a second proof of identity beyond a password), and remove remote-access software. If you suspect a SIM swap (a criminal moving your phone number to their device), call your mobile carrier.
The first 24 to 72 hours
Report to the FTC at ReportFraud.ftc.gov. For online crimes, also file at ic3.gov and include full transaction details. When a report involves a high-dollar loss meeting the FBI’s criteria and you consent, the FTC can refer it to the IC3 Recovery Asset Team.
File a police report if you need a record for your bank or insurer, if identity theft is involved, or if you want local follow-up. The FTC advises reporting to local law enforcement too.
Report to the platform, exchange, or retailer involved.
Place a credit freeze. Add a fraud alert if your identity information was exposed.
Report where relevant: SSA (Social Security number), IRS (tax identity theft), U.S. Postal Inspection Service (mail), SEC, FINRA, or CFTC (investment fraud).
The first two weeks
Build an evidence log (below) and follow up in writing. Under Regulation E, a bank may require written confirmation within 10 business days of an oral notice, and if you miss it the bank may not need to provisionally credit your account.
Know the bank’s clock. Regulation E generally requires a determination within 10 business days. If the bank needs up to 45 days, it must provisionally credit your account within the first 10 business days, though it may withhold up to $50 in some unauthorized-transfer cases. Some situations, including point-of-sale debit and brand-new accounts, allow up to 90 days. Accounts subject to the Federal Reserve’s Regulation T, such as certain brokerage margin accounts, are exempt from provisional credit (12 CFR 1005.11, CFPB).
Review all three credit reports. They are free every week at AnnualCreditReport.com, per Equifax, Experian, and TransUnion’s 2023 announcement making weekly access permanent.
Dispute fraudulent items. If a claim is denied, file a regulator complaint (see “If your bank says no”). Consider whether to consult an attorney.
One to six months
Watch for notices from prosecutors, FTC refund programs, restitution, and remission. Handle tax questions (see “Taxes”). If a debt collector contacts you about an account you did not open, dispute it in writing and see the CFPB’s debt collection guidance. Keep your credit freeze in place.
Rebuild
Turn on account alerts, use passkeys or security keys (stronger than passwords), keep credit frozen, verify payment requests through a second channel, and name a trusted contact where your brokerage allows. The FBI recommends families create a secret word or phrase to verify identity (IC3 public service announcement, December 3, 2024), which guards against voice-cloning scams. Lean on people you trust.
Template: what to say to your bank
This is a template, not a quote from anyone. Use “unauthorized” or “fraudulent” only if true.
“My name is [name], account ending [digits]. On [date and time], a payment of [amount] was sent to [recipient/account] after [brief factual description, such as ‘a caller impersonating the bank told me to move funds’]. I did / did not initiate this payment. I am asking for [a recall / a freeze / a dispute under Regulation E]. Please give me a reference number, tell me the next deadline, and confirm what you need from me in writing. I will also send this request in writing today.”
Note the date, time, representative’s name, and reference number.
Evidence log template
Item | What to save | Why it matters |
Messages and call logs | Texts, emails, chat, numbers, usernames (do not delete) | Shows how the scam unfolded |
Payment records | Receipts, confirmation numbers, dates, amounts | Basis for disputes and recalls |
Recipient details | Account numbers, wallet addresses, transaction IDs | Needed for IC3 and freezes |
Websites and profiles | Screenshots with URLs and dates | Pages are often taken down |
Bank communications | Reference numbers, names, dates | Proves you reported on time |
Reports filed | FTC, IC3, police, complaint numbers | Needed for escalation |
Three composite walk-throughs
Composite illustrations, not real cases.
(a) Bank-impersonation payment app scam. First hour: hang up, call the bank using the number on your card, say exactly what happened, and ask for a freeze and a review. Change credentials. 24–72 hours: report to the FTC and IC3, freeze credit. Two weeks: follow up in writing; if denied, file a CFPB complaint. Six months: outcomes vary and may be none; watch for follow-up “recovery” calls.
(b) Fake investment platform with crypto transfers. First hour: stop sending, including “tax” or “withdrawal fee” demands; contact the exchange you used. 24–72 hours: report at ic3.gov with wallet addresses and transaction IDs, plus the FTC and the SEC or CFTC. Two weeks: complete the evidence log; ignore offers to recover funds. Six months: watch for victim notices and remission; none is guaranteed.
(c) New credit account opened with a stolen identity. First hour: freeze credit and add a fraud alert. 24–72 hours: file at IdentityTheft.gov for a recovery plan and contact the creditor’s fraud department. Two weeks: dispute the account with the bureaus; consider an IRS Identity Protection PIN. Six months: an extended fraud alert (seven years) may fit; check reports for new activity.
Who Should You Report Financial Fraud To?
Start with the FTC, add the FBI’s IC3 for online crimes, and add the agency that matches the harm. Reports do not guarantee an investigation or a refund. The FTC shares its reports with more than 2,000 U.S. law enforcers and uses them to build cases (FTC testimony, March 25, 2026).
Agency | What it does | What it does not do | How to file |
FTC | Collects fraud reports, shares them with law enforcement, brings cases, runs refund programs | Does not resolve individual cases or recover your money directly | ReportFraud.ftc.gov; identity theft at IdentityTheft.gov |
FBI IC3 | Takes internet-crime complaints; its Recovery Asset Team can ask banks to freeze funds when criteria are met | Does not investigate every complaint or guarantee recovery | ic3.gov; tips.fbi.gov or 1-800-225-5324 |
Local police | Creates a record; supports identity-theft documentation | Rarely recovers money from remote scammers | Your local department |
CFPB | Sends complaints about banks, cards, and payment services to the company for a response | Does not act as your lawyer or chase scammers | consumerfinance.gov/complaint; (855) 411-2372 |
SEC, FINRA, CFTC, state securities regulators | Handle investment, broker, adviser, and (CFTC) forex or crypto-derivative fraud | Cannot promise your money back | Each agency’s official complaint page |
State attorney general | Consumer protection; some run restitution programs | Varies by state | Your state AG’s official site |
USPIS, IRS, SSA | Mail fraud, tax identity theft, Social Security fraud | Do not recover scam payments | Official agency sites |
Agency portals and funding have shifted before, so reach each agency by typing its official address yourself.
Which Playbook Fits Your Scam?
Match the scam to the payment method, because the payment method decides your best first call.
Scam type | Common payment methods | Priority actions | Recovery realism |
Bank impersonation and account takeover | P2P, ACH, wire | Call your real bank; freeze; secure accounts; report | Unauthorized claims have federal protections. Fast reports sometimes freeze funds; IC3 saw more tech-support and account-takeover freeze requests in 2025 |
Government impersonation | Gift cards, crypto, wire, cash | Stop paying; contact the payment provider; report | Low for gift cards, crypto, and cash. IC3 logged about $798 million in losses in 2025 |
Romance and investment scams | Mostly crypto and wire per IC3 | Stop sending; report to IC3, FTC, SEC or CFTC; expect recovery offers | Low once crypto leaves your wallet. Large forfeiture cases exist but are slow |
Tech support | Crypto, wire, gift cards, cash couriers | Remove remote access; call the bank; report | Varies; early wire reports sometimes freeze funds |
Business email compromise and real-estate wire fraud | Wire or ACH | Call the bank the same day; file at IC3; call the title company | Best of any category when reported within hours, but not guaranteed |
Gift-card scams | Gift cards | Call the issuer; keep card and receipt | Sometimes, if unspent |
Family-emergency and voice-clone scams | Wire, crypto, gift cards, cash | Hang up; call the person on a number you know; use your family word | Low once sent |
Sextortion | Gift cards, P2P, crypto | Do not pay; block; report to FBI and NCMEC; use Take It Down | Payments rarely recovered; images can often be removed |
In its 2025 report, IC3 shared cases where quick action froze or recalled funds, including a Missouri real-estate wire of over $1.3 million and a $449,000 wire where the full amount was still on hold. These are examples, not typical results.
If you… | Do first… | Watch out for… |
Sent a wire today | Call your bank for a recall; file at ic3.gov | Follow-up “recovery” offers |
Authorized a Zelle or P2P payment | Report to the app and bank; ask what reimbursement policy applies | Assuming it works like a credit card |
Had a card number stolen | Call the issuer; get a new card | The 60-day dispute window |
Sent crypto to a fake platform | Stop; file at ic3.gov with wallet addresses; contact the exchange | “Tax” or “withdrawal fee” demands |
Exposed your SSN | Freeze credit; use IdentityTheft.gov; consider an IRS IP PIN | Tax-return fraud |
Have an older parent who was targeted | Call the bank together; call the National Elder Fraud Hotline | Shame, and repeat targeting |
May be a money mule | Stop moving money; report to IC3 and the FBI; consider a lawyer | Legal exposure |
Were contacted by a “recovery agent” | Do not pay; verify; report | Upfront fees |
Identity Theft and Credit Protection: Which Tool Do You Need?
A credit freeze is the strongest free block on new accounts. Add a fraud alert and an FTC Identity Theft Report if your identity was stolen.
Tool | What it does | What it does not do | Cost and length | How to place it |
Initial fraud alert | Tells creditors to verify your identity | Does not block access to your report | Free; 1 year | Contact one bureau; it must notify the other two |
Extended fraud alert | Same, for identity-theft victims | Needs an FTC Identity Theft Report or police report | Free; 7 years | Contact the bureaus with your report |
Credit freeze | Blocks access to your report for new accounts | Does not stop misuse of accounts you already have | Free by federal law; stays until you lift it in almost all states | Each of the three bureaus |
Credit lock | A bureau’s product with similar goals | It is a company product, not the federal freeze right; terms and fees are set by the company | Varies | Bureau app or site |
FTC Identity Theft Report | Creates a personal recovery plan and documentation | Does not freeze anything by itself | Free | |
Police report | A record for banks, insurers, or extended alerts | Rarely recovers money | Free | Local police |
The FTC says a freeze does not affect your credit score. Anyone can request an IRS Identity Protection PIN, and Form 14039 is for suspected tax-related identity theft, per the IRS. Check your reports free each week at AnnualCreditReport.com, and type the address yourself, since lookalike sites exist.
What Are Your Rights, and Which Are Law and Which Are Policy?
Federal law protects you most against unauthorized transactions. Reimbursement of authorized scams is mostly a matter of bank or app policy.
Law: Regulation E (12 CFR Part 1005) limits liability for unauthorized electronic transfers at $50, $500, or more depending on timing, and sets bank investigation deadlines. Regulation Z and the Fair Credit Billing Act cap unauthorized credit card use at $50 and set a 60-day written dispute process. The Fair Credit Reporting Act gives you free freezes and fraud alerts. Wires are governed mainly by state versions of UCC Article 4A. Federal crime victims have rights under the Crime Victims’ Rights Act, which shapes their role in federal cases but does not itself pay victims.
Regulator guidance: FTC, CFPB, and FBI advice, such as the CFPB’s EFT FAQs, explains the law but is not itself law.
Network rules: Nacha’s ACH rules (60-day returns for unauthorized consumer debits) and card-network dispute rules apply through your bank, and they are not statutes.
Firm policy: “Zero-liability” promises and Zelle or other P2P reimbursement are voluntary and vary. In litigation, the CFPB dismissed its Zelle case in March 2025, and in July 2026 a New York court let the state attorney general’s case against Zelle’s operator largely proceed; Zelle said it would appeal. Allegations and rulings in that case are not settled law.
What does not cover fraud: FDIC insurance protects deposits if an insured bank fails, up to $250,000 per depositor, per bank, per ownership category, and does not protect against theft or fraud (FDIC). SIPC protects up to $500,000, including $250,000 for cash, if a member brokerage fails, and does not protect against market losses or promises of performance (SIPC).
In March 2026, Executive Order 14390 directed federal agencies to step up efforts against transnational criminal organizations behind cyber-enabled fraud (FTC testimony). It is an enforcement directive and does not change your reimbursement rights.
What If Your Bank Says No?
Ask for the reason in writing, confirm how the claim was classified, then escalate.
Request the written explanation. When a bank finds no error, Regulation E requires a written explanation and notice of your right to request the documents it relied on (12 CFR 1005.11(d)).
Check the classification. Was it called “authorized” even though a third party used credentials you were tricked into sharing? Say so plainly and cite the facts.
Escalate inside the bank, then file a CFPB complaint (the company generally responds through the CFPB’s process). You can also complain to the bank’s prudential regulator (OCC, Federal Reserve, FDIC, or NCUA), your state attorney general, or state banking regulator.
Consider an attorney if the loss is large or the denial looks wrong. A complaint can prompt review but cannot force a refund.
What Are the Paths to Getting Money Back?
Most paths are slow, partial, or uncertain. Know which apply to you.
Path | Who may qualify | Realistic outlook | Timeline | Source |
Bank reimbursement | Unauthorized transfers; some policy-based scam cases | Often for unauthorized claims; uncertain for authorized scams | Days to weeks | Regulation E; bank policy |
Card chargeback or dispute | Card payments | Often for fraud on cards | Weeks | Regulation Z; network rules |
Wire recall or freeze | Fast reports | Sometimes | Hours to days | IC3; bank |
Exchange freeze | Funds still on an exchange | Sometimes | Days | FTC; IC3 |
FTC refund | People harmed by an FTC case | Possible when a case yields money | Months to years | ftc.gov/refunds |
DOJ remission | Victims of crimes with finally forfeited assets | Discretionary; no promise | Often years | 28 CFR Part 9 |
Restitution order | Victims in a criminal case | A court order is not payment | Years | Court |
SIPC | Customers of a failed SIPC-member broker | Not for fraud by outsiders or market loss | Months | SIPC |
Civil lawsuit | Cases with a collectible defendant | Costly; judgments may be uncollectible | Years | Attorney |
Insurance | Policies that cover fraud | Check your policy | Weeks to months | Insurer |
FTC refunds are real but case-specific. In December 2025, the FTC reported sending more than $27.6 million to consumers harmed by unauthorized billing schemes (FTC, December 9, 2025). The FTC never requires payment or sensitive information to receive a refund, and refund programs are listed at ftc.gov/refunds.
Remission is discretionary. The Justice Department says remission is the process for compensating victims from assets forfeited from offenders, that it is a discretionary decision, that it is not a general victim fund, and that it differs from restitution. Reporting on the record 127,271-bitcoin forfeiture case tied to Prince Group said that on September 25, 2026 a federal judge rejected nine alleged victims’ claims to contest the forfeiture and pointed to remission if the government wins. Forfeiture there was not final as of that report.
Illustrative restitution example: 1,000 victims each lose $5,000, a total of $5 million. A court orders full restitution, but only $1 million is collected. Each victim receives a pro rata share of 20% ($1 million ÷ $5 million), or $1,000 of the $5,000 lost. A restitution order is not the same as payment.
Are Recovery Services Legitimate, and How Do You Spot a Recovery Scam?
A recovery scam is a second fraud aimed at people who already lost money. Be very skeptical of anyone who asks for payment before getting your money back. IC3’s 2025 report counted 10,516 recovery-scam complaints with $1.4 billion in losses, a figure that may include earlier scam losses.
Claim | Why it’s a warning sign | How to verify |
“Pay a fee and we’ll recover your funds” | The Telemarketing Sales Rule bars telemarketers selling recovery services from taking payment until seven business days after the money is delivered (FTC) | Don’t pay; report to the FTC |
“We’re the FBI, IC3, or FTC” | The FBI warned of IC3 impersonators (April 18, 2025) and spoofed IC3 websites (September 19, 2025) | Type ic3.gov yourself; agencies don’t charge to recover funds |
A law firm that “traces” your crypto | The FBI warned on August 13, 2025 of fictitious law firms offering to recover funds | Check the state bar directly; call a number you find yourself |
“Guaranteed recovery” or “we can hack them back” | No honest provider can guarantee it | Walk away |
Unsolicited text or WhatsApp contact | Scammers buy and trade lists of past victims, as the FTC has long warned | Ignore; block |
Asks for remote access, crypto, or gift cards | Classic scam payment methods | Never allow access |
“Pay a fee to receive your FTC refund” | The FTC never requires payment | Check ftc.gov/refunds |
Illustrative example: you lose $8,000, and a “recovery agent” demands 15% upfront ($8,000 × 0.15 = $1,200). If the agent disappears, your total loss rises to $9,200 and you recover $0.
Do You Need a Lawyer or Other Professional?
Not always. Many card and bank disputes need only careful, timely writing. Consider help for large losses, denied claims, or real-estate wires. Statutes of limitations and attorney rules vary by state.
Option | What it can do | Typical cost structure | Limits | How to vet |
Bank fraud department | Disputes, recalls, freezes | Usually free | Bound by law and policy | Official number on your card |
Attorney | Demand letters, civil claims, advice | Hourly, flat, or contingency | Cannot guarantee recovery | State bar directory |
State securities regulator | Investment complaints; checks on registration | Free | Limited remedies | NASAA directory of state regulators |
Nonprofit victim services | Support and reporting help | Usually free | Not legal representation | Official referrals (such as the Elder Fraud Hotline) |
Adult Protective Services | Reviews abuse or exploitation of older or vulnerable adults | Public service | Rules vary by state | Your state agency |
Tax professional | Theft-loss and identity-theft tax questions | Fees vary | Not a recovery source | State licensing board |
To check an investment professional, use FINRA BrokerCheck for brokers and the SEC’s investment adviser search for advisers.
Can You Deduct a Scam Loss on Your Taxes?
Sometimes. It depends on whether you were trying to make a profit. In Chief Counsel Advice 202511015 (March 14, 2025), the IRS concluded that victims of certain investment-type scams could claim a theft-loss deduction for 2024, limited to their basis in the stolen funds. Losses from personal scams, such as romance or kidnapping scams, were treated as personal casualty losses, which are generally disallowed for 2018–2025 unless tied to a federally declared disaster. Legislative materials say Public Law 119-21 (2025) made that limit permanent for personal losses. Treatment is fact-specific, so speak with a tax professional.
Special Situations
Older adults. IC3 received 201,266 complaints from people 60 and older in 2025, with $7.748 billion in losses and an average loss of $38,500. Anyone can call the National Elder Fraud Hotline for a relative. FINRA rules (firm rules, not federal law) require brokerage firms to make reasonable efforts to get a trusted contact person, and let firms place temporary holds when they suspect exploitation. Ask whether your relative’s firm has a trusted contact on file. Adult Protective Services handles abuse, including by family or caregivers, and reporting rules vary by state.
Sextortion. Do not pay, block the person, and report to local police and the FBI (1-800-225-5324; tips.fbi.gov). If a minor is involved, report to NCMEC’s CyberTipline (1-800-843-5678). Under the Take It Down Act, platforms must remove intimate images within 48 hours of your request, and you can report platforms that do not to the FTC at TakeItDown.ftc.gov. A lawsuit filed by the FTC in October 2026 alleges a company that sold sextortion “help” took thousands of dollars without delivering, so research paid services carefully.
Money-mule risk. A money mule moves money for others. The CFTC warns that some mules know and others do not, and that moving money for illegal activity can bring civil and criminal charges. If someone online asks you to receive and forward money, stop, report to IC3, and consider speaking with a lawyer.
Business and real-estate wire fraud. BEC cost $3.05 billion in 2025 (IC3). Verify wire instructions by phone using a number you already know, and call your bank within minutes if one is wrong.
Deepfakes and voice cloning. IC3 received more than 22,000 AI-related complaints with about $893 million in losses in 2025. Hang up, call back on a known number, and use your family word.
How Do You Cope After Being Scammed?
Feeling shame, anger, or exhaustion is common. It does not mean you did anything wrong. Fraud is a crime, and reporting it is a reasonable step. Tell someone you trust, and let a family member help with calls. If your thoughts turn dark, call or text 988. Older adults can call the National Elder Fraud Hotline (1-833-372-8311).
To reduce the chance of a second hit: ignore unsolicited recovery offers, keep credit frozen, verify urgent requests through a second channel, set up a family word, and review account alerts. Delayed reporting is common, and it is better to report late than not at all.
Outside the U.S.? Rights and processes differ by country. Report to your national fraud-reporting authority and local police. For cross-border consumer complaints, the FTC and its international partners support econsumer.gov. The protections in this guide (Regulation E, FTC, IC3) apply to U.S. consumers and U.S. institutions.
What Are the Most Common Mistakes After Financial Fraud?
Most costly mistakes are avoidable. Check this list against your situation.
Paying an upfront “recovery fee.”
Waiting to report because of embarrassment or low odds.
Searching online for your bank’s number instead of using the one on your card or statement.
Not putting the dispute in writing.
Deleting messages or other evidence.
Continuing to talk with the scammer.
Sending more money to “unlock” funds.
Resetting passwords from a compromised device.
Letting a “helper” have remote access.
Not freezing your credit.
Not reviewing all accounts and all three credit reports.
Relying on one report only.
Missing dispute deadlines.
Paying credit-repair or identity-protection firms before learning the free options.
Assuming FDIC insurance or SIPC covers the loss.
Assuming police or the FBI will recover the money.
Moving funds for a stranger, which creates money-mule risk.
Not warning the institution or family when an older adult is involved.
What Are the Most Common Misconceptions?
Several widespread beliefs lead people to give up too early or pay too much.
Myth | Reality | Takeaway |
Banks always refund fraud | Unauthorized claims are protected, but outcomes depend on facts and timing | Report fast and in writing |
Banks never refund scams | Some reimburse by policy, and classification can be disputed | Ask what policy applies |
Reporting is pointless if I can’t get money back | Reports feed investigations and can support freezes and refunds | Report anyway |
FDIC insurance covers fraud | It covers bank failure, not theft or fraud | Look to Regulation E |
SIPC covers fraud losses | It covers a failed brokerage, not market loss or most outside scams | Verify before relying on it |
A wire can never be recovered | Fast reports sometimes freeze or recall funds | Call the bank within hours |
Crypto is untraceable, so nothing can be done | Reversal is rare, but freezes and forfeitures happen in some cases | Report with wallet details |
Recovery firms can hack scammers back | No honest firm can promise this | Never pay upfront |
Only gullible people get scammed | Scammers are professionals using pressure and trust | No shame, just action |
If I authorized it, I have no options | You can still seek a recall, file reports, and ask for policy review | Ask anyway |
The FBI will recover my money | IC3 can help freeze funds in some cases, with no guarantee | File, but plan for uncertainty |
A fraud alert is the same as a freeze | An alert asks creditors to verify; a freeze blocks access | A freeze is stronger |
A credit freeze will hurt my score | The FTC says it does not | Freeze freely |
Zelle or Venmo protects me like a credit card | Protection depends on authorization and firm policy | Pay by card when you can |
Scammers won’t target me again | Victim lists are traded | Ignore recovery offers |
Only older people are victims | IC3 reports victims in every age group | Everyone is a target |
I have unlimited time to dispute | Windows of 2 business days, 60 days, and others apply | Act promptly |
Quick-Start Checklist
Use this as a starting point, not a substitute for a licensed attorney, tax professional, or your institution’s fraud team.
I stopped contact and secured my devices and accounts.
I called each institution using a verified number.
I filed disputes in writing and noted reference numbers.
I filed FTC and (if online) IC3 reports, plus identity or investment reports.
I placed a credit freeze at all three bureaus.
I saved evidence and noted deadlines.
I am ignoring recovery offers and verifying every contact.
I flagged tax and legal questions for a professional.
I told someone I trust and lined up support.
Glossary
Financial fraud: deception to take money or assets. Scam: fraud that tricks you into acting. Unauthorized transaction: one you did not initiate. Authorized push payment scam: you send the payment after being deceived. Chargeback: a reversal of a card payment through the card network. Regulation E: the federal rule on electronic fund transfers. Error resolution: the bank’s required process to investigate a claimed error. Provisional credit: a temporary refund while the bank investigates. Wire recall: a request that a bank retrieve a sent wire. ACH return: a bank sending an automated transfer back. P2P payment: person-to-person payment through an app. Fraud alert: a notice asking creditors to verify your identity. Credit freeze: a block on access to your credit report. Credit lock: a bureau’s company product similar to a freeze. Identity theft: using your personal information without permission. Synthetic identity: a fake identity built from real and invented data. Account takeover: a criminal gaining control of your account. SIM swap: moving your phone number to another SIM. Business email compromise: impersonating a business contact to redirect payments. Romance scam: fraud built on a fake relationship. Pig-butchering scam: a long investment-romance con, often involving crypto. Recovery scam: a fraud offering to recover lost money for a fee. Advance-fee fraud: paying upfront for something never delivered. Money mule: someone who moves money for criminals. Remission: Justice Department payment to victims from forfeited assets. Restitution: a court-ordered payment from an offender. Receivership: a court-appointed person who collects and distributes assets. Forfeiture: government seizure of criminal proceeds. SIPC: protection if a member brokerage fails. FDIC insurance: protection of deposits if an insured bank fails. Crime Victims’ Rights Act: federal law giving victims rights in federal cases. Statute of limitations: the deadline to sue. Theft loss: a tax term for losses from theft. Trusted contact: a person a brokerage may call about your account. Deepfake or voice cloning: AI-generated fake video or audio.
Also: Fraud ring: an organized group. Spoofing: faking caller ID or sender details. Phishing, smishing, vishing: scams by email, text, and voice. Multi-factor authentication: extra proof beyond a password. Passkey: a password-free login. Credit report vs. score: the record vs. a number derived from it. Tradeline: an account on your report. Collection account: a debt sent to a collector. Identity Protection PIN: an IRS code that protects your tax return. Adult Protective Services: state agencies protecting vulnerable adults. Arbitration: private dispute resolution. Class action: one lawsuit for many people. Pro rata: a proportional share. Blockchain tracing: following crypto transfers. Stablecoin: crypto pegged to another asset. Custodial wallet: a wallet held by a company. Exchange: a platform for trading crypto. Remittance: a money transfer abroad. Wire instructions: the account details for a wire.
Frequently Asked Questions
What should I do if I’ve been scammed? Stop contacting the scammer and send nothing more. Call your bank, card issuer, or payment app using the official number and ask to dispute, recall, or freeze the payment. Report to the FTC at ReportFraud.ftc.gov, and to ic3.gov if it happened online. Place a free credit freeze, save evidence, and follow up in writing.
Can you get your money back after being scammed? Sometimes, but never guaranteed. Card disputes and unauthorized transfers have the best odds. Wires, gift cards, and crypto are hard to reverse, though fast reports can freeze funds. In 2025 the FBI’s Recovery Asset Team reported freezing about 58% of the $1.16 billion at issue in the incidents it processed. That is not the rate for all victims.
Will my bank refund me if I sent the money myself? Not necessarily. Regulation E’s liability limits are written for unauthorized transfers, and federal law generally does not require reimbursement of authorized scam payments. Some banks and apps reimburse by policy. Ask what applies, and say clearly if a third party used credentials you were tricked into sharing.
What do I do if I sent a wire transfer to a scammer? Call your bank immediately and ask for a recall, plus any indemnification documents it needs. File at ic3.gov with full transaction details, even if the amount is small. The FBI says time is of the essence, and its Recovery Asset Team can ask banks to freeze funds when criteria are met. Outcomes are uncertain.
Can I get money back from a Zelle, Venmo, or Cash App scam? It depends. Unauthorized transfers are covered by Regulation E. For payments you authorized, reimbursement is firm policy and varies. Report to the app and to your linked bank or card, ask them to reverse the payment, and file with the FTC. A New York court let the state’s Zelle case proceed in July 2026, but that case is unresolved.
Can I recover cryptocurrency sent to a scammer? Usually not. The FTC says crypto payments typically are not reversible. If funds are still on an exchange, a quick report may lead to a freeze. File at ic3.gov with wallet addresses and transaction IDs. Large forfeiture cases exist, and remission is discretionary and often slow.
How do I report financial fraud, and what happens after I file? Report to the FTC at ReportFraud.ftc.gov, plus ic3.gov for online crimes and the agency matching the harm. The FTC shares reports with law enforcers and uses them to build cases. It does not resolve individual cases, so you may not hear back. Keep your report numbers.
Should I report to the FTC, the FBI IC3, or the police? Often all three. The FTC collects fraud reports for law enforcement and consumer protection. IC3 takes internet-crime complaints and can start fund-freezing efforts. Police create a record that banks, insurers, or identity-theft processes may require. The FTC also advises reporting to local law enforcement.
What is the difference between fraud and a scam? Fraud is the broad term for deception that takes your money. A scam is fraud that tricks you into acting, such as sending a payment. The key legal question is whether someone else initiated the transaction (unauthorized) or you did (authorized). That distinction shapes your protections and your bank’s response.
How long do I have to dispute a fraudulent charge? It depends. For debit and electronic transfers, reporting within two business days of learning of a lost or stolen card caps liability at $50, and the 60-day statement window matters. For credit cards, send written notice within 60 days of the statement. Nacha rules let banks return unauthorized consumer ACH debits for up to 60 calendar days. Delays from travel or hospitalization can extend Regulation E time limits.
What if my bank denies my fraud claim? Ask for the written explanation and the documents it relied on, which Regulation E gives you the right to request. Check whether the claim was classified correctly, escalate inside the bank, and file a CFPB complaint. You can also complain to the bank’s regulator or your state attorney general, and consider an attorney for larger losses.
Does FDIC or SIPC cover fraud? No. FDIC insurance protects deposits if an insured bank fails and does not protect against theft or fraud. SIPC protects up to $500,000, including $250,000 for cash, if a member brokerage fails. It does not cover market losses or promised performance. Regulation E and your institution’s policies govern fraud.
How do I freeze my credit, and is it free? Yes, it is free by federal law. Contact each of the three bureaus (Equifax, Experian, TransUnion), using links from IdentityTheft.gov or each bureau’s official site. A freeze does not affect your credit score, per the FTC. You lift it temporarily when you apply for credit.
Fraud alert or credit freeze: which is better? A freeze blocks access to your report for new accounts and is generally the stronger tool. A fraud alert asks creditors to verify your identity. An initial alert lasts one year, and an extended alert lasts seven years for identity-theft victims. You can use both together.
What should I do if my identity was stolen? Go to IdentityTheft.gov for a personal recovery plan, freeze your credit, and consider a fraud alert. Contact the fraud department of any creditor involved and dispute false accounts. Check your reports weekly at AnnualCreditReport.com. Consider an IRS Identity Protection PIN, and file Form 14039 if you suspect tax identity theft.
Are recovery services legitimate? How do I spot a recovery scam? Treat unsolicited offers as scams. The FTC says telemarketers selling recovery services cannot take payment until seven business days after delivering your money. Warning signs include upfront fees, guarantees, impersonation of the FBI or FTC, and requests for crypto or remote access. IC3 counted 10,516 recovery-scam complaints in 2025.
Do I need a lawyer to recover money from a scam? Often not for card or bank disputes. Consider one for large losses, denied claims, real-estate wires, or civil suits. Lawyers cannot guarantee recovery, and fees vary. Check credentials with your state bar, and be wary of unsolicited offers. Statutes of limitations differ by state.
How long does fraud recovery take? It varies. Regulation E generally requires banks to decide within 10 business days, extendable to 45 days with provisional credit and to 90 days in some cases. Wire freezes happen in hours or days. FTC refunds, restitution, and remission can take months or years and may pay only part of a loss.
Can I deduct scam losses on my taxes? Sometimes. In March 2025, the IRS concluded that victims of certain profit-motivated investment scams could claim a theft-loss deduction, limited to their basis in the stolen funds. Personal scams, such as romance scams, were treated as nondeductible personal casualty losses. Facts matter, so consult a tax professional.
What are restitution and remission, and how do I know if I qualify? Restitution is a court-ordered payment from an offender, and an order is not the same as payment. Remission is a discretionary Justice Department process that pays qualifying victims from finally forfeited assets. Watch for official victim notices, and check the prosecuting office’s information. Never pay anyone to file.
What should I do if an older relative was defrauded? Help them call the bank right away, file with the FTC and IC3, and consider calling the National Elder Fraud Hotline (1-833-372-8311). Ask whether their brokerage has a trusted contact on file. Be kind and avoid blame. If abuse by a caregiver is suspected, contact Adult Protective Services.
What if a scammer is threatening me or sextorting me? Do not pay, block the person, and keep the messages. Report to local police and the FBI (tips.fbi.gov or 1-800-225-5324). If a minor is involved, report to NCMEC’s CyberTipline (1-800-843-5678). You can request image removal from platforms, which must act within 48 hours under the Take It Down Act. Call 988 if you are in crisis.
Could I be a money mule? Possibly, if someone asked you to receive money and send it on. The CFTC warns that some mules are unwitting and that moving money for illegal activity can bring civil and criminal charges. Stop moving money, report to IC3, tell your bank, and consider speaking with a lawyer.
Why do scammers target victims again, and how do I stop it? Victim lists are traded, and recovery scammers target people who already lost money. Ignore unsolicited offers, never pay upfront, and block the contacts. Keep credit frozen, verify requests through a known channel, and set up a family word for emergencies, as the FBI recommends.
How do I cope emotionally after being scammed? Shame, anger, and stress are common and do not mean you did anything wrong. Fraud is a crime. Tell someone you trust and share the workload. If your thoughts turn dark, call or text 988. Older adults can call the National Elder Fraud Hotline.
How do I protect myself from financial fraud in the future? Pay by credit card when you can, since cards have stronger dispute protections. Use unique passwords or passkeys with multi-factor authentication, keep credit frozen, and verify urgent payment requests through a known number. Treat requests for wires, gift cards, crypto, or secrecy as warning signs.
Sources
Official and primary sources reviewed through October 31, 2026. Secondary reporting is labeled and used only where noted.
Federal Trade Commission, Prepared Statement on The Rising Scam Economy (testimony to the Joint Economic Committee, March 25, 2026): 2025 Consumer Sentinel figures; IC3 referral and Executive Order 14390.
FBI Internet Crime Complaint Center, 2025 Internet Crime Report (April 2026), including Recovery Asset Team and Financial Fraud Kill Chain data, elder fraud, AI, and recovery-scam figures; IC3 Domestic Financial Fraud Kill Chain brochure (2025 results); IC3 PSA I-120324-PSA (December 3, 2024) and I-051525-PSA (May 15, 2025).
Consumer Financial Protection Bureau, 12 CFR § 1005.6 (liability for unauthorized transfers), § 1005.11 (error resolution), § 1005.34 (remittance cancellation); CFPB consumer advisories on card security and complaints.
Federal Trade Commission, What To Do if You Were Scammed; credit freeze and fraud alert guidance; Refund and Recovery Scams; refund programs (ftc.gov/refunds); consumer alert on sextortion assistance services (October 13, 2026); press release on unauthorized billing refunds (December 9, 2025).
Nacha, ACH Network Rules FAQs (60-calendar-day return time for unauthorized consumer debits).
Internal Revenue Service, Chief Counsel Advice 202511015 (March 14, 2025); National Taxpayer Advocate blog on the memo (April 2025); IRS pages on Identity Protection PINs and Form 14039. Public Law 119-21 as described in state legislative materials.
U.S. Department of Justice, Frequently Asked Questions: Compensating Victims with Forfeited Assets and 28 CFR Part 9; Office for Victims of Crime, National Elder Fraud Hotline.
FDIC, deposit insurance and fraud guidance; SIPC, How SIPC Protects You.
FINRA, Regulatory Notice 17-11 and Rules 4512 and 2165; CFTC, Customer Advisory: Beware Offers to Receive and Forward Money.
Equifax, Experian, and TransUnion, announcement of permanent free weekly reports (September 18, 2023).
Litigation reporting (secondary journalism and legal analysis): CFPB dismissal of its Zelle case (March 2025); People of the State of New York v. Early Warning Services, LLC (N.Y. Sup. Ct., July 20, 2026); reporting on the 127,271-bitcoin forfeiture case (September 2026).
Conclusion
Recovering money after financial fraud is sometimes possible but never guaranteed, and speed, payment method, and the difference between unauthorized fraud and an authorized scam all matter. Reporting and documentation help even when money is not returned. Rebuilding your security, credit, and identity is usually achievable through specific steps, and free official tools such as credit freezes and IdentityTheft.gov exist. Recovery scams and repeat targeting are common, so verify every contact and never pay upfront to recover funds. Rules, limits, and contact details change, so confirm them with official sources and a licensed professional. Fraud is a crime, and you are not at fault. This guide is a starting framework, not a final word. It is educational and does not replace advice from a licensed attorney, tax professional, or your financial institution. Recovery is never guaranteed.
Recommended Articles

Common Financial Scams: How to Spot and Avoid Them
Learn to spot common financial scams—from phishing to romance fraud—and the exact steps to verify, avoid, and report them safely.

FDIC Insurance Explained: What It Covers, Coverage Limits, Eligible Accounts, and How Your Bank Deposits Are Protected
Learn how FDIC insurance works, what accounts are covered, the $250,000 limit per depositor, ownership categories, and how your bank deposits are protected in a bank failure.
