Discovering you've been scammed is a deeply distressing experience. Your instinct may be to panic but the actions you take in the first 24 hours are the single most important factor in determining whether you can recover your money. This guide walks you through exactly what to do, in the right order.
✅ Time is the critical variable. Many chargeback rights expire within 60�120 days of the transaction. Bank fraud teams can sometimes freeze wires within hours if contacted immediately. Act now, not tomorrow.
Step 1: Stop All Further Payments Immediately
Before anything else do not send any more money. Scammers are highly skilled at convincing victims that "one more payment" will unlock their funds, cover taxes, or release a withdrawal. This is always a lie designed to extract more money from you.
If the scammer is still in contact with you, do not tell them you know they are a scammer. Simply go silent. Informing them may cause them to delete records, move funds, or even escalate threats.
Step 2: Contact Your Bank or Card Provider Immediately
Call the fraud number on the back of your card or your bank's 24-hour helpline right now. Tell them:
- You have been a victim of fraud
- The exact date and amount of the transactions
- That you want to dispute the transactions and request a chargeback
- The merchant name or recipient details shown on your statement
If the payment was a bank transfer (not a card), ask your bank to issue a Faster Payments recall or contact the receiving bank's fraud team directly. In the UK, banks are required under the Contingent Reimbursement Model (CRM) Code to investigate all APP fraud claims.
If you paid by credit card, you have strong protection under Section 75 of the Consumer Credit Act (UK) or similar regulations in the EU and US.
Step 3: Preserve and Screenshot All Evidence
Do not delete any messages, emails, or accounts even if the content is embarrassing. Evidence is everything in a fraud case. Capture the following immediately:
- All chat messages (WhatsApp, Telegram, SMS, email threads)
- The scammer's website URL and screenshots of every page
- All transaction IDs, wallet addresses, or reference numbers
- Any profile information, phone numbers, or usernames used
- Bank statements showing the payments
- Any contracts, agreements, or documents sent to you
Use your phone's screenshot function and email the images to yourself immediately, creating a timestamped record. If the scammer's website disappears, check web.archive.org for a cached version.
✅ Do not "test" the scammer by sending a small amount to see if it arrives. Do not install any software or remote access tools they send you. Do not log into any accounts they provide.
Step 4: Report to the Relevant Authorities
Filing a report serves two purposes: it creates an official case number (needed for insurance or chargeback claims), and it helps law enforcement identify and shut down the fraud operation.
- UK: Report to Action Fraud (actionfraud.police.uk) you will receive a crime reference number
- EU: Report to your national police cybercrime unit and Europol
- USA: File with the FBI Internet Crime Complaint Center (IC3) and the FTC at reportfraud.ftc.gov
- Australia: Report to ScamWatch
Also report the scammer's social media profiles, websites, and phone numbers to the relevant platforms. This can get fraudulent accounts suspended quickly.
Step 5: Change All Passwords and Secure Your Accounts
If you provided any login credentials, personal identification, or installed any software at the scammer's request, assume your devices and accounts may be compromised.
- Change passwords on your email, banking, and social media accounts immediately
- Enable two-factor authentication (2FA) on all important accounts
- Run a malware scan on your device using reputable security software
- Contact your bank if you shared any banking passwords or OTP codes
- Consider a credit freeze with the major credit reference agencies if personal ID documents were shared
Step 6: Contact a Specialist Recovery Firm
Once you have secured your evidence and contacted your bank, a specialist fraud recovery firm can assess whether additional recovery routes are available including blockchain tracing (for crypto), regulatory complaints, legal demand letters, and civil recovery actions.
Be aware that not all recovery firms are legitimate (see our guide on spotting crypto recovery scams). A legitimate firm will never ask for large upfront payments or guarantee recovery outcomes.