You Sent Money to a Scammer: What to Do in the First 24 Hours

If you have just realized you were scammed, start here and skip the rest of this paragraph. Call the institution that moved the money, right now, before you read anything else. For a card, use the number on the back. For a bank, use the number on your statement. Say the words "I am reporting fraud." Everything else in this article can wait an hour. That call cannot.

Now, the rest.

First, the thing nobody says clearly enough

Being scammed is not a failure of intelligence. Modern fraud is a professional industry with scripts refined against thousands of people, psychological research behind them, and technology that can forge a voice or a caller ID in seconds. Doctors, accountants, engineers, and people who work in bank fraud departments are victims every day.

Shame is the reason most losses go unreported, and unreported losses are the reason the operations keep running. The useful response is not embarrassment. It is speed.

Hour one: stop the movement

What to do depends on how the money left.

Credit card: Call the issuer, report fraud, and request a new card number. Federal law gives you dispute rights on unauthorized charges, and issuers routinely reverse them.

Debit card: Same call, more urgency. Debit funds come straight out of your account, and time limits for reporting matter. Ask specifically for a provisional credit while they investigate.

Bank transfer or wire: Call the bank's fraud line and ask them to attempt a recall or a SWIFT recall for international wires. The window can be measured in hours. Ask them to flag the receiving account as fraudulent even if recall fails, which helps other victims.

Zelle, Venmo, Cash App: Report inside the app and call the linked bank. Recovery is harder because these are usually treated as authorized transfers, but report anyway. Documentation matters later.

Gift cards: Call the issuing retailer's fraud line immediately and give them the card numbers and receipts. If the balance has not been drained, some retailers can freeze it. Keep the physical cards and receipts either way.

Cryptocurrency: Report to the exchange you used and to the FBI at ic3.gov. Save the transaction IDs and wallet addresses. Crypto transfers cannot be reversed, but wallet addresses are traceable and occasionally freezable at an exchange.

Cash sent by courier or mail: Call local police for a report, and call the shipper if it is in transit. If it was sent through the U.S. Mail, contact the Postal Inspection Service.

Hour two: close the doors they came through

Money is only one of the two things at risk. Access is the other.

• Change passwords on any account whose credentials were entered on a suspicious page or shared over the phone, starting with your email. Email is the master key: whoever controls it can reset everything else.
• Turn on two-factor authentication everywhere it is offered, preferring an authenticator app over text messages.
• Sign out all sessions in the security settings of your email and bank accounts. This kicks out anyone still connected.
• Remove remote access software. If you were talked into installing AnyDesk, TeamViewer, or anything similar, uninstall it, then have the machine checked by someone you trust. Assume anything typed while they watched is known to them.
• Check for forwarding rules. Attackers with email access often add a hidden rule that copies incoming mail to themselves, so a password reset never reaches you. Check filters and forwarding addresses in your email settings.

Day one: protect your credit and your identity

If you gave out your Social Security number, date of birth, or full account details, take these steps even if no money moved.

• Freeze your credit at all three nationwide bureaus: Equifax, Experian, and TransUnion. Freezes are free by federal law, block new accounts from being opened in your name, and can be lifted temporarily when you need credit. This is the highest-value action on the entire list.
• Get your reports at annualcreditreport.com, the federally authorized source, and read them for accounts you do not recognize.
• Start a recovery plan at identitytheft.gov, the FTC's official service. It generates an affidavit and a personalized checklist that banks and credit bureaus accept.
• Consider a new phone number or account number if the exposure was severe. It is inconvenient once; the alternative is inconvenient repeatedly.

Day one: report it

Reporting rarely recovers your specific money. It is still worth the twenty minutes, because case data is what turns thousands of individual losses into an investigable network, and because some banks require a police report number to process a claim.

• Federal Trade Commission: reportfraud.ftc.gov
• FBI Internet Crime Complaint Center: ic3.gov, for anything involving the internet or crypto
• Local police: ask for a report number and keep it
• Your state attorney general's consumer protection office
• National Elder Fraud Hotline: 833-372-8311, for victims 60 and older, staffed with case managers who walk you through the steps
• Social Security impersonation: oig.ssa.gov

Bring your documentation: dates, times, phone numbers, screenshots, transaction IDs, names used, and what was said. Write it down today while the details are fresh.

Week one: the second scam

This part matters, because it is where many victims lose more than they did originally.

Victim lists get resold. Within days or weeks, someone will contact you offering to recover your money: a "fund recovery specialist," a "blockchain forensics firm," an "asset recovery attorney," sometimes an "investigator" who already knows the details of your case, which feels like proof and is simply evidence that the list circulated.

They will ask for an upfront fee, a retainer, or a "release payment" to unlock recovered assets. It is the same crew or one that bought your information.

Two facts protect you:

• No legitimate recovery service asks for payment upfront to get your money back.
• Government agencies never charge fees to help fraud victims, and never call to say your money has been located.

If someone contacts you about recovering your loss, do not engage. Contact your bank or the agency where you filed your report, using a number you look up yourself.

Week one: the part people skip

Tell someone. A family member, a friend, your bank. Isolation is what the scam engineered, and it does not end when the money does. Victims who talk about it recover faster, make better decisions in the following weeks, and are far less likely to be re-victimized.

If you are helping someone else through this, lead with "this happens to careful people, and it is not your fault." Judgment guarantees that the next incident gets hidden.

Then: reduce the surface

Once the immediate work is done, it is worth shortening the odds of a next time:

• Review the seven signals that show up in almost every scam and the callback rule for phone scams
• Learn to read links before opening them, covered in how to read a smishing message
• If a family member is the one at risk, how to protect an aging parent without taking over their life covers doing that without a fight

Our app for iPhone and our Chrome extension are built for exactly this gap: a second opinion at the moment of decision, and a scam database you can check when something feels off. Vision is free on the App Store and the Chrome Web Store. Questions about it go to support@stopthescam.com.