Stop reading the coverage of how the scam works. You already found that out. What you need now is the recovery playbook — what to do in the next hour, the next day, and the next month.
The first 24 hours are the most important. That is not an exaggeration. Wire recall requests submitted within two hours succeed far more often than those submitted 48 hours later. Chargeback rights are time-limited. Evidence disappears. Bank fraud teams have escalation paths that close quickly. So before you do anything else, move fast, document everything, and do not pay anyone who says they can get your money back.
The short answer. Act in this order. First, call your bank or card issuer’s fraud team and request a chargeback (credit card) or wire recall (wire transfer). If you sent crypto, contact the receiving exchange right away. Second, screenshot and archive every piece of evidence before it disappears. Third, report to IC3 (US), Action Fraud (UK), or the 1930 helpline (India). Then freeze your credit if you shared any identity details. And ignore anyone who contacts you offering to recover your money for a fee. That is the recovery scam, the predictable second wave.
The First Hour: Stop the Bleeding
If you paid by credit card
Call your card issuer immediately. Tell the fraud team you were scammed and you want to dispute the charge. In the United States, the Fair Credit Billing Act gives you the right to dispute unauthorized or fraudulent charges on a credit card within 60 days of the statement date. Most issuers will provisionally credit your account while they investigate. This is your strongest recovery path.
Do not just call customer service. Ask specifically for the fraud department or disputes team. Get a case number before you hang up.
If you paid by debit card
Your protections are weaker here. The Electronic Funds Transfer Act gives you dispute rights, but the timeframes are tighter: two days for zero liability, then up to 60 days for limited liability. Many banks also treat debit disputes more skeptically than credit card disputes. Call your bank immediately regardless. Ask for the fraud team. Request they initiate a recall or reversal.
If you wired money
A wire transfer is the hardest payment to recover. Once the receiving bank has released the funds, the odds drop sharply. That said: call your bank’s fraud department right now and ask them to initiate a wire recall. SWIFT wire recalls are a real mechanism — the sending bank contacts the receiving bank and requests a return of funds. Success rate is low for cross-border wires to foreign accounts, but it is not zero in the first few hours. Give the fraud team every detail: amount, destination bank name, account number if you have it, date and time.
Domestic wire transfers within the same country move through systems like Fedwire or CHAPS and can sometimes be recalled faster. Tell the fraud team the receiving bank’s name if you know it — they can contact their correspondent bank directly.
If you sent cryptocurrency
Cryptocurrency transactions confirmed on the blockchain are, in most cases, irreversible. There is no bank to call a recall. But there are two things worth doing immediately:
First, document the wallet address you sent to. Copy it exactly. You will need it for reports.
Second, the scammer may have given you a deposit address at a centralized exchange such as Binance, Coinbase, or Kraken. If so, contact that exchange’s fraud team immediately with the wallet address, transaction hash, and a brief explanation. Some exchanges will freeze the funds in that account pending investigation, especially if you reach them before the scammer withdraws to an external wallet. This window is short. Do it now.
Report the wallet to ChainAbuse.com, which aggregates blockchain fraud reports and is monitored by some exchanges and law enforcement.
Document Everything Before It Disappears
Scammers delete accounts, shut down fake websites, and change phone numbers fast. Before you file a single report, capture:
- Screenshots of all communications (texts, emails, chat apps)
- The website URL and a screenshot of it — then use web.archive.org/save to archive it
- The phone number, email address, and any names used
- Payment confirmations and receipts
- The crypto wallet address and transaction hash if applicable
- Any profiles on dating apps, social platforms, or investment platforms
Save all of this to a folder. You will attach it to every report you file.
Reporting: Where to File and Why It Actually Matters
Many scam victims never report because they feel embarrassed or believe nothing will happen. Both reactions are understandable. But reporting matters for three reasons. It creates the paperwork trail your bank and insurer will require. It may unlock compensation mechanisms. And at scale, law enforcement does build cases from aggregated reports. The U.S. Department of Justice indictments against IRS impersonation call centers in India relied heavily on pattern data built from IC3 reports.
United States
- FBI IC3 — ic3.gov. The Internet Crime Complaint Center is the primary federal intake for cybercrime and fraud. File here even if the scam seems “small.” This data feeds federal prosecutions.
- FTC — reportfraud.ftc.gov. The Federal Trade Commission tracks scam patterns, publishes consumer alerts, and uses complaint data to take enforcement actions. Filing here also links your report to IdentityTheft.gov recovery tools if identity theft is involved.
- Your state attorney general — Most state AGs have consumer protection divisions with online complaint forms. Search “[your state] attorney general consumer complaint.”
- CISA — cisa.gov/report for technology-related fraud including phishing, ransomware, and business email compromise.
United Kingdom
- Action Fraud — actionfraud.police.uk. The national fraud and cybercrime reporting center. You will get a crime reference number, which you need for bank complaints and insurance claims.
- Ofcom — For phone-based fraud including spoofed numbers, report to ofcom.org.uk.
- Financial Conduct Authority — fca.org.uk/consumers/report-scam for investment fraud, clone firm fraud, and unauthorized financial services.
India
- Cyber Crime Helpline — Dial 1930. This is the fastest route. The National Cybercrime Reporting Portal operates a financial fraud response mechanism that can send freeze requests to partner banks within hours if called quickly. Do not wait to file online — call 1930 first.
- National Cyber Crime Reporting Portal — cybercrime.gov.in. File a written complaint here after calling 1930.
European Union
- EUROPOL — Cross-border fraud involving multiple EU countries can be reported through europol.europa.eu/report-a-crime.
- Your national police cybercrime unit (BKA in Germany, OCLCTIC in France, Guardia Civil Cybercrime in Spain).
Cryptocurrency fraud (all regions)
- ChainAbuse.com
- The specific exchange or platform involved
- The FTC (US) or Action Fraud (UK)
- CipherTrace and similar blockchain analytics firms accept reports that can support law enforcement investigations
Financial Recovery: Honest Assessment by Payment Type
Here is a realistic breakdown. The amounts in the left column are rough thresholds where each option is worth pursuing seriously.
Credit card chargeback — Strongest protection. Time-limited (60 days in the US; similar in UK and EU). Most issuers will provisionally credit while investigating. Success rate is high when the merchant is clearly fraudulent.
Debit card / bank transfer — Weaker protections in the US; no federal equivalent to the credit card rules. In the UK, the Authorized Push Payment (APP) fraud reimbursement scheme, implemented October 2024, now requires banks to reimburse victims of APP fraud up to £85,000. If you are in the UK and you were tricked into authorizing a bank transfer, your bank is legally obligated to reimburse you under this scheme — file an APP fraud complaint with your bank specifically.
Wire transfer to domestic account — Low but non-zero recovery rate if reported within hours. Contact both the sending and receiving bank. File with IC3 or Action Fraud. For amounts above $10,000, also contact your local FBI field office directly.
SWIFT wire to foreign accounts — Very low recovery rate once the transfer clears. File all reports, document everything, and set realistic expectations. Your bank may voluntarily reimburse for a limited number of verified fraud cases, particularly if you are a long-standing customer — ask directly about their fraud reimbursement policy.
Zelle (US) — Bank of America, Wells Fargo, and JPMorgan Chase have faced significant regulatory pressure over Zelle fraud. If you were deceived into sending money via Zelle, file a dispute with your bank citing fraud (not just an unauthorized transaction — a scam-induced authorized payment). Some banks have expanded their policies; persistence matters here.
Civil litigation — If the fraudster is identified, has assets, and the amount exceeds roughly $10,000 to $20,000, a civil lawsuit is worth discussing with an attorney. For smaller amounts, Small Claims Court is an option in many jurisdictions without requiring legal representation. If the scam operated as a business entity — a fake investment firm, a fake tech support company — a judgment against the entity is possible even if collecting is difficult.
Insurance — Check your homeowners or renters policy. Some policies include riders for identity theft or financial fraud. This is often overlooked. Call your insurer and ask specifically whether your policy covers fraud losses. If you have a standalone identity theft protection product, read the terms carefully — some cover direct financial losses, some only cover recovery costs.
Your Identity After a Scam
What you gave the scammer determines what you need to lock down.
If you gave your Social Security Number, date of birth, or government ID documents:
Treat this as a personal data breach. Freeze your credit at all three bureaus immediately:
- Equifax — equifax.com/personal/credit-report-services/credit-freeze
- Experian — experian.com/freeze/center.html
- TransUnion — transunion.com/credit-freeze
A credit freeze is free, immediate, and prevents new accounts from being opened in your name. It does not affect your existing accounts or credit score. It stays in place until you lift it. A separate post on this blog covers the difference between a credit freeze and a fraud alert in detail — short version: freeze is the stronger tool.
Also place a fraud alert (one bureau notifies the others) and consider enrolling in credit monitoring for 12 months.
In the US, report potential identity document misuse to the Social Security Administration at ssa.gov. In the UK, contact CIFAS (cifas.org.uk) about a protective registration, which flags your identity to member lenders. In India, contact UIDAI regarding your Aadhaar at uidai.gov.in if your Aadhaar details were disclosed.
If you gave an email address and password:
Change that password immediately on every service where you used it. Enable two-factor authentication. Check haveibeenpwned.com to see if that email is in known breach data.
If you gave bank account details (account number, sort code, routing number):
Monitor your accounts closely for fraudulent transactions. Contact your bank and ask whether they recommend issuing a new account number. Some banks will do this as a precaution for verified fraud cases.
If you gave ID document photos (passport, driving licence, national ID):
In the UK, report to the DVLA if your driving licence was involved; contact the Identity and Passport Service for passport fraud. In the US, report to the FTC at identitytheft.gov — this generates a personalized recovery plan. In India, if ID documents were photographed and misused, UIDAI has a process for biometric locking at uidai.gov.in.
The Recovery Scam: Know the Pattern Before It Reaches You
This is important enough to repeat, even though there’s a full post on it: the guide to recovery scams. Do not engage with anyone who contacts you unsolicited claiming they can recover your money.
This is a documented second victimization pattern. Criminal networks that run investment scams, romance scams, and crypto fraud routinely sell their victim lists to “recovery” operations — sometimes the same network runs both. The caller may know your name, the amount you lost, the name of the fake platform you used, and your IC3 case reference number. They use all of this to sound legitimate.
The tell is always the same: they ask for money upfront, in crypto or wire transfer, before they recover anything.
No legitimate law enforcement agency, law firm, or government body charges upfront fees to recover funds. If someone calls you after you’ve been scammed with an offer to help, hang up. If they have your case number and other accurate details, that is evidence of information theft, not legitimacy. Report it to IC3 or Action Fraud.
The Emotional Dimension
Research consistently finds that fewer than 15% of scam victims file a formal report, with shame cited as the primary barrier. That shame is not incidental. It is deliberately engineered. Romance scams, investment scams, and elder fraud are built around trust. The psychological manipulation in long-running pig butchering scams and romance frauds closely mirrors the tactics studied in coercive control research: gradual isolation, fabricated intimacy, escalating commitment, and manufactured urgency. Being deceived by a sophisticated, well-resourced operation is not evidence of poor judgment. It is evidence that the operation was effective.
If you are struggling with the aftermath, these organizations provide non-judgmental support:
- AARP Fraud Watch Network (US) — helpline: 1-877-908-3360. Open to all ages despite the name.
- Victim Connect (US) — victimconnect.org, 1-855-4-VICTIM
- Action Fraud support (UK) — actionfraud.police.uk links to victim support services after you file
- Cyber Crime Helpline 1930 (India) — also connects to victim support resources
Talking to someone who handles these cases regularly — rather than someone close to you who may not understand how sophisticated these operations are — often helps more.
Long-Term: Reducing Your Exposure
After the immediate recovery steps, a few longer-term actions reduce your risk.
Register for Do Not Call lists. In the US, the National Do Not Call Registry is at donotcall.gov. In the UK, the Telephone Preference Service is at tpsonline.org.uk. These won’t stop calls from offshore operations, but they establish a legal basis to report ongoing harassment and reduce domestic marketing volume.
Enable spam filtering at carrier level. Major carriers (Verizon Call Filter, AT&T ActiveArmor, T-Mobile Scam Shield) offer call screening that can block spoofed and flagged numbers. Some are free; some are paid tiers.
Monitor your data for resale. If your contact and personal details were given to a scammer, they may end up in breach dumps that circulate on fraud forums and get sold to other criminal operations. Services that alert you when your email or phone number appears in new data dumps can give you early warning that your information is circulating. This won’t undo the scam, but it lets you stay ahead of secondary use. It also helps to get your records off the data broker sites that scammers buy from. KnytX Shield isn’t live yet; once it launches, it’s built to find and remove those listings for you. Join the waitlist to get in early.
Brief your household. If you share finances or identity documents with family members, let them know what happened. Scammers with your information may attempt to reach family members. They do not need to know the full story — they need to know the warning signs.
Quick Reference Checklist
Within the first hour:
- Call your bank or card issuer — ask for the fraud team
- Request a chargeback (credit card) or wire recall (wire transfer)
- Contact the crypto exchange if you sent to a custodial address
- Screenshot and archive all evidence
Within the first 24 hours:
- File with IC3 (US), Action Fraud (UK), or 1930 / cybercrime.gov.in (India)
- File with the FTC (US) or FCA (UK) for investment fraud
- Freeze your credit if you gave any identity information
- Change compromised passwords and enable two-factor authentication
- Check your insurance policy for fraud coverage
Ongoing:
- Monitor bank and credit accounts daily for 30 days
- Enroll in credit monitoring for 12 months
- Do not respond to anyone offering to recover your money
- Register for Do Not Call lists
- Check haveibeenpwned.com for your email address
The window matters. Start with the first item on that list before you finish reading this page.