The moment it clicks that the message was fake and the money is already gone, your stomach drops. You might feel embarrassed or angry at yourself, but none of that is what matters right now. What matters is the next few hours, because with most scams the speed of your response is the single biggest thing that affects whether any money comes back. Take a breath, and work through this in order.
The first calls you make decide almost everything
Before you report anything to the government, contact the business that moved your money. No matter how you paid, the FTC says it is always worth asking the company you used whether you can get your money back, and the sooner you act, the better your chances.
This is not a step to put off until tomorrow morning. Reach out now, even if it is after hours, using the fraud or dispute line on the back of your card or inside your app.
What you ask for depends on how the money left your hands.
Credit or debit card. Contact the card company or bank right away and ask for a chargeback to reverse the charges. This carries the best odds of any payment method, especially with credit cards.
Gift card. Contact the issuer immediately. The FTC says some gift card companies flag and freeze stolen funds, so the faster you contact any gift card company to report a gift card scam, the better the chance of getting your money back.
Wire transfer. Contact the bank or wire company immediately and ask to reverse it. The FTC notes that it is unlikely to happen, but it is important to ask.
Money transfer app such as Zelle, Cash App, Venmo, or PayPal. Contact the company behind the app. If the app is linked to a card or bank, contact your card company or bank first.
Cryptocurrency. The FTC states that while it is very difficult to get your money back when you pay using cryptocurrency, you can still ask the company to reverse it. Crypto does not have the same legal protections as credit or debit cards, and payments usually cannot be reversed.
Cash or money order mailed. Try to stop delivery, for example by contacting USPS.
Knowing if it was authorized or unauthorized sets your legal rights
One distinction shapes nearly everything about your case, so figure it out early. An unauthorized transaction is one where someone got into your account and moved money without you. An authorized transaction is one you sent yourself after being tricked.
Federal law treats these very differently.
Unauthorized transactions are protected by federal law and are often reimbursable if you report them fast. Payments you authorized after being tricked may not be recoverable.
Zelle frames this exactly on its own site: unauthorized activity it calls fraud typically qualifies for reimbursement under Regulation E, while a scam, meaning you authorized the payment after being tricked, means you may not be able to get your money back.
What the law actually covers
For unauthorized electronic fund transfers, including debit card, bank account, and many payment app transactions, the Electronic Fund Transfer Act and Regulation E (12 CFR Part 1005) cap your liability. Per the CFPB, that is up to $50 if you notify your bank within two business days of discovering the loss or theft, up to $500 if you notify after two business days, and potentially unlimited for amounts that post after a 60-day window measured from when the statement showing the unauthorized transfer was sent.
This is why reporting within hours, not days, protects you.
For unauthorized credit card charges, the Fair Credit Billing Act and Regulation Z apply. The CFPB says the most you will owe for unauthorized charges on the card is $50, and many card agreements impose zero liability.
If only your account number was stolen and not the physical card, you generally have no liability. To formally dispute a billing error you must send a written billing-error notice within 60 days of the charge appearing on your statement.
The issuer must acknowledge within 30 days, and you do not have to pay the disputed amount while it is being investigated.
Here is the limit you need to be honest with yourself about. These liability caps and dispute rights apply to unauthorized transactions.
Payments you authorized yourself, even when a scammer tricked you into making them, generally fall outside these protections.
The honest outlook on getting your money back
You deserve a straight answer rather than false comfort. Recovery depends entirely on how you lost the money, and the biggest factor is whether the transaction was unauthorized or authorized.
Unauthorized electronic transfers and unauthorized card charges carry strong federal protection and are often reversible if reported fast. Payments you authorized to a scammer generally do not have those protections.
In plain terms, money you sent yourself by wire transfer, gift cards, cryptocurrency, or a push payment you approved is frequently not recoverable. The FTC is direct about this: reversing a wire is unlikely to happen, and getting money back after paying with cryptocurrency is very difficult.
That does not mean you skip the calls and reports. Fast reporting to your bank and to the FBI's IC3 still offers the best chance you have, even when that chance is limited.
If your loss was unauthorized, your footing is much stronger as long as you report quickly. Either way, act within hours, not days, and keep written records of every call, claim number, and response.
Lock down your accounts and device next
Whether or not money moved, assume the criminals may still have a way in. CISA advises that if you may have revealed sensitive information, immediately change any passwords you might have revealed.
If you reused that password anywhere else, change it on every account that shares it. Do this from a device you know is clean.
Turn on two-factor or multi-factor authentication wherever it is offered. It adds a second barrier so that even if a scammer already has your password, they still cannot get in.
If you think you clicked a phishing link or opened an attachment that may have downloaded harmful software, the FTC advises updating your computer's security software, running a scan, and removing anything it flags as a problem.
Reporting it through the official channels
Reporting helps even when your own recovery is unlikely. It supports investigations, can back up your bank claim, and helps agencies build cases and spot trends.
Work through these:
- 1.If a scammer has personal information like your Social Security, credit card, or bank account numbers, go to IdentityTheft.gov at www.identitytheft.gov/. It generates a personalized recovery plan and an Identity Theft Report based on what was exposed. Steps include placing a free one-year fraud alert with one of the three credit bureaus and getting your free credit reports at www.annualcreditreport.com/ or 1-877-322-8228. The FTC ID theft line is 1-877-438-4338.
- 2.Report the phishing attempt and any loss to the FTC at reportfraud.ftc.gov/. The FTC uses reports to build cases against scammers, spot trends, and share data. It does not resolve individual disputes, but your report supports enforcement.
- 3.File a complaint with the FBI's Internet Crime Complaint Center at www.ic3.gov/, complaint form complaint.ic3.gov/, as soon as possible. This matters most for wires and larger losses. For wire and business-email-compromise type fraud, IC3's Recovery Asset Team can trigger the Financial Fraud Kill Chain to request that the recipient bank freeze fraudulent funds, which works best when reported within roughly the first day or two.
- 4.Forward the phishing message to the right place. Per the FTC, forward a phishing email to the Anti-Phishing Working Group at [email protected], and forward a phishing text message to SPAM (7726) so your wireless carrier can block similar messages.
- 5.Escalate to the CFPB at www.consumerfinance.gov/complaint/ if your bank, card issuer, or payment provider will not resolve an unauthorized-transaction dispute. The CFPB forwards your complaint to the company and seeks a response. Reg E generally requires the institution to investigate and resolve errors within set timeframes, often 45 days, with provisional credit in many cases.
Watch out for the second scam that targets victims
This part is critical, because the people who took your money often are not finished. If anyone contacts you promising to recover your lost funds for an upfront fee, treat it as almost certainly a second scam.
These offers frequently come from the same criminals, or others working from recovery and refund lists of people who were already hit.
Protect yourself with three firm rules. Never pay a fee to get your money back.
Never share new account or wallet access with someone offering to help you recover funds.
Report any such offer to the FTC at reportfraud.ftc.gov/. Legitimate agencies and your own bank will never ask you to pay them in order to release money that is owed to you.
One quiet habit that keeps this from happening again
Once the urgent work is done, the strongest long-term protection is treating unexpected messages with suspicion. Phishing works by creating pressure to click a link, open an attachment, or move money fast.
When a message pushes you to act immediately, slow down and verify it through a channel you already trust, such as the number printed on your card or the official app, rather than anything inside the message.
Keeping two-factor authentication on and your security software updated turns one mistake into something a scammer usually still cannot exploit.
Frequently Asked Questions
Will I definitely get my money back if I report fast?
No, and anyone who guarantees it is not being honest with you. Reporting fast gives you the best chance, and for unauthorized transactions federal law gives you real protection. But money you authorized and sent yourself, such as a wire, gift cards, or cryptocurrency, is frequently not recoverable even when you report immediately.
What is the difference between fraud and a scam on my account?
As Zelle explains it, fraud means someone accessed your account and moved money without you, which is unauthorized and typically qualifies for reimbursement under Regulation E. A scam means you authorized the payment after being tricked, and in that case you may not be able to get your money back.
Should I still report it if recovery looks unlikely?
Yes. Even when your own money may not come back, reports to the FTC and IC3 aid investigations, help freeze funds in some wire cases, and can support your bank claim. Keep written records of every report and response.
Someone offered to recover my money for a fee. Is that real?
Almost certainly not. Offers to recover lost funds for an upfront fee are usually a second scam, often run by the same criminals. Never pay a fee to get money back, never hand over new account or wallet access, and report the offer to the FTC at reportfraud.ftc.gov/.
How fast do I need to act for the strongest legal protection?
Within hours where possible. Under Regulation E, notifying your bank within two business days of discovering an unauthorized transfer caps your liability at up to $50, rising to up to $500 after that, and potentially becoming unlimited for amounts that post after a 60-day window from when the statement was sent.