If a scammer already has your money or personal information, lock the account and payment method before you do anything else. After that, keep the records, use the dispute process that matches how you paid, and report the conduct if it looks like fraud or a deceptive practice.

These steps are for U.S. consumers. State law, the contract, and the payment method can change the deadline and the remedy, so don't copy a timeline from another state or from a different kind of transaction.

Choose the correct complaint route

What to do first after a scam or data exposure

Scammers want panic. Speed still matters, but only through channels you already trust.

1. Contact the affected provider through an official channel. Use the company's app, a statement, or a web address you type yourself. Ask whether the account, card, transfer, or wallet can be locked or reviewed.
2. Change compromised passwords. Start with email, banking, payment, and mobile-carrier accounts. Use unique passwords and turn on two-factor authentication.
3. Preserve evidence. Keep receipts, emails, texts, caller details, website addresses, transaction records, screenshots, and cancellation confirmations. Keep original files when you can.
4. Protect your credit if personal information was exposed. A security freeze is free and stays in place until you ask the bureaus to lift it. Place it with Equifax, Experian, and TransUnion.
5. Report identity theft or fraud. Use IdentityTheft.gov for an identity-theft report and recovery plan. Report scams and illegal business practices at ReportFraud.ftc.gov.
6. Watch for follow-up activity. Check bank and card alerts, account logins, and credit reports. An account in your name that you don't recognize can be a sign of identity theft.

Don't pay a supposed recovery agent just because the person knows details about your loss. A promise of guaranteed recovery is another warning sign.

How to freeze credit after identity theft

A credit freeze can make it harder for someone to open new credit in your name. The FTC's guidance on credit freezes and fraud alerts says freezes are free and remain until you tell the bureaus to remove them.

A freeze and a fraud alert do different jobs:

• Credit freeze: Restricts access to your credit report for many new-credit applications. You place and manage it with the bureaus.
• Fraud alert: Puts a warning on your credit file and can be renewed. The FTC says renewal may require you to resubmit an FTC identity-theft report or a police report.

Neither tool reverses a charge on a card you already have, and a freeze does not, by itself, remove a fraudulent account. Call or write the card issuer or creditor, say the account is unauthorized, and ask which documents they need. Keep copies of every submission and every confirmation number.

After the incident, check your credit reports on a regular schedule. Look for new accounts, hard inquiries, changed addresses, and collection accounts you don't recognize.

How to dispute a credit-card charge under the FCBA

The Fair Credit Billing Act sets a written process for qualifying credit-card billing errors. It does not automatically cover debit cards, ACH transfers, wires, prepaid cards, or person-to-person payments.

The FTC's credit-card dispute guidance says to send a written dispute so that it reaches the issuer within 60 days after the first statement containing the error was sent to you.

Include:

• Your name and account number, or the last four digits
• The transaction date and amount
• A clear explanation of the error
• The correction or credit you want
• Copies of useful records, such as a receipt or cancellation confirmation

Keep a copy of the letter and proof of delivery. A phone call can help lock a compromised account, but don't treat a call as a substitute when that written deadline applies.

Once the issuer has the dispute, it generally must acknowledge it in writing within 30 days unless the matter is already resolved. The investigation must finish within two complete billing cycles, and no later than 90 days after the issuer received the notice.

Asking the merchant for a refund is a separate step from the issuer's billing-error process. Write the merchant if that helps, but don't let that conversation eat the card-dispute window. If the issuer rejects the claim, ask for the decision and the supporting explanation in writing, then read the statement and card agreement for any further steps.

How to file a consumer complaint step by step

Stick to dates, amounts, and documents someone else can check.

1. Build a timeline

List the purchase or account-opening date, the promised delivery or service date, the cancellation date, the payment date, when you found the problem, and each contact with the business. Add names, case numbers, and what they told you.

2. Ask the business for a specific remedy

Write through a channel that leaves a record. State what happened, attach the evidence, and ask for one outcome: a refund, a correction, a replacement, account closure, or removal of an unauthorized charge.

Keep the ask short:

On [date], I paid [amount] for [product or service]. The problem is [specific issue]. I am requesting [specific remedy]. Please respond in writing and confirm the next step.

Skip threats, insults, and legal conclusions you can't support. If a deadline matters, use a delivery method that gives you proof.

3. Contact the payment provider

If the business does not fix it, go to the institution that handled the payment. Say whether you are dealing with a credit-card billing error, an unauthorized debit, an ACH transfer, a wire, a prepaid payment, or a P2P transaction. The process depends on that rail.

For a credit-card billing error, use the written FCBA process. A merchant complaint alone does not meet that requirement.

4. Report fraud or deceptive conduct

File with the FTC at ReportFraud.ftc.gov. Include the business name, website, contact information, dates, amount, payment method, and a short description of what happened.

That report does not replace an urgent request to your bank, card issuer, or payment provider. Those companies still control their own account-security and transaction-review procedures.

5. Escalate locally when appropriate

For state-specific consumer rights, check your state attorney general or consumer-protection office. The contract may also require arbitration or another dispute process. If a substantial amount is still at issue, look up your state's small-claims rules or talk with a qualified professional about the deadline and the forum.

Subscription traps and automatic renewals

A free trial or a low intro price can turn into a recurring charge if the renewal terms are easy to miss. Before you sign up, write down:

• The trial length and the price after the trial
• The billing frequency and renewal date
• Whether the plan renews automatically
• The cancellation steps and any account requirements
• The business name that will appear on your statement

The FTC's official description of its amended Negative Option Rule covers negative-option programs such as automatic renewals, free trials, continuity plans, and prenotification offers, and it discusses clear disclosure of material terms. Effective dates, litigation, federal requirements, and state auto-renewal laws can change. Don't treat a summary of that rule as the answer to every cancellation dispute.

Cancel through the merchant's stated process and save a screenshot with the date and confirmation. If you can, save the confirmation email as a PDF or forward it to an account you control. Check the next statement instead of assuming billing stopped.

If a credit-card charge shows up after a valid cancellation attempt:

1. Contact the merchant in writing and attach the cancellation confirmation.
2. Ask the card issuer whether the charge qualifies as a billing error.
3. If it does, send the issuer a written dispute within the applicable FCBA period.
4. Keep watching later statements and report new charges promptly.

A merchant's voluntary refund policy is not a guarantee that every recurring charge will be reversed.

How to avoid online, crypto, and AI-enabled scams

A polished logo, a familiar company name, caller ID, or a convincing AI-generated voice does not prove the request is real.

Before you send money or information:

• Pause on urgent demands. End the call or close the message. Reach the organization through a website, statement, or app you already know.
• Verify the transaction independently. Don't use the phone number, link, or QR code that arrived in the unexpected message.
• Protect sensitive information. Don't share passwords, one-time codes, Social Security numbers, bank credentials, or private documents with an unverified person or chatbot.
• Check the payment rail. A credit-card purchase, debit transaction, wire, ACH transfer, crypto transfer, and P2P payment can have different recovery procedures.
• Review the business before paying. Check the legal business name, written terms, return policy, contact information, and whether the offer makes unrealistic promises.
• Turn on alerts. Account, transaction, and login alerts can show unauthorized activity sooner.
• Save evidence before deleting anything. Keep the message, wallet address, transaction hash, receipt, and account information.

If you connected a crypto wallet or approved a suspicious transaction, stop talking to the sender, secure the email and exchange accounts tied to the wallet, and contact the wallet or exchange through its official support channel. Disputing a card payment will not necessarily reverse a separate crypto transfer.

Warranties, lemon laws, and privacy rights

There is no single U.S. checklist for warranty or lemon-law claims. The state, the product, the warranty language, the repair history, and the type of vehicle or transaction can all change the result.

For a defective product or vehicle:

1. Keep the receipt, warranty, repair orders, photographs, and messages.
2. Record each defect and repair attempt by date.
3. Ask the seller or manufacturer in writing for the remedy promised by the warranty, the return policy, or the law that actually applies.
4. Read your state's official consumer-protection guidance before you send a notice or rely on a specific repair-attempt or deadline rule.

Don't copy a notice written for Maryland or another state and assume it applies where you live.

Privacy rights vary too. The California Consumer Privacy Act and the European Union's General Data Protection Regulation are not universal rules for every U.S. consumer or business. Use the company's official privacy-request process, ask which law applies to your request, and save the submission and the response. A privacy request is separate from locking down an account after identity theft.

Consumer complaint checklist

Before you submit a complaint or dispute, confirm that you have:

• The correct company, creditor, bureau, or payment provider
• The payment method and transaction reference
• A dated timeline of events
• Receipts, contracts, screenshots, and correspondence
• Proof of cancellation or prior notice
• A specific remedy you are requesting
• Copies of letters and delivery records
• A record of every case number and response
• Redacted documents that omit unnecessary passwords, full account numbers, and sensitive identity data

Secure the account or payment that is still at risk. If the problem is a credit-card billing error, send the written dispute so it arrives before the 60-day FCBA window closes, then report suspected fraud separately to the FTC.