If a bank transfer scam moved money from your account, contact the sending bank or payment provider immediately. Ask whether it can recall, reverse, freeze, or otherwise recover the payment. The most useful evidence usually combines an official transaction record with messages or other records showing how the scam led to the payment.

Do not wait until you have organized every screenshot. The Federal Trade Commission's guidance for people who were scammed recommends contacting the company that handled the payment as soon as possible and asking whether the transaction can be reversed. A recall or recovery request is not a guarantee that you will get the money back.

This is general information for U.S. consumers, not legal advice. The rules and procedures that apply can depend on the payment method, account type, timing, and whether you authorized the payment.

What to do after a bank transfer scam

1. Call the institution that sent the money

Use the telephone number on your bank statement, debit card, or official banking app. Do not use a number supplied by the scammer. Ask for the fraud department and provide:

• The date, amount, and currency of each transfer
• The recipient's name, account information, phone number, email address, or payment handle
• The transaction, trace, or confirmation number
• Whether you approved the payment or someone accessed your account without permission
• Why you believe the payment was connected to fraud

Ask the bank to open a fraud case and to attempt a recall, reversal, hold, or recovery request if one is available. Ask for the case number, the date of your report, the payment's current status, and any deadline for sending more information.

If a wire transfer company or payment app handled the transaction, contact that company through its official support channel too. Report the payment and ask whether it can be reversed or whether the recipient account or funds can be restricted. A recall may fail if the recipient has already withdrawn or moved the money.

2. Secure the account

If the scammer obtained a password, one-time code, debit card number, or access to your device:

• Change the affected password from a trusted device
• Change passwords on any other accounts that reused it
• Turn on multifactor authentication
• Ask the bank whether online access, cards, or external transfer permissions should be blocked
• Review recent activity for additional unauthorized transactions
• Save suspicious messages and security alerts instead of deleting them

Tell the bank if you believe someone took over the account. An unauthorized account takeover and a payment you approved after being deceived may be reviewed under different procedures.

3. Preserve evidence before it disappears

Save the payment confirmation, account activity, emails, text messages, social media conversations, websites, caller details, and payment instructions. Online profiles and messages can change or disappear, so preserve them promptly.

Download the transaction record from the bank or payment app rather than relying only on a screenshot. Keep the original download unchanged and make a separate working copy for notes or highlighting. Do not crop, edit, rename to obscure the source, or add markings to the original file.

4. Report the fraud

Report the transaction to the relevant bank, payment provider, wire company, or app, and report the scam to the FTC. You can also contact local law enforcement and your state consumer protection agency when appropriate.

The Georgia Consumer Protection Division's scam recovery information likewise advises contacting the financial provider or money transfer company immediately because recovery may become harder after funds move through additional accounts.

If cryptocurrency was involved, notify the exchange or service that handled the purchase or transfer. Preserve the transaction hash, wallet addresses, exchange receipt, and related bank records.

Bank transfer evidence to save

The strongest evidence usually links the movement of money to the communications that caused you to send it.

A bank may restrict the recipient's full personal or account information because of privacy or law-enforcement concerns. Ask what information it is permitted to provide, and record what it refuses or cannot disclose.

Are screenshots enough to prove a bank transfer?

A screenshot can support your account, but a record generated and supplied by the bank or payment provider will generally provide stronger evidence of the transaction. A screenshot may not show whether the payment settled, was reversed, or was later changed. It may also omit the account owner, full reference number, or surrounding account activity.

Screenshots are not automatically inadmissible. There is no universal U.S. rule requiring EXIF data or a particular hash for every screenshot, although the applicable court rules and the facts of the case still matter. Someone may need to authenticate the image and explain when and how it was obtained.

To make a screenshot more useful:

1. Capture the complete transaction details, including the date, amount, recipient, status, and reference number.
2. Keep the original image file and record when and where you obtained it.
3. Do not add markings or change the image. Put explanations in a separate document.
4. Download an official statement or transaction history that matches the screenshot.
5. Preserve the message or email that caused you to make the payment.

A screenshot of a message saying "payment sent" does not establish that the money reached the intended account. The bank's transaction record is more useful for proving the movement of funds.

How to organize evidence for a bank claim or court case

A short, indexed evidence packet is usually easier for a bank or investigator to review than hundreds of unorganized files.

Make a timeline

List the relevant events in order:

• When the scammer first contacted you
• What identity, promise, emergency, investment, or service the scammer used
• When payment instructions arrived
• When you approved or sent each transfer
• When you discovered the fraud
• When you contacted the bank or payment provider
• What response you received

Include the time zone when messages or payments involve people in different locations. Keep the wording factual. Describe what was said or shown without guessing at the scammer's identity.

Create a transaction index

For each payment, record:

• Payment method, such as wire, ACH, bank-linked app, or another rail
• Date and amount
• Sending and receiving account details needed to identify the transaction
• Transaction, trace, confirmation, or blockchain reference
• Current status
• Date reported to the bank
• Bank case number and representative's name, if provided

The index lets the bank match your explanation to its internal records.

Keep originals separate

Store original downloads, email exports, and message files in a read-only or clearly labeled folder. Make a second copy for sharing. If you calculate a file hash such as SHA-256, record the hash and the date. A hash can show that a file has not changed since it was hashed, but it does not prove that the bank created the file or that the underlying event occurred.

Keep a log of who received each copy and when. Use the bank's secure upload portal when available. Do not send complete account numbers, passwords, or access codes through ordinary email.

What different payment methods can prove

Wire transfers

A wire confirmation can show that you instructed your bank to send money. For an applicable international SWIFT payment, the sending bank may be able to provide an MT103 or a Unique End-to-End Transaction Reference, commonly called a UETR.

These records can help banks trace a payment through correspondent institutions. They do not necessarily prove that the beneficiary received the funds, that the named recipient controlled the account, or that the transfer will be refunded. A SWIFT message is a banking record, not a court certificate.

Ask the sending bank for the available wire reference, payment status, recall response, and any information it can lawfully share about the receiving institution.

ACH transfers

ACH records can show the originator or company name, trace number, effective entry date, and amount. Those details help the bank locate the transaction and determine whether it was returned, reversed, or settled.

If you see an ACH debit you did not authorize, report it promptly and ask the bank which error-resolution process applies. Deadlines and protections can depend on the account and the facts. Business accounts and payments you knowingly approved after deception may be treated differently from an unauthorized debit.

Bank-linked payment apps

Save the app's transaction ID, recipient handle, profile name, phone number, email address, and status. Preserve the conversation that led to the payment as well.

The app may have server-side records that are more reliable than a user screenshot. Report the transaction through the app and ask the provider to preserve its records and explain what recovery options remain.

Cryptocurrency funded through a bank account

A blockchain transaction hash can show movement between wallet addresses and may help investigators follow later transfers. It usually does not prove who controlled an address, who made the payment, or whether you consented to it.

Save the exchange receipt, bank debit, wallet addresses, transaction hash, account emails, and messages. Contact the exchange or platform immediately. Many blockchain transfers cannot be reversed, but prompt reporting may help the platform identify or restrict related accounts.

Authorized payment versus unauthorized transfer

Use accurate language when speaking with the bank. These descriptions are not interchangeable:

• Unauthorized transfer: Someone accessed or used the account or payment credentials without your permission.
• Authorized payment induced by fraud: You approved the transaction, but a scammer deceived you about the recipient, purpose, investment, emergency, or promised service.
• Account takeover: Someone obtained access to the account and made payments or changed account settings.
• Payment instruction fraud: You were tricked into changing legitimate payment instructions, such as sending money to a fake vendor account.

Explain exactly what happened instead of choosing the label that sounds most likely to produce a refund. The payment rail, account type, timing, and applicable law can affect the bank's review. Ask which claim or error process applies and which supporting records it needs.

Can bank transfer records be admitted in court?

"Admissible" means a court may consider evidence under the applicable rules. It does not mean the evidence automatically proves fraud or entitles someone to a refund.

A U.S. court will commonly consider whether the record is:

• Relevant: It helps establish a disputed fact, such as payment, identity, timing, or loss.
• Authenticated: A witness, bank representative, certification, or other evidence connects the record to the transaction.
• Free from an unresolved hearsay problem: A bank's regularly maintained records may qualify for a business-records exception when the applicable requirements are met.
• Reliable and complete: The record includes enough context to show what happened and has not been selectively altered.

In federal court, Federal Rule of Evidence 902 provides certain self-authentication methods, including routes for certified business records and specified electronic records. Federal Rule of Evidence 803 includes the business-records exception to the hearsay rule. State courts may use different rules, and a court can still reject a record for another reason.

A certified bank record may reduce an authentication dispute, but certification is not always required. A person with knowledge may identify a screenshot or email, and the bank's own records may corroborate it. Federal Rules of Civil Procedure 26 and 34 concern discovery and the exchange of information in federal civil litigation; they do not require every screenshot to contain metadata.

If litigation is already pending, a lawyer can assess whether a records request, subpoena, custodian certification, or expert testimony is appropriate. Do not alter the evidence while waiting for legal advice.

What the evidence can and cannot prove

A persuasive fraud claim usually connects the payment record, communications, account-access history, and prompt report to the provider. No single screenshot or reference number normally establishes every part of the claim.

If the bank denies the claim

Ask the bank for its decision in writing. Ask what it means by "authorized," which payment record it relied on, and whether an appeal or separate error-resolution process is available.

Explain whether you approved the payment because of deception, whether someone accessed your account, and when you first discovered the problem. Keep the bank's response, case number, and any submitted documents with your evidence packet.

If the loss is substantial or a dispute is developing, ask a licensed attorney or legal-aid organization about available remedies and records requests. Continue preserving the original files and use secure channels for any additional submission.

A suspicious activity report is a regulatory filing made by a financial institution, not a form consumers file to obtain a refund. Your bank may investigate or make its own report. Your task is to give the bank accurate facts, report the scam through the appropriate channels, and preserve the records supporting your account.

Frequently asked questions

Does a bank have to refund a transfer scam?

Not automatically. The result can depend on whether the transfer was unauthorized, whether you approved it after being deceived, the payment method, how quickly you reported it, and the bank's applicable legal and contractual duties. Ask the bank to explain its decision in writing and whether an appeal or separate error process is available.

Is an MT103 proof that the recipient got the money?

No. An MT103 can document an applicable international payment message and help a bank trace the transfer. It does not by itself prove final credit to the recipient or establish that the recipient controlled the account.

Should I file a suspicious activity report myself?

No. Report the facts to the bank, payment provider, FTC, and other appropriate authorities. A suspicious activity report is generally a financial institution's regulatory filing and is separate from your fraud claim.

How long should I keep the evidence?

Keep it while the bank claim, investigation, insurance matter, or court dispute is open. If you may pursue legal action, ask a lawyer about the applicable record-retention period before deleting anything. Preserve the original files even after sending copies to the bank.

What should I do if the bank says the transfer was authorized?

Ask the bank what it means by "authorized" and request the specific payment record it relied on. State whether you approved the payment because of a scam, whether someone accessed your account, and when you first discovered the problem. Keep the response with your evidence packet and ask which review or appeal process applies.